Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/wja0xc3i-_VJO7AZ0z7ZjeeL82M.roa
File: wja0xc3i-_VJO7AZ0z7ZjeeL82M.roa (raw, json)
Hash identifier: QA/QlmJQtis0AZ9FebPI4hzl4Iy3CUu4wS0j2Y2SaNQ=
Subject key identifier: C2:36:B4:C5:CD:E2:FB:F5:49:3B:B0:19:D3:3E:D9:8D:E7:8B:F3:63
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 01970D2850483A1F8036AD87D506D00EB9F0
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/wja0xc3i-_VJO7AZ0z7ZjeeL82M.roa
Signing time: Mon 26 May 2025 15:13:55 +0000
ROA not before: Mon 26 May 2025 15:13:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 145.224.128.0/20 maxlen: 24
145.224.144.0/20 maxlen: 24
145.224.160.0/20 maxlen: 24
145.224.176.0/20 maxlen: 24
145.224.192.0/19 maxlen: 24
145.224.192.0/24 maxlen: 24
163.76.128.0/20 maxlen: 24
163.76.144.0/20 maxlen: 24
163.76.160.0/20 maxlen: 24
163.76.176.0/20 maxlen: 24
2a03:5d67::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 11 Jun 2025 09:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:28:50:48:3a:1f:80:36:ad:87:d5:06:d0:0e:b9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: May 26 15:13:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c236b4c5cde2fbf5493bb019d33ed98de78bf363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:d0:7b:34:d3:bc:0c:c6:56:e9:97:15:56:
6e:65:e6:b7:31:d6:43:fb:8c:66:66:f5:f3:79:b0:
84:65:ee:ef:87:b4:4a:14:c8:8d:60:dd:69:0c:92:
47:79:cd:66:18:e6:50:68:d8:94:cb:a2:41:41:47:
bf:32:c7:81:24:a3:81:72:67:a3:44:6b:59:64:58:
05:60:e0:d5:d1:30:c1:50:1c:f3:f3:1c:f6:1b:68:
ae:70:cc:c9:30:68:d5:d0:f1:79:a0:49:15:dd:a8:
ff:dc:5f:2c:6d:44:ab:e3:d3:82:52:b2:48:59:73:
e1:a7:70:0c:31:2a:37:a6:b8:2b:4a:56:b7:0c:b7:
d5:fb:97:f4:90:ea:19:1f:92:96:80:1b:6b:cc:7b:
e5:c3:09:24:92:b1:77:25:c2:51:4e:14:6b:8a:98:
59:8b:0a:56:b5:1a:3f:6c:8a:dd:94:79:bd:36:66:
69:41:4e:53:a5:0e:96:22:f6:73:c6:d2:58:52:d5:
e1:66:2a:33:52:d6:9f:d3:ad:45:cc:fa:76:3a:e1:
8a:35:bf:4f:cb:8d:68:3c:6f:c8:f2:30:b4:28:fa:
9c:64:0d:72:ce:0b:9f:c8:7c:a1:3a:20:b5:db:18:
19:2d:8a:4c:5a:b9:9b:e4:1d:29:2f:ba:a1:e3:d0:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:36:B4:C5:CD:E2:FB:F5:49:3B:B0:19:D3:3E:D9:8D:E7:8B:F3:63
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/wja0xc3i-_VJO7AZ0z7ZjeeL82M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.224.128.0-145.224.223.255
163.76.128.0/18
IPv6:
2a03:5d67::/32
Signature Algorithm: sha256WithRSAEncryption
34:90:b8:34:bf:80:74:11:cf:fe:a3:76:d9:fb:bb:40:15:aa:
ab:19:d6:e3:5a:cd:0b:f6:b7:fe:04:47:d3:be:a4:a4:97:66:
bf:fc:ef:c2:cf:02:7a:aa:cd:0a:70:b1:9b:f5:04:07:60:12:
40:49:17:14:f7:5f:21:6f:d1:7a:a9:ee:5a:dc:66:81:4a:cd:
94:b6:a1:e8:24:aa:d8:bf:30:d0:b0:fd:3c:fe:be:63:53:a8:
13:85:d7:e7:0e:ae:bb:b6:8d:50:ca:99:c9:38:c7:b7:5b:81:
95:63:21:13:de:71:57:5b:41:4c:f6:a4:8c:59:97:59:ad:9d:
d7:85:13:10:ba:44:80:c9:ed:d7:e3:a1:0b:75:22:fe:77:99:
81:4d:a2:da:3a:64:17:91:57:ca:ca:be:8e:3d:f8:5e:65:bc:
d8:46:0a:63:f7:c7:b6:ce:03:ad:ca:37:0a:32:48:51:98:7b:
6b:f2:f2:7d:bc:12:53:d2:ae:3e:1a:bc:9b:26:79:e5:2b:d7:
54:27:24:c3:1f:f5:55:13:99:81:54:8c:55:e4:06:c0:c7:5f:
e9:54:f5:e5:e6:2f:c1:5f:43:5d:4c:3e:6f:8c:f4:6f:3a:f9:
f5:5e:4a:6d:8d:16:02:30:0b:ab:59:3b:45:a7:fa:26:92:64:
87:cc:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:41:06 2025 by rpki-client