Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/RWnN8YEETkbU7QEjhLOcMJyc8Kc.roa
File: RWnN8YEETkbU7QEjhLOcMJyc8Kc.roa (raw, json)
Hash identifier: cupkzbcpcDrHzsa67McXAaV3n9QWuVadAlQM3ydT+aY=
Subject key identifier: 45:69:CD:F1:81:04:4E:46:D4:ED:01:23:84:B3:9C:30:9C:9C:F0:A7
Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial: 019744AC6459C7A99BFBA6D2CB8CCDD198C5
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/RWnN8YEETkbU7QEjhLOcMJyc8Kc.roa
Signing time: Fri 06 Jun 2025 09:57:17 +0000
ROA not before: Fri 06 Jun 2025 09:57:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49121
IP address blocks: 5.57.209.0/24 maxlen: 24
37.221.68.0/24 maxlen: 24
37.221.69.0/24 maxlen: 24
37.221.70.0/24 maxlen: 24
37.221.71.0/24 maxlen: 24
45.87.117.0/24 maxlen: 24
45.87.118.0/24 maxlen: 24
45.87.119.0/24 maxlen: 24
185.186.0.0/24 maxlen: 24
185.186.1.0/24 maxlen: 24
185.232.166.0/24 maxlen: 24
194.61.10.0/23 maxlen: 23
194.147.74.0/23 maxlen: 23
194.147.74.0/24 maxlen: 24
2a09:e200::/48 maxlen: 48
2a09:e200:e200::/48 maxlen: 48
2a09:e206:c1::/48 maxlen: 48
2a09:e207:810::/48 maxlen: 48
2a09:e207:820::/48 maxlen: 48
2a09:e207:830::/48 maxlen: 48
2a09:e207:860::/48 maxlen: 48
2a09:e207:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 06 Jun 2025 09:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:ac:64:59:c7:a9:9b:fb:a6:d2:cb:8c:cd:d1:98:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Validity
Not Before: Jun 6 09:57:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4569cdf181044e46d4ed012384b39c309c9cf0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5e:77:ba:44:26:fe:7d:3b:03:76:00:c6:14:
8f:90:8f:ed:a8:71:3b:b4:4f:f2:4e:34:e9:bb:3f:
f0:f2:96:9a:8e:b3:43:6e:cd:9a:1e:e6:39:c2:d6:
b6:3f:f5:ab:d5:f4:b5:e2:06:6a:1c:0e:7f:44:ed:
dc:e2:02:e7:a2:01:56:d8:6a:74:d7:dd:82:50:af:
67:fb:d3:d1:e9:78:bf:9c:b3:0d:4a:5b:b8:5f:21:
dc:8f:3f:fa:32:bb:65:31:36:f3:45:bb:6f:01:54:
bd:05:b1:d0:9b:e0:45:d5:84:c1:c2:07:03:4b:da:
ac:16:09:aa:6f:5e:18:48:28:ce:ea:d7:9c:5a:54:
44:84:d9:a6:9c:77:ca:89:f1:41:b0:48:f6:0f:3b:
41:a3:f0:ad:f3:4e:eb:e6:e0:18:19:b7:19:a9:98:
45:cf:00:fe:9f:f5:12:05:19:d8:f8:9b:ea:1e:eb:
06:39:c8:09:f2:18:21:04:b9:fa:e9:f3:ec:9a:f5:
6e:35:61:39:5e:38:53:ab:fc:43:43:34:94:18:9b:
22:50:3f:11:0b:c1:f8:c1:13:8e:f6:d6:89:a8:8f:
4d:a6:c3:53:e6:cf:3e:d5:e8:82:5e:53:ba:51:63:
77:6b:f6:b3:f5:51:d0:3d:d3:ba:a6:7e:68:2d:9a:
66:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:69:CD:F1:81:04:4E:46:D4:ED:01:23:84:B3:9C:30:9C:9C:F0:A7
X509v3 Authority Key Identifier:
keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/RWnN8YEETkbU7QEjhLOcMJyc8Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.209.0/24
37.221.68.0/22
45.87.117.0-45.87.119.255
185.186.0.0/23
185.232.166.0/24
194.61.10.0/23
194.147.74.0/23
IPv6:
2a09:e200::/48
2a09:e200:e200::/48
2a09:e206:c1::/48
2a09:e207:810::/48
2a09:e207:820::/48
2a09:e207:830::/48
2a09:e207:860::/48
2a09:e207:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
98:4b:7b:a3:a4:4b:9b:eb:79:74:29:16:c6:db:ea:df:1c:74:
9d:ce:40:31:6b:99:63:cd:6d:de:fa:fc:e8:81:38:8e:d3:7d:
40:6e:ee:b3:8c:97:80:bc:83:12:90:ae:04:3e:90:68:6a:93:
75:b4:e5:2a:b9:ee:3e:3f:da:e0:f3:04:89:bb:1f:c0:44:22:
49:ee:a7:d1:49:b7:2d:7a:67:fb:5a:67:2c:b3:a5:4a:4f:45:
c5:c9:5e:73:01:65:e9:60:26:a7:0d:e2:a5:41:9c:95:92:e3:
1f:0b:db:39:80:80:bd:83:cb:ff:52:c9:ba:75:d3:1d:5c:d0:
b0:72:27:38:2c:c1:a1:a0:4f:91:1a:7b:37:f3:06:8d:0c:be:
89:44:e6:eb:0a:1f:65:85:f1:40:5c:a1:c7:09:66:fb:c2:33:
ab:7b:ee:8b:7f:50:88:f1:24:0d:7b:05:da:cf:d8:79:f2:cd:
f0:6c:e4:c4:a6:06:55:9d:62:05:d9:cf:60:84:33:70:56:9c:
66:d2:e1:e9:13:1c:ae:c5:cc:58:db:44:b2:3e:d3:e4:66:c7:
8f:69:7b:96:b8:78:76:c7:4d:b9:8d:57:ac:a2:88:ac:b4:c2:
5e:06:7f:a1:7e:69:d2:18:33:12:4b:66:03:c8:a1:77:6e:ee:
a9:12:3d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:20:19 2025 by rpki-client