Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wjRPIqQbR3u3ugum1mbc-tbh0Gs.roa
File: wjRPIqQbR3u3ugum1mbc-tbh0Gs.roa (raw, json)
Hash identifier: mlBTLz5CfhDw1iNjdsK3WWM6Kum41IT/aO9562231/Y=
Subject key identifier: C2:34:4F:22:A4:1B:47:7B:B7:BA:0B:A6:D6:66:DC:FA:D6:E1:D0:6B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01962A5C63D84294FDEB38B813D5D6CC00D4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wjRPIqQbR3u3ugum1mbc-tbh0Gs.roa
Signing time: Sat 12 Apr 2025 14:17:00 +0000
ROA not before: Sat 12 Apr 2025 14:17:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Apr 2025 21:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:5c:63:d8:42:94:fd:eb:38:b8:13:d5:d6:cc:00:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 12 14:17:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2344f22a41b477bb7ba0ba6d666dcfad6e1d06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:90:52:02:91:8b:37:6f:e0:d7:61:64:bd:
7e:3c:7d:e7:1d:f7:c1:dc:3d:8d:a8:4a:2e:79:d5:
df:12:b7:f8:01:4c:fb:f0:ec:a3:e0:e9:5d:aa:5c:
3d:9e:a5:b0:05:3b:44:4d:77:75:94:4f:57:9e:47:
87:d8:f4:e0:6f:19:fd:ec:93:2c:00:f9:32:3f:fa:
1b:d5:a1:00:a4:2f:b5:05:d5:81:e9:02:4d:0c:4e:
00:0d:8a:c9:d5:18:83:26:6a:7f:47:8d:7e:b4:33:
5a:4f:81:bd:ac:35:f9:11:82:e1:82:c0:0f:af:1e:
2f:00:18:da:1a:ad:c6:f4:85:aa:db:e6:6c:5e:d3:
23:ac:81:a4:2d:4d:43:e7:e7:ec:b2:06:a1:b4:eb:
2a:27:bb:62:e3:59:13:90:43:39:7e:f5:79:ae:f8:
2c:42:2e:bf:5f:ea:f4:a5:a9:70:eb:86:e5:e5:90:
d4:74:2d:fb:56:20:9d:83:97:b1:58:f5:e7:2e:05:
8f:d2:17:ce:a4:d0:65:61:20:41:42:f8:52:46:4b:
64:6a:61:bb:5f:57:f0:d8:11:ef:e1:96:39:86:0e:
58:87:16:98:60:59:dc:17:24:bf:6a:33:bc:5e:46:
1b:93:fb:ba:7f:bd:32:13:ed:a8:3f:9b:cf:e5:6c:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:34:4F:22:A4:1B:47:7B:B7:BA:0B:A6:D6:66:DC:FA:D6:E1:D0:6B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wjRPIqQbR3u3ugum1mbc-tbh0Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
94.249.213.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0e:71:4f:1b:af:23:11:fb:b7:7b:32:2b:ff:87:20:f4:73:
a8:f2:3b:96:2c:07:13:03:a1:9d:c1:42:c9:e1:57:0d:eb:17:
61:95:27:09:6a:7c:36:63:88:b2:af:fd:74:5f:a6:10:78:d8:
14:92:5e:78:57:78:2e:37:55:dd:8a:e0:d4:92:d1:49:70:e9:
9d:a5:f6:9d:1c:c6:06:9c:1b:c9:1f:ee:68:ca:ad:5a:9e:54:
a5:a7:76:21:f9:6c:ce:26:22:16:ce:0d:50:dd:58:f6:b0:56:
99:cb:1e:fd:e0:9a:5e:b3:3a:4a:ad:b5:aa:93:1b:7c:62:91:
a9:be:e3:5f:ac:5f:39:35:82:bb:7e:7d:4a:2f:9c:62:a0:66:
0f:12:51:89:ce:8c:18:85:e6:73:96:f0:7d:0b:aa:cb:24:38:
6a:82:85:fc:19:58:5f:0e:06:b1:55:6d:bc:86:50:ee:80:9d:
48:b0:c6:0d:bf:ec:f1:5c:f8:07:64:94:36:74:40:20:79:2b:
33:c5:a4:dc:53:3d:6f:04:5e:1d:b9:97:ee:b2:4d:a0:a1:48:
a9:62:48:17:80:e6:79:a0:db:ee:45:c4:10:3b:be:77:a8:84:
9a:04:51:af:33:f9:b7:82:08:47:81:95:c2:47:aa:d0:0c:a2:
78:5b:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:16:06 2025 by rpki-client