Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/W38CoSUzUEGFZd-QS5sUNWcv6rI.roa
File: W38CoSUzUEGFZd-QS5sUNWcv6rI.roa (raw, json)
Hash identifier: +4ZQ8KtLBoa5vlOAO8egaA7Ze7LnIxjZz9PtHVy1dIg=
Subject key identifier: 5B:7F:02:A1:25:33:50:41:85:65:DF:90:4B:9B:14:35:67:2F:EA:B2
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0196626B7069A6BAC293B58157EDA6029770
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/W38CoSUzUEGFZd-QS5sUNWcv6rI.roa
Signing time: Wed 23 Apr 2025 11:32:10 +0000
ROA not before: Wed 23 Apr 2025 11:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51202
IP address blocks: 31.25.11.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
2a0c:2500::/29 maxlen: 48
2a0c:2502::/32 maxlen: 32
2a14:6781::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 29 Apr 2025 12:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:6b:70:69:a6:ba:c2:93:b5:81:57:ed:a6:02:97:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 23 11:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b7f02a1253350418565df904b9b1435672feab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:02:89:1e:bb:36:05:b4:bd:0e:71:63:5e:
cf:95:26:27:d7:d3:5b:16:23:e2:79:e5:e1:79:5f:
40:f6:cc:65:56:a6:25:6d:d6:a1:02:29:ad:c7:e1:
09:e8:87:7c:44:27:3a:b9:11:a5:6c:7a:24:ce:55:
97:c1:b5:8a:4f:6a:44:24:a0:73:bc:1d:26:60:7d:
87:66:25:cf:81:b9:2b:3c:7c:02:1c:8f:00:33:31:
b1:6f:72:8a:0d:6a:2e:a0:5a:82:1c:b6:4e:7f:91:
22:c0:05:9a:85:cd:f3:3a:2c:3c:bc:ab:be:bf:49:
3d:b2:fc:10:9b:ce:54:17:d5:67:a0:c6:bd:05:6f:
69:35:bb:65:c7:a1:d9:3f:75:ea:f8:81:a0:c5:26:
b9:de:11:1a:76:26:57:16:7a:7f:d3:8b:4a:27:13:
00:eb:90:0b:a4:aa:b5:07:59:7a:8c:b8:cd:ba:a3:
c4:76:03:79:be:27:3a:b5:21:e4:0f:c9:db:87:b4:
84:b9:23:1c:e7:70:9b:f0:61:d2:63:ff:4d:fc:f9:
ed:a5:f3:a3:11:c7:f0:c1:e7:36:b3:17:6d:4a:4f:
3d:1a:4a:6d:4b:f3:52:d2:d2:1b:e2:e6:6c:d4:d8:
2f:b1:66:47:00:92:2c:aa:29:d6:89:94:0e:c3:07:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7F:02:A1:25:33:50:41:85:65:DF:90:4B:9B:14:35:67:2F:EA:B2
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/W38CoSUzUEGFZd-QS5sUNWcv6rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
89.36.35.0/24
185.144.70.0/24
212.232.18.0/24
IPv6:
2a0c:2500::/29
2a14:6781::/32
Signature Algorithm: sha256WithRSAEncryption
24:24:8d:23:09:de:0b:9a:65:2e:10:f8:ce:92:4f:be:e3:fc:
a4:2e:1f:56:07:16:9c:e9:85:36:49:c3:6d:9b:72:b4:bc:58:
ca:0b:c4:95:b1:43:e7:32:94:ab:13:53:4b:67:3f:2e:59:8a:
b0:3f:d8:c0:a1:1c:1f:69:c2:1b:33:ed:dd:3a:7e:84:f0:ff:
30:28:80:10:b4:b3:4c:69:25:7e:db:5a:d4:08:5f:c4:d6:40:
29:1b:16:7f:df:23:7c:42:45:08:4f:59:5a:bf:3e:78:96:9a:
1a:4b:2d:43:df:97:ca:08:9e:a7:7f:7f:b6:87:9b:31:d8:0d:
a3:a3:69:8d:48:27:2e:8c:7a:b9:4d:c0:46:dc:8d:27:70:46:
48:71:4d:75:03:09:1a:31:af:9c:10:e1:a3:cd:6b:87:bd:c2:
bc:9c:8b:cb:97:b5:ca:d9:0b:e4:18:b2:88:94:f6:c1:f3:1c:
8e:df:4b:8e:d3:94:f2:0f:dc:ac:29:1f:16:0f:23:8e:d8:c7:
e8:af:98:90:40:56:42:48:3d:f0:e1:1a:90:33:72:08:4f:67:
b2:d3:84:ee:15:2c:04:b3:e3:84:c9:f2:9f:96:f6:24:39:cd:
ef:f5:77:df:05:be:f9:72:8c:d2:ad:e5:c6:76:97:15:45:63:
e6:0c:17:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:45:24 2025 by rpki-client