Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WfCLXPIttKkjY1isUaFPL5rVTYo.roa
File: WfCLXPIttKkjY1isUaFPL5rVTYo.roa (raw, json)
Hash identifier: M8h5lIK/bfvb1GFESolrnTrswilgydm9U4hsmTnGprU=
Subject key identifier: 59:F0:8B:5C:F2:2D:B4:A9:23:63:58:AC:51:A1:4F:2F:9A:D5:4D:8A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019643E655C4E2EAC96D8F98023FCDBFF44F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WfCLXPIttKkjY1isUaFPL5rVTYo.roa
Signing time: Thu 17 Apr 2025 13:18:10 +0000
ROA not before: Thu 17 Apr 2025 13:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2.59.253.0/24 maxlen: 24
5.252.132.0/22 maxlen: 24
31.13.211.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.90.89.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.141.159.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.89.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.22.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.87.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.70.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.45.0/24 maxlen: 24
93.123.47.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
93.123.117.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.64.0/21 maxlen: 32
94.156.232.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.73.0/24 maxlen: 24
171.22.74.0/23 maxlen: 24
178.215.227.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
193.25.216.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 07:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:e6:55:c4:e2:ea:c9:6d:8f:98:02:3f:cd:bf:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 17 13:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59f08b5cf22db4a9236358ac51a14f2f9ad54d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3a:d8:51:a0:3a:b3:76:44:ce:f8:ee:e6:74:
be:8e:11:bb:6a:d1:7f:74:c9:82:8f:5a:80:9b:3a:
9f:44:7d:2a:06:b5:95:d9:81:e2:56:ee:ab:ef:d0:
71:03:5b:d0:61:72:0b:de:73:56:40:e1:bf:2f:86:
29:db:da:9c:44:5e:76:d5:a4:29:d6:b6:8c:de:56:
77:90:76:be:34:ee:3e:c9:1d:13:84:94:40:d9:34:
63:10:cb:ce:75:ec:2c:c7:b0:c2:83:cc:7f:5d:c6:
c4:54:a5:ab:d9:e9:0b:0e:ce:af:20:75:0d:76:37:
bb:0b:aa:05:85:ed:ca:77:2b:06:8c:b6:c2:2d:e3:
63:6d:9a:9b:31:d2:c5:5d:f9:11:2f:be:52:5a:eb:
21:47:e6:61:5d:57:93:99:f4:09:c6:35:72:ee:38:
36:44:26:5b:be:64:36:fc:b2:9b:e9:b0:d5:f7:ab:
14:4a:76:8b:7b:b6:8d:0a:45:23:b3:7e:e6:15:50:
ac:b3:7c:64:5c:9c:00:8f:9e:b2:22:f6:3a:06:6d:
92:5d:39:dc:24:71:3a:db:3a:9a:6d:d5:05:eb:58:
bc:62:fe:1d:c1:3c:a3:d3:92:81:c4:f2:9d:26:50:
7d:00:1b:35:06:36:f3:6f:63:90:a9:18:04:38:56:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F0:8B:5C:F2:2D:B4:A9:23:63:58:AC:51:A1:4F:2F:9A:D5:4D:8A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WfCLXPIttKkjY1isUaFPL5rVTYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
5.252.132.0/22
31.13.211.0/24
45.9.157.0/24
45.12.253.0/24
45.66.228.0/24
45.66.230.0/23
45.81.39.0/24
45.88.64.0/24
45.89.247.0/24
45.90.89.0/24
45.139.106.0/24
45.141.158.0/23
45.151.90.0/24
79.110.50.0/24
81.161.238.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.89.0/24
87.120.166.0/24
87.121.22.0/24
87.121.38.0/24
87.121.45.0/24
87.121.87.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.70.0/24
92.249.50.0/24
93.123.45.0/24
93.123.47.0/24
93.123.85.0/24
93.123.109.0/24
93.123.117.0/24
93.123.119.0/24
94.103.125.0/24
94.154.160.0/22
94.156.64.0/21
94.156.232.0/24
94.156.239.0/24
141.98.1.0/24
141.98.6.0/24
147.78.100.0/24
171.22.73.0-171.22.75.255
178.215.227.0/24
185.216.84.0/22
193.25.216.0/24
193.35.18.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
03:40:5c:37:dd:58:20:94:c1:de:60:c2:e9:10:99:a6:09:e6:
c3:f0:f3:ea:5e:cf:dd:2a:03:d0:e1:40:50:1b:f9:db:7f:f9:
e9:60:73:7b:6f:ce:a1:87:43:48:b1:67:5c:b4:16:a0:0a:9b:
19:f4:b3:b4:1b:d6:cd:05:24:83:9a:d7:1a:d3:b7:ed:8f:2d:
dc:81:c6:58:5d:ff:e6:62:19:44:46:a8:c4:b7:da:2e:7e:18:
51:09:f8:14:4d:ab:2a:4d:57:73:3b:90:bd:7f:10:a6:c0:e7:
42:bb:4b:be:08:5d:0d:64:1d:d6:02:13:62:de:da:a9:98:c5:
b8:f5:a9:49:06:54:8e:2d:c3:fa:47:de:e9:26:24:f2:70:83:
ef:18:bd:af:42:41:39:40:14:4b:11:18:10:2f:8c:0c:fe:f9:
6d:cc:6f:a5:86:0b:65:36:8d:6c:62:da:7a:dc:08:c9:e0:70:
f3:6f:fd:cf:18:dc:af:14:3e:ee:b5:07:db:c7:73:a2:9c:3e:
fb:28:2a:f2:3e:6d:81:b2:b4:f3:80:48:d2:b6:a6:5b:ec:91:
18:e5:51:52:87:ea:53:3c:4b:14:19:b8:15:76:09:dd:ba:10:
31:15:bb:c3:18:e3:97:f9:3b:02:90:e8:7f:69:ed:35:09:61:
c1:61:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:23:01 2025 by rpki-client