Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/WgJ7O_17xXOGfX8GMYTFeehuvIo.roa
File: WgJ7O_17xXOGfX8GMYTFeehuvIo.roa (raw, json)
Hash identifier: +WryK0/1+O95YS2Z1PvMaCPKPteooKSJABgjRhfvP9U=
Subject key identifier: 5A:02:7B:3B:FD:7B:C5:73:86:7D:7F:06:31:84:C5:79:E8:6E:BC:8A
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 019A302C0703B91D9A38BA6F6C915AF0D168
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/WgJ7O_17xXOGfX8GMYTFeehuvIo.roa
Signing time: Wed 29 Oct 2025 13:33:02 +0000
ROA not before: Wed 29 Oct 2025 13:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12969
IP address blocks: 5.23.64.0/19 maxlen: 19
5.23.64.0/20 maxlen: 20
5.23.80.0/20 maxlen: 20
46.239.192.0/18 maxlen: 18
46.239.192.0/19 maxlen: 19
46.239.224.0/19 maxlen: 19
81.15.0.0/17 maxlen: 17
193.4.0.0/19 maxlen: 19
193.4.4.0/24 maxlen: 24
193.4.5.0/24 maxlen: 24
193.4.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Nov 2025 11:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:2c:07:03:b9:1d:9a:38:ba:6f:6c:91:5a:f0:d1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Oct 29 13:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a027b3bfd7bc573867d7f063184c579e86ebc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:be:4c:6a:02:9b:7d:35:39:fc:6e:b6:30:
ff:76:20:56:90:fc:b9:3b:4e:c6:e4:de:67:45:ff:
59:77:ed:ec:75:ba:a7:c3:e3:4d:35:f7:a1:5e:4c:
a5:c3:bc:a0:ca:7e:ac:25:6e:73:75:43:bb:8b:4b:
67:4d:ab:41:3e:94:b1:26:47:cc:9b:34:80:5e:e2:
cb:05:91:bf:89:e3:73:29:54:a1:91:c4:31:a8:f0:
4c:aa:6e:5b:7c:4f:ad:21:63:b7:eb:d4:f1:f8:bc:
14:86:6e:16:65:98:0f:65:2d:55:29:25:e5:96:91:
18:67:48:0a:8e:9a:4a:94:64:ee:41:29:e8:b9:52:
f9:89:9d:9b:4b:24:ef:b2:c7:dd:6e:d6:f6:3c:86:
23:2f:a1:ac:4b:7c:dd:8a:41:dd:ed:37:6b:e5:86:
a9:70:74:e2:19:66:15:10:6e:e3:2f:ed:81:00:b5:
0b:68:26:d5:2e:aa:9a:40:53:4e:55:31:7b:f8:dc:
50:b0:c0:d3:ab:f7:d8:de:a4:05:ef:f5:2a:dc:09:
0c:96:8e:b6:80:e7:8f:41:1b:4e:ec:36:83:7e:d3:
4d:96:7d:27:c5:28:1c:40:d1:74:56:bb:55:6c:68:
3c:ea:6c:f8:34:25:ae:90:64:41:5c:73:be:32:74:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:7B:3B:FD:7B:C5:73:86:7D:7F:06:31:84:C5:79:E8:6E:BC:8A
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/WgJ7O_17xXOGfX8GMYTFeehuvIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.64.0/19
46.239.192.0/18
81.15.0.0/17
193.4.0.0/19
Signature Algorithm: sha256WithRSAEncryption
27:93:a9:90:d3:dd:39:d0:b8:02:7d:95:43:fe:ad:9f:2f:b2:
f1:f9:ac:0a:19:bc:ff:69:a4:23:5c:33:3f:94:7c:fa:df:fd:
87:ec:98:a2:85:0f:71:e4:59:e6:f0:68:ef:8a:60:2e:24:ad:
37:9b:c3:0e:3b:ac:84:f3:ef:b8:52:38:7b:3e:d6:b9:4e:14:
27:aa:8a:ba:5a:04:ea:ab:a5:74:49:af:86:c9:de:2e:ee:c6:
48:2b:09:dd:30:36:cf:ff:f1:a7:70:92:fd:84:e6:6f:41:44:
a5:a8:07:8b:6e:ec:97:55:d7:d1:1d:5b:2f:19:73:39:9f:c3:
43:1c:43:e2:b4:e8:8c:b4:9d:94:26:fe:37:14:3c:6c:8b:cb:
5a:99:d8:a9:46:33:d6:4b:63:26:7b:c4:67:7b:35:cf:17:48:
8e:53:ed:d1:93:7f:d1:f8:fc:eb:c0:35:c7:11:0a:63:ac:b4:
c1:72:4c:85:af:75:75:e8:76:ea:25:14:df:34:0a:2c:63:1e:
54:55:c3:9d:3e:24:7e:14:0e:60:26:83:2b:13:77:4d:d8:4a:
e3:93:e0:04:30:1a:ec:ca:b8:89:e7:81:67:0e:e7:c6:1a:ad:
bb:75:89:04:1c:68:14:ed:0a:df:50:4c:92:70:d5:3c:bd:1d:
88:dc:9f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:28:28 2025 by rpki-client