Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/We_15EUF3vYXZG7zxDgWMkj1TLA.roa
File: We_15EUF3vYXZG7zxDgWMkj1TLA.roa (raw, json)
Hash identifier: n6EXuczqqjjegU9/ciSeDwFqI8Hm5k5mJOJYRYWYBlk=
Subject key identifier: 59:EF:F5:E4:45:05:DE:F6:17:64:6E:F3:C4:38:16:32:48:F5:4C:B0
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 019423D6CC8E90297E1EC14573C03CE2148F
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/We_15EUF3vYXZG7zxDgWMkj1TLA.roa
Signing time: Wed 01 Jan 2025 21:47:47 +0000
ROA not before: Wed 01 Jan 2025 21:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62365
IP address blocks: 80.249.116.0/22 maxlen: 22
139.28.0.0/22 maxlen: 22
141.98.144.0/22 maxlen: 22
155.133.200.0/21 maxlen: 21
155.133.208.0/20 maxlen: 20
185.38.48.0/22 maxlen: 22
185.202.180.0/22 maxlen: 22
2a00:fda0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 09 Jan 2025 13:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:cc:8e:90:29:7e:1e:c1:45:73:c0:3c:e2:14:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59eff5e44505def617646ef3c438163248f54cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:fd:09:3e:a4:dd:c8:64:97:30:b3:c3:1a:
46:b6:ec:c8:ce:ab:61:64:5e:59:2d:a9:25:1a:10:
6b:0b:b1:d6:a2:25:e6:9f:73:ab:19:ff:bc:0a:a5:
76:7a:b5:df:c6:66:21:dc:1c:40:2d:85:eb:3d:2b:
b5:d6:a4:db:a3:b0:70:b9:ea:18:3d:40:f7:8d:8d:
02:57:6c:93:ca:67:a1:3a:ca:c5:33:6a:e7:ce:6d:
45:cb:31:50:9f:b6:69:f9:7c:8f:53:0f:c4:86:93:
6a:e0:48:0d:b0:31:ae:a6:28:2f:4c:a8:cf:99:d1:
6a:e8:c9:a6:ba:6a:a8:59:e8:ad:f0:1b:d6:d2:c9:
b7:7f:6f:2e:49:a0:0c:3f:87:71:83:af:3c:a3:8d:
57:4d:bf:36:7f:95:27:29:75:43:d8:e4:c7:c2:7d:
ae:d4:58:46:eb:2a:01:29:ab:86:84:d0:4c:73:9e:
4f:0d:64:02:bd:91:01:8c:56:72:2e:f0:54:81:6d:
42:3b:18:6a:0f:d6:f2:c9:42:fa:eb:9e:73:34:c2:
31:4b:84:e2:9e:08:34:76:6b:6b:2a:bb:82:27:11:
08:4c:1f:ea:ce:34:c8:1d:87:2c:0e:da:31:ae:ee:
36:9b:cf:4e:5d:8f:5a:e6:f6:2f:48:97:5c:54:cd:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EF:F5:E4:45:05:DE:F6:17:64:6E:F3:C4:38:16:32:48:F5:4C:B0
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/We_15EUF3vYXZG7zxDgWMkj1TLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.116.0/22
139.28.0.0/22
141.98.144.0/22
155.133.200.0-155.133.223.255
185.38.48.0/22
185.202.180.0/22
IPv6:
2a00:fda0::/32
Signature Algorithm: sha256WithRSAEncryption
88:76:79:ed:85:2c:27:05:3c:95:a7:aa:c8:58:58:0a:ec:aa:
b3:4b:36:3a:37:4b:4d:a3:c3:e8:f5:c7:ed:63:bd:83:b2:a2:
94:a7:5b:ee:f0:b3:1c:fd:c4:66:2a:2f:ba:73:91:b5:23:d4:
9a:aa:8f:8f:da:1f:9d:8c:10:d5:00:69:7c:bd:86:28:1b:f9:
e5:39:9d:33:bd:0f:db:0c:7a:9a:5e:59:e4:fe:b6:d7:59:a1:
0e:fa:c0:a2:1f:f8:4f:8e:e7:ba:54:ec:c7:44:4b:d9:c2:48:
e6:6c:0c:97:de:fb:f4:bf:8e:70:67:b8:e0:a4:6f:fe:d9:02:
5c:68:6c:ca:c2:27:69:4d:4a:01:8a:d0:78:a7:7a:28:45:60:
15:32:4c:b7:80:b3:f2:52:19:3c:df:2c:e1:28:b6:ea:fd:1d:
2d:7d:21:d9:e5:e3:b4:3e:2f:94:ef:55:ab:08:40:dc:2d:cd:
f9:a3:42:fc:dd:78:9f:4d:a6:4e:91:1c:6c:8e:50:fe:d2:3b:
d3:19:7e:6f:76:18:ac:11:eb:5b:08:11:49:5f:7a:ea:c6:89:
10:10:0f:85:e2:eb:ef:33:e4:28:1c:15:43:63:1e:2a:21:3f:
be:62:20:74:c4:1c:38:ab:64:f4:a0:49:c6:b1:a9:87:c1:d1:
b2:e1:3a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:21:35 2025 by rpki-client