Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/WmtRxk_M-VhYSiPXgXSHVKrKTXI.roa
File: WmtRxk_M-VhYSiPXgXSHVKrKTXI.roa (raw, json)
Hash identifier: Z4LxpPa6CoI5UN2cYfPPSchLm3rTgXKJy/pF6lbIf+E=
Subject key identifier: 5A:6B:51:C6:4F:CC:F9:58:58:4A:23:D7:81:74:87:54:AA:CA:4D:72
Certificate issuer: /CN=fd658693ec327ead4fe83a57b82601cc2552aabd
Certificate serial: 01968C18141FAB0760C28A71BB6052FE5BD1
Authority key identifier: FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/WmtRxk_M-VhYSiPXgXSHVKrKTXI.roa
Signing time: Thu 01 May 2025 13:45:10 +0000
ROA not before: Thu 01 May 2025 13:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 185.130.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 07:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:18:14:1f:ab:07:60:c2:8a:71:bb:60:52:fe:5b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd658693ec327ead4fe83a57b82601cc2552aabd
Validity
Not Before: May 1 13:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a6b51c64fccf958584a23d781748754aaca4d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:b2:a7:2f:92:27:55:09:50:ee:48:f9:9c:
aa:6b:dd:8d:db:1f:9e:0f:d9:df:3f:d5:2d:8a:94:
a1:b6:e4:38:4d:2a:c4:12:3f:a4:af:65:48:7a:7e:
65:b3:64:79:68:7c:a8:01:16:a7:a7:8c:7e:c6:a0:
f7:40:7c:e7:0a:a5:52:15:12:b2:45:8b:d3:ba:70:
42:6d:6d:64:3b:77:a0:73:b8:84:67:7d:cf:5c:46:
57:95:3b:c4:ce:a5:44:81:bc:53:bf:35:bf:39:49:
6c:57:d8:35:d3:48:74:dd:7d:52:04:1d:08:ae:c4:
ca:4d:b4:3b:62:ae:a4:02:1c:de:58:ab:1f:22:99:
38:79:6f:e0:3c:92:a5:1e:7f:1e:f4:8c:0d:ac:74:
1e:3c:84:59:19:fb:1f:4a:43:76:f2:70:43:0f:6d:
47:6e:3d:ca:a4:f4:58:87:66:37:97:38:6c:a5:57:
b6:a4:2b:46:49:49:3c:39:3f:fe:89:23:1f:f3:fb:
4a:51:06:14:37:38:1a:45:cc:72:29:3b:fb:8d:5b:
bc:49:e0:d7:3f:c8:59:3c:83:3f:d2:ff:f2:49:3d:
60:65:ad:73:e8:1c:dc:29:95:c5:de:da:3e:96:77:
6f:8b:77:a3:c6:f4:77:27:68:bc:6c:d8:1f:ec:a5:
48:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6B:51:C6:4F:CC:F9:58:58:4A:23:D7:81:74:87:54:AA:CA:4D:72
X509v3 Authority Key Identifier:
keyid:FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/WmtRxk_M-VhYSiPXgXSHVKrKTXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.89.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:75:ae:d7:bd:40:c3:34:88:6f:3b:f6:0d:cb:e1:42:df:8c:
3a:e2:23:04:92:d5:90:d5:0a:f3:1b:8b:5a:50:37:e3:c6:dc:
0e:7a:70:ed:89:6e:8e:e6:ba:f9:29:b9:19:34:a1:8d:ce:ad:
35:e0:76:67:84:f9:91:ea:53:6f:7c:a7:d5:46:3f:f0:b2:37:
67:01:fa:6a:71:eb:58:76:db:f0:da:e3:eb:6c:02:11:09:9a:
ad:4f:e8:a2:45:9b:33:72:5b:07:3c:c7:ad:0f:e9:21:51:ad:
05:c2:54:13:09:0a:f3:39:ee:79:ed:bd:e9:80:55:35:15:88:
ed:69:e7:2a:e2:58:50:87:10:c4:29:a4:35:95:59:20:d6:6a:
58:70:c2:91:4f:f2:f4:48:ae:cc:94:b4:1e:c7:50:e8:14:2c:
65:4b:8e:30:b7:7c:c7:bf:85:1e:78:4b:5d:3c:79:09:c8:f8:
21:6f:0d:5d:6c:7a:9e:a9:cd:ce:cf:45:1a:14:da:7a:1e:d6:
9a:ef:81:66:ad:20:17:d2:20:3a:2a:c6:03:c6:e4:7b:e2:72:
71:3c:32:85:13:fd:73:98:cd:27:19:5e:0e:44:54:d6:86:0f:
d7:75:5d:8d:71:11:0e:c2:d8:4e:61:55:df:a1:c6:be:d0:a1:
9c:53:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:29:26 2025 by rpki-client