Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/6bSu9o2jGsgBNMg9AxOQcMqBo5I.roa
File: 6bSu9o2jGsgBNMg9AxOQcMqBo5I.roa (raw, json)
Hash identifier: 6xvcFFcOqJAo0b8jjZdzzbcB+iRjarVKo97Sl3++fiA=
Subject key identifier: E9:B4:AE:F6:8D:A3:1A:C8:01:34:C8:3D:03:13:90:70:CA:81:A3:92
Certificate issuer: /CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Certificate serial: 0195CD183271C69551F610F99F93BF3C90AF
Authority key identifier: 59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/6bSu9o2jGsgBNMg9AxOQcMqBo5I.roa
Signing time: Tue 25 Mar 2025 11:37:49 +0000
ROA not before: Tue 25 Mar 2025 11:37:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9186
IP address blocks: 185.31.156.0/22 maxlen: 22
185.31.156.0/24 maxlen: 24
185.31.157.0/24 maxlen: 24
185.31.158.0/24 maxlen: 24
185.204.111.0/24 maxlen: 24
185.248.35.0/24 maxlen: 24
194.39.124.0/22 maxlen: 22
194.39.125.0/24 maxlen: 24
2a00:bc20::/32 maxlen: 32
2a05:df40::/29 maxlen: 29
2a10:7b40::/29 maxlen: 29
2a10:a4c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 27 Mar 2025 02:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:18:32:71:c6:95:51:f6:10:f9:9f:93:bf:3c:90:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Validity
Not Before: Mar 25 11:37:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9b4aef68da31ac80134c83d03139070ca81a392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:e8:5a:be:55:6a:9c:67:ec:b1:82:de:c5:
e4:c3:88:a4:bc:6a:d2:1c:32:54:ad:9f:9c:de:14:
7a:60:28:12:c6:ca:1b:a8:42:eb:1f:a5:3e:07:cc:
51:22:26:33:76:1a:37:51:eb:02:e0:94:bb:f2:24:
86:20:d3:4a:8e:14:ca:a4:15:af:47:f2:8c:18:fc:
72:fa:94:e1:ac:fd:00:39:24:9f:32:bc:36:74:dd:
c4:c0:52:bc:35:50:c0:09:75:77:05:93:c1:28:fb:
50:f0:52:a1:7a:f9:0c:8a:bb:39:d4:2d:78:a7:76:
c9:b4:e9:81:a6:c9:67:50:1a:43:47:34:bc:37:93:
89:30:9b:fa:b1:bb:1b:a9:24:95:98:2c:ce:3a:c0:
02:15:1d:77:12:1c:4b:5e:0f:11:e7:a2:fd:42:94:
aa:ff:a0:ab:ff:f1:ed:4b:bb:97:24:c6:42:49:bf:
ac:0f:b4:ff:6b:67:57:78:46:8e:38:d6:d7:ed:a9:
9a:8b:a0:f4:74:88:9e:47:32:00:b5:ba:1d:8c:ed:
a3:a2:43:d5:f2:dd:ba:82:1b:bd:cf:b5:91:00:79:
3c:12:5b:46:d5:6e:4d:63:23:fa:25:46:4c:6e:ff:
98:4c:18:11:5b:3f:39:74:2b:c4:77:47:0d:af:24:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B4:AE:F6:8D:A3:1A:C8:01:34:C8:3D:03:13:90:70:CA:81:A3:92
X509v3 Authority Key Identifier:
keyid:59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/6bSu9o2jGsgBNMg9AxOQcMqBo5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.156.0/22
185.204.111.0/24
185.248.35.0/24
194.39.124.0/22
IPv6:
2a00:bc20::/32
2a05:df40::/29
2a10:7b40::/29
2a10:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:a7:5e:e8:dc:c8:27:36:0f:7b:d6:58:25:b8:0f:67:34:9a:
22:95:f0:f3:47:e2:93:10:6c:16:7e:8e:77:76:b1:68:e0:13:
42:50:5c:b4:46:8b:99:09:c3:07:f2:97:0f:6d:5f:8a:20:a0:
17:9d:25:9e:ed:36:ae:07:04:f4:35:33:ba:7e:c0:be:a8:2b:
02:95:c0:5e:c2:f0:5e:3f:73:46:82:5b:8c:0b:c3:fb:90:18:
bd:3d:bb:b4:3f:7d:ed:7a:7a:3d:fe:11:7f:15:a1:3a:8d:a1:
d4:c3:eb:74:2e:82:d3:c4:17:14:47:17:76:ad:65:50:c2:c9:
ec:d1:f1:17:44:ba:61:00:46:ab:4d:5f:a4:9a:47:c2:00:5b:
91:9d:0a:05:d1:b9:c8:98:5e:be:77:c2:ca:bd:41:65:31:3a:
c1:74:ac:4c:5c:19:3d:d2:32:02:55:1e:c6:e3:05:61:ff:65:
eb:c1:ab:3d:c1:44:29:ce:bd:75:c0:92:c0:74:ed:6b:0e:b9:
7d:2f:5d:31:10:7f:8e:45:b3:b3:c7:9d:a0:0f:38:8b:1e:6e:
d7:0a:0e:e1:9c:8e:0e:5c:96:0d:45:33:53:5d:d6:56:3b:df:
f7:96:5b:10:22:0d:1b:67:77:08:df:eb:89:4a:51:7f:ed:f5:
bf:3f:b7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:42:39 2025 by rpki-client