Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/wB0VVqzs3IWS04eHXHRD-dwd9aM.roa
File: wB0VVqzs3IWS04eHXHRD-dwd9aM.roa (raw, json)
Hash identifier: Zv8rYTYxImJPT0Ba2UNZHJnXyQ9qtIInVedhauSc9lU=
Subject key identifier: C0:1D:15:56:AC:EC:DC:85:92:D3:87:87:5C:74:43:F9:DC:1D:F5:A3
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 01961AAB8BCDF5C7B3B141766B891E0B9949
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/wB0VVqzs3IWS04eHXHRD-dwd9aM.roa
Signing time: Wed 09 Apr 2025 13:09:32 +0000
ROA not before: Wed 09 Apr 2025 13:09:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397368
IP address blocks: 104.207.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Thu 10 Apr 2025 16:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:ab:8b:cd:f5:c7:b3:b1:41:76:6b:89:1e:0b:99:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Apr 9 13:09:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c01d1556acecdc8592d387875c7443f9dc1df5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:fa:b0:2f:64:77:0e:28:e4:70:a1:10:45:
a9:1d:92:48:a4:78:a8:96:82:fb:58:63:3c:7a:a1:
3b:05:88:40:d6:7f:23:64:ab:a0:ac:c4:17:88:2e:
c9:f9:a1:02:4d:31:56:b4:87:49:94:49:b7:9a:b9:
39:1d:1f:94:b9:ae:e3:f2:96:b3:19:0c:57:b6:0b:
bf:bd:5f:fb:54:1d:22:87:cb:60:e2:e0:b0:23:2d:
5b:3c:43:c3:c6:39:03:58:d2:2a:89:1c:fc:13:9a:
6a:4b:2d:4b:bc:13:01:85:26:e3:89:ce:12:6e:76:
11:ba:39:e2:46:38:13:21:93:44:d5:98:f6:f4:ed:
71:8b:be:0f:e4:e1:c9:50:55:08:df:60:cc:4d:ab:
87:50:29:82:97:65:72:71:bd:d6:06:01:74:92:9d:
19:c0:ce:0d:dc:3d:70:75:13:10:8b:80:e3:84:6a:
3d:91:08:24:5c:1b:9d:db:e8:96:4f:27:06:04:38:
49:ad:7f:d4:17:b3:e7:3d:4c:ee:f1:86:77:0f:ef:
2e:b2:3c:08:a5:b7:59:3c:45:74:99:9f:6e:7a:2a:
aa:6f:50:e8:16:52:7b:79:f1:2f:33:48:07:94:94:
ce:9e:61:a8:04:8e:ab:aa:50:99:2e:d9:6e:fd:21:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1D:15:56:AC:EC:DC:85:92:D3:87:87:5C:74:43:F9:DC:1D:F5:A3
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/wB0VVqzs3IWS04eHXHRD-dwd9aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.207.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:5f:25:57:9f:67:76:35:76:01:a5:10:19:54:f8:71:bc:e9:
ef:db:df:16:e3:10:9f:af:cf:a5:e1:8d:3d:90:38:2b:c2:5f:
13:65:dc:e0:1b:be:e9:c5:ed:d4:a1:52:c5:30:31:a3:89:53:
75:4c:16:8b:77:cb:1d:fc:b4:b0:89:93:0d:3c:40:b5:39:1d:
71:47:df:09:61:c2:d0:4a:ff:84:47:1b:4f:d4:73:9e:30:6a:
ca:49:51:4a:34:cd:a9:16:dc:c4:67:9f:b1:9c:a3:63:42:b0:
68:4f:f7:31:89:59:2f:69:0c:ce:74:59:79:08:2b:c4:e5:9a:
77:f6:7d:32:60:3e:8e:0b:cb:de:d7:f8:a9:2a:f7:3e:15:1e:
5f:5c:ce:d4:d2:91:82:52:07:71:e8:7f:07:49:78:98:19:22:
4c:db:6d:44:13:10:66:2d:89:0b:8a:78:89:fd:aa:45:12:a5:
c3:8b:79:74:3d:69:8d:53:01:16:3c:62:ca:35:ce:ce:32:ea:
7d:f2:6c:01:85:c3:95:89:60:9f:3c:bb:f0:7c:25:b1:6b:4d:
e9:a5:98:96:04:b6:cf:22:82:e2:2f:04:fc:bb:a9:70:a6:16:
d1:83:cd:2d:f9:bb:8c:20:6e:9f:e4:63:ac:5e:c1:4e:05:d3:
0f:5f:af:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:36:39 2025 by rpki-client