Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/wAoCIJvOSRy-vZZRwwxA0vHmEsE.roa
File: wAoCIJvOSRy-vZZRwwxA0vHmEsE.roa (raw, json)
Hash identifier: L+mprAthfAbAknJXcBV+hBBWW3Qy2cZApiosMT3j7uU=
Subject key identifier: C0:0A:02:20:9B:CE:49:1C:BE:BD:96:51:C3:0C:40:D2:F1:E6:12:C1
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 01971C71460FF8FF9B7B6637DF36C8D5FDB5
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/wAoCIJvOSRy-vZZRwwxA0vHmEsE.roa
Signing time: Thu 29 May 2025 14:27:54 +0000
ROA not before: Thu 29 May 2025 14:27:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44654
IP address blocks: 37.252.208.0/23 maxlen: 23
37.252.208.0/24 maxlen: 24
37.252.209.0/24 maxlen: 24
37.252.210.0/23 maxlen: 23
37.252.210.0/24 maxlen: 24
37.252.211.0/24 maxlen: 24
37.252.212.0/23 maxlen: 23
37.252.212.0/24 maxlen: 24
37.252.213.0/24 maxlen: 24
37.252.215.0/24 maxlen: 24
109.205.8.0/21 maxlen: 24
109.205.8.0/24 maxlen: 24
109.205.9.0/24 maxlen: 24
185.36.124.0/22 maxlen: 24
185.36.124.0/23 maxlen: 23
2a02:d8::/32 maxlen: 48
2a02:d8:8::/48 maxlen: 48
2a02:d8:9::/48 maxlen: 48
2a02:d8:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Jun 2025 20:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:71:46:0f:f8:ff:9b:7b:66:37:df:36:c8:d5:fd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: May 29 14:27:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c00a02209bce491cbebd9651c30c40d2f1e612c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:01:4e:6c:65:85:92:4a:33:1e:8b:cc:78:
86:08:c8:de:01:f4:01:c9:37:cd:0a:4b:f9:bb:60:
8d:b3:63:89:1a:58:d3:fb:fe:0d:44:87:05:32:de:
9c:1f:bb:af:60:60:c1:17:c7:ca:8f:62:45:ea:ca:
0d:7d:bc:27:44:46:95:3d:42:07:58:33:a8:fe:02:
13:f6:d2:ae:d8:6b:95:dd:e4:ea:cb:10:c1:d4:76:
4e:4a:3f:48:38:2d:7d:57:71:03:46:b0:6c:07:c1:
1f:9e:d9:b6:2e:43:6d:a3:17:19:17:e5:e2:7c:84:
21:d8:f0:02:3b:d7:6d:ff:04:c9:15:d5:ed:b8:39:
1c:b2:07:ba:a3:1b:cd:62:3a:19:bd:bd:c0:6d:7b:
bd:bc:bb:4d:17:83:34:99:68:e2:fd:34:0c:5d:e0:
98:cc:0d:3c:b8:12:0f:08:29:27:4c:61:18:fd:f8:
d5:c8:10:2b:63:92:f5:99:88:30:7e:fe:7b:41:ff:
85:3d:d7:26:1a:77:d9:07:2a:c0:9a:1c:24:5c:84:
68:90:72:21:cb:84:42:49:86:fe:2b:ad:cd:b3:62:
48:31:36:0c:c5:84:b7:7b:b9:35:d7:f2:84:6b:a1:
da:d7:84:73:d8:6d:8c:aa:5a:47:4d:80:ff:e5:e8:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0A:02:20:9B:CE:49:1C:BE:BD:96:51:C3:0C:40:D2:F1:E6:12:C1
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/wAoCIJvOSRy-vZZRwwxA0vHmEsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.208.0-37.252.213.255
37.252.215.0/24
109.205.8.0/21
185.36.124.0/22
IPv6:
2a02:d8::/32
Signature Algorithm: sha256WithRSAEncryption
91:b2:20:30:88:69:39:49:a8:30:d4:a1:59:5a:50:8f:7b:38:
10:ae:64:6e:c4:20:27:86:9a:1d:1e:96:5c:8e:77:d6:51:a6:
1f:7b:ba:3a:00:56:df:62:56:8b:97:ff:c6:ff:1a:c8:7c:a9:
5c:54:97:2e:9f:1d:85:f7:41:34:77:0b:8a:4e:53:44:04:07:
9f:f5:25:27:a8:79:40:5f:83:90:45:4c:b3:15:f2:0f:ef:ad:
85:14:b4:c4:f4:a2:3e:3e:25:91:49:49:3d:f6:8e:c2:45:66:
86:87:a7:60:c3:b6:2f:38:c8:13:68:fc:df:7b:25:73:3e:3c:
00:2a:cb:28:e2:bc:f8:a1:34:9d:7c:ab:68:e7:fb:1e:8d:d2:
99:25:ae:06:2c:5a:d3:4b:50:16:1b:6d:a6:59:19:89:fa:3e:
f7:17:5d:1f:83:84:1f:a2:f6:fd:8c:f8:f5:aa:e8:45:f2:28:
f3:5c:1f:12:13:d5:fa:77:2a:51:b1:b5:ca:54:e6:ec:48:46:
f2:7f:ad:ef:cc:e5:54:41:7b:2f:ae:04:01:a0:34:cf:78:cb:
60:de:99:00:85:f7:b2:7d:70:a3:d6:38:cf:a6:c9:d0:23:87:
d9:45:f6:1c:16:a9:bc:17:a3:ed:3b:ea:09:82:49:f3:2f:5a:
1e:70:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:48:56 2025 by rpki-client