Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/WE1HuAD0REkzOxrmA-dprdQjRlw.roa
File: WE1HuAD0REkzOxrmA-dprdQjRlw.roa (raw, json)
Hash identifier: 8GqqIihnZKhMqZIhM0GLDakpjNdCPZs7s2nPQmrA4N8=
Subject key identifier: 58:4D:47:B8:00:F4:44:49:33:3B:1A:E6:03:E7:69:AD:D4:23:46:5C
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019735CEC605EA2051203518D25F679DD7D1
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/WE1HuAD0REkzOxrmA-dprdQjRlw.roa
Signing time: Tue 03 Jun 2025 12:40:32 +0000
ROA not before: Tue 03 Jun 2025 12:40:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.253.0/24 maxlen: 24
45.155.254.0/24 maxlen: 24
45.157.208.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jun 2025 23:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:ce:c6:05:ea:20:51:20:35:18:d2:5f:67:9d:d7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 3 12:40:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=584d47b800f44449333b1ae603e769add423465c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:74:bd:f7:2b:32:b8:88:56:20:3c:eb:8a:
d5:71:90:bf:8d:f3:73:d6:41:bc:bc:8e:f0:20:6c:
42:00:9a:3c:15:7f:76:10:53:4a:11:43:74:74:43:
0a:2c:40:14:fd:62:3a:fc:75:0a:6a:33:e1:cb:1b:
2d:a9:87:39:7e:76:32:4b:c1:9d:7d:2c:57:d1:fa:
cd:b1:c8:55:8b:b7:d4:f0:0e:37:79:6d:6a:33:e6:
1b:63:92:d6:e4:c0:3c:60:d0:90:f0:f6:c0:d6:c2:
d9:63:37:75:d8:f2:1c:3d:8f:2c:47:ab:2c:8e:f5:
7d:0c:ae:f6:fa:d8:76:a3:84:5b:09:b3:0a:0c:3c:
12:b6:73:10:6f:8c:a2:20:b2:61:fd:a4:f3:de:ce:
95:bb:59:7b:dc:70:03:4a:37:a4:01:43:1e:2d:f6:
10:43:93:7d:92:b7:5c:f5:3c:86:3f:2d:a2:56:6c:
27:cc:14:72:28:88:5d:e4:79:c5:3b:50:fa:92:ff:
60:d8:d5:5d:1b:3f:30:06:ab:b4:32:86:ae:8f:62:
0a:1d:f6:7f:95:a3:66:d7:ab:36:ac:e8:e7:32:ad:
14:6b:44:25:f5:76:bc:48:da:21:5e:df:24:66:24:
34:0a:44:39:78:4f:18:55:60:09:1a:b1:36:b5:e4:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4D:47:B8:00:F4:44:49:33:3B:1A:E6:03:E7:69:AD:D4:23:46:5C
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/WE1HuAD0REkzOxrmA-dprdQjRlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0-45.155.254.255
45.157.208.0/24
185.199.151.0/24
185.199.213.0/24
185.221.26.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3c:c1:1c:f1:c4:ef:30:87:02:a4:3a:ab:6c:2c:55:fe:52:
1b:55:8e:83:6b:b1:35:84:23:83:be:51:9a:f7:87:7d:d0:70:
7c:9a:5e:2d:74:cb:95:a4:1d:ac:6b:c6:01:82:f7:e1:ca:5f:
a4:59:ca:77:98:eb:9e:ec:3a:dc:c5:7d:5d:ff:6a:7a:f2:34:
8e:4d:72:1b:9e:51:61:6e:3e:4d:a1:f9:bb:4f:31:12:69:9b:
11:25:f3:6c:72:91:c8:89:d5:dc:98:80:12:38:3d:86:78:1a:
79:3e:7b:38:e5:1f:7e:3c:0e:97:38:f6:a9:23:c6:e1:d3:49:
22:f1:b5:f9:06:e2:47:62:50:7d:40:be:f5:73:23:ea:16:0e:
5e:86:d5:83:a2:e2:fe:f8:38:3d:41:ef:ed:f4:b9:c9:73:c0:
46:ae:ad:9c:a6:bc:a1:4b:f4:8a:8a:1f:7d:53:4f:d0:72:82:
4e:6f:fe:43:e9:28:f1:05:20:83:c7:24:7d:9e:70:12:15:6f:
58:e3:0f:85:aa:eb:cd:40:d0:db:f5:8c:11:54:5c:b0:ec:32:
c6:45:3d:f2:83:d3:38:e7:74:56:5f:64:fa:3d:04:de:87:f0:
ba:f5:fb:41:21:9d:3b:3e:6f:05:ca:10:ec:a1:da:df:87:9d:
4f:81:c2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:08:00 2025 by rpki-client