Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/W5Bh6fV60MVoOADIqhPjggiY_7g.roa
File: W5Bh6fV60MVoOADIqhPjggiY_7g.roa (raw, json)
Hash identifier: Kk7mLBAT/hkBxkeSQ3Od/YnGkxnyByD6g6gLk3YrfmA=
Subject key identifier: 5B:90:61:E9:F5:7A:D0:C5:68:38:00:C8:AA:13:E3:82:08:98:FF:B8
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 01939BC867534F0086E9DC13A11D2D7CDCA5
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/W5Bh6fV60MVoOADIqhPjggiY_7g.roa
Signing time: Fri 06 Dec 2024 11:43:42 +0000
ROA not before: Fri 06 Dec 2024 11:43:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59437
IP address blocks: 87.120.208.0/21 maxlen: 24
87.121.28.0/22 maxlen: 24
94.156.254.0/23 maxlen: 24
176.56.192.0/19 maxlen: 24
176.56.192.0/21 maxlen: 24
176.56.200.0/21 maxlen: 24
176.56.204.0/23 maxlen: 24
176.56.206.0/23 maxlen: 23
176.56.208.0/23 maxlen: 23
185.159.86.0/24 maxlen: 24
185.251.18.0/24 maxlen: 24
195.211.49.0/24 maxlen: 24
2a0b:d40::/29 maxlen: 40
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:c8:67:53:4f:00:86:e9:dc:13:a1:1d:2d:7c:dc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Dec 6 11:43:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b9061e9f57ad0c5683800c8aa13e3820898ffb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:3e:9e:cd:86:a6:91:89:49:c0:a7:98:6d:
e0:95:d2:78:36:60:5d:a4:e2:45:4b:6d:d0:d4:a7:
cd:fa:ac:f0:4f:0e:c5:99:6d:d6:f4:51:93:4a:11:
98:c9:c1:e2:a9:9a:7e:e4:14:63:fd:09:92:04:46:
1f:f3:78:6a:d1:2e:8d:57:d9:a2:42:8a:51:0b:25:
31:38:bb:07:86:fb:86:f3:05:c1:fd:ea:67:d5:72:
4c:67:c8:b1:54:cb:44:f1:c1:e7:c7:c9:97:fb:b5:
8c:4a:e3:1a:b7:09:c1:85:e4:3d:c3:cb:91:33:49:
46:98:b4:34:13:80:b7:ad:eb:e5:21:c1:98:77:a5:
5c:c5:7d:40:e1:c1:c4:47:c9:0d:0a:f6:c9:de:b7:
3e:70:fa:7c:c3:99:a5:16:52:07:d9:e5:2e:19:c6:
a7:6b:34:b1:0f:c9:60:f8:32:df:df:86:69:28:69:
a9:c4:a3:df:cb:02:bb:27:40:45:4d:3c:27:29:72:
ef:16:c4:8c:5d:34:b3:dd:15:75:1e:b3:b8:95:34:
28:1c:4d:67:f4:69:29:f0:ea:ce:46:14:19:3b:97:
f6:d5:00:58:30:e9:a2:7b:bc:70:47:4a:38:ab:9d:
45:ac:00:8d:10:2d:c1:90:93:a9:a1:57:11:ab:6b:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:90:61:E9:F5:7A:D0:C5:68:38:00:C8:AA:13:E3:82:08:98:FF:B8
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/W5Bh6fV60MVoOADIqhPjggiY_7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.208.0/21
87.121.28.0/22
94.156.254.0/23
176.56.192.0/19
185.159.86.0/24
185.251.18.0/24
195.211.49.0/24
IPv6:
2a0b:d40::/29
Signature Algorithm: sha256WithRSAEncryption
0f:c5:12:2b:22:df:d8:ea:b4:a9:c9:49:63:91:5e:5f:b1:c1:
69:01:af:f9:d3:69:93:43:09:2c:1d:8e:cd:14:6a:10:d9:83:
a5:82:e1:2b:4f:cf:41:ed:10:79:08:66:e8:f3:3e:4f:6c:99:
b6:09:e9:a5:fd:e3:61:9b:e1:c4:61:45:39:7e:07:db:13:27:
d8:13:77:55:ad:03:5f:99:a9:88:20:7e:a3:ce:9f:59:00:91:
a8:f1:46:6e:14:e5:cb:34:1f:ef:74:27:f8:c5:18:64:5b:8e:
48:60:98:16:5e:29:8a:42:42:28:93:25:14:a6:76:7d:58:a3:
30:cc:37:85:35:0a:94:7c:c5:2a:26:92:23:8d:c6:90:5f:9e:
10:19:c2:bb:1e:f2:ec:c4:04:87:12:b5:06:08:fa:e0:09:90:
f4:ac:36:98:1b:9a:64:cc:87:ee:8b:a9:9d:be:56:ab:cc:6f:
cc:09:31:84:0d:09:33:1a:2f:be:63:e1:74:ef:57:2e:c6:6b:
d2:1c:65:22:8c:3c:42:5f:16:d0:98:b9:36:fb:01:fd:18:8c:
31:96:0e:29:ca:7b:d9:5d:21:0d:c0:51:f3:f7:70:d7:c6:74:
bc:8e:0a:b7:fd:8e:f6:f2:fe:d8:e3:3b:fc:76:42:c8:0d:f2:
a7:5f:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:32:23 2025 by rpki-client