Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wAdKP7cw1WnMVrTedRDZ0q3kIwM.roa
File: wAdKP7cw1WnMVrTedRDZ0q3kIwM.roa (raw, json)
Hash identifier: vXAuSMivIBv/OovFJjNrRmFTnzF9zZQTCmRgRvmvBpM=
Subject key identifier: C0:07:4A:3F:B7:30:D5:69:CC:56:B4:DE:75:10:D9:D2:AD:E4:23:03
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196E310CC4B889A42050793440EF70C540E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wAdKP7cw1WnMVrTedRDZ0q3kIwM.roa
Signing time: Sun 18 May 2025 11:04:10 +0000
ROA not before: Sun 18 May 2025 11:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56755
IP address blocks: 45.148.118.0/23 maxlen: 24
139.28.99.0/24 maxlen: 24
193.58.239.0/24 maxlen: 24
193.163.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e3:10:cc:4b:88:9a:42:05:07:93:44:0e:f7:0c:54:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 18 11:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0074a3fb730d569cc56b4de7510d9d2ade42303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:b5:bd:90:c6:27:9c:d3:7d:b8:cd:de:c4:
93:05:61:fc:be:22:54:31:11:8a:5b:e2:02:b8:96:
d3:4b:25:9a:0c:75:cd:e3:be:64:3c:77:66:e5:bf:
93:09:3b:a5:6a:2a:a1:ba:88:04:cc:8b:03:75:ce:
32:02:81:68:ff:48:ff:89:c0:9a:b6:75:f9:33:78:
9d:8a:ee:e7:5e:0e:ab:9f:74:cd:7f:7c:dc:6d:43:
d3:f4:f9:c1:97:9f:de:c8:52:88:c2:d1:ac:48:11:
79:48:d5:38:26:41:c9:ec:e1:52:8d:5e:68:23:d6:
13:d5:da:7e:f1:b1:04:d1:a9:0c:70:8b:30:68:1e:
6b:14:f6:07:4f:ea:9d:83:f1:05:05:82:79:03:91:
7a:5b:ed:28:62:5f:fd:ec:6f:c1:e4:bd:50:ea:6a:
5e:a1:3c:65:66:bb:79:52:ea:99:85:56:31:51:e8:
c1:fb:10:a3:59:e6:7d:84:f1:bc:67:ef:25:eb:b2:
d8:fa:6c:63:fb:fe:18:a5:69:38:60:8d:b4:1d:6c:
ea:60:5a:48:d6:84:8f:83:ac:67:44:88:5f:7a:0f:
ca:e1:1c:51:48:47:8f:a7:46:38:4e:0a:81:22:dd:
1d:ba:e2:41:59:66:d8:ec:d2:8a:83:69:f9:19:73:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:07:4A:3F:B7:30:D5:69:CC:56:B4:DE:75:10:D9:D2:AD:E4:23:03
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wAdKP7cw1WnMVrTedRDZ0q3kIwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.118.0/23
139.28.99.0/24
193.58.239.0/24
193.163.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:99:95:cd:81:a9:1d:f6:37:d1:8d:c5:16:29:b0:9e:ac:49:
75:40:3c:1b:34:42:35:97:d9:10:6e:d4:ae:35:11:8c:bc:eb:
55:7a:33:cb:12:a6:72:04:db:37:84:ed:c7:9a:55:a2:8c:4a:
5c:c1:2b:1c:d2:7d:0e:85:1f:e5:11:5e:2e:b6:db:2d:1f:49:
d4:df:1c:cb:8a:08:4b:a7:9c:d5:71:ac:b6:90:9a:6e:b3:2e:
81:43:0c:20:6f:d5:85:e2:28:07:4e:00:d7:00:1f:69:90:e1:
e6:e9:df:d6:3e:3c:a1:93:8b:25:ff:97:e7:0d:82:74:0c:4d:
ef:47:74:48:eb:88:3f:e5:b5:b3:a1:37:0b:59:5e:f2:9c:07:
cf:6d:52:6b:16:66:65:fc:e2:38:ad:20:27:11:be:26:fc:23:
12:7e:02:30:ef:12:60:33:bc:37:b2:ba:e6:53:64:4c:32:de:
c2:21:3d:75:65:bb:df:80:a9:06:a3:06:e4:8d:73:8e:23:f5:
96:48:a8:55:40:7c:cb:08:7b:c5:87:7b:91:42:a9:b6:79:08:
d9:0d:d1:15:21:79:9a:65:12:bd:2d:57:8b:9c:27:b8:41:5d:
b4:b3:0a:66:60:b8:d2:81:49:a8:be:47:33:26:a3:fb:28:45:
e2:4a:59:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:11:39 2025 by rpki-client