Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/WmJzDdDMZqa-SOPXdboeg0J2BFU.roa
File: WmJzDdDMZqa-SOPXdboeg0J2BFU.roa (raw, json)
Hash identifier: /+OksG0Zm6/W3Tq02jeWdFfIB0m+6PLx/BO0A8/28Fo=
Subject key identifier: 5A:62:73:0D:D0:CC:66:A6:BE:48:E3:D7:75:BA:1E:83:42:76:04:55
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 0193AC1B49510E26EF4CF7E45C35CA624039
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/WmJzDdDMZqa-SOPXdboeg0J2BFU.roa
Signing time: Mon 09 Dec 2024 15:48:09 +0000
ROA not before: Mon 09 Dec 2024 15:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34380
IP address blocks: 185.162.148.0/22 maxlen: 22
185.162.149.0/24 maxlen: 24
185.162.150.0/24 maxlen: 24
185.162.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Dec 2024 09:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:1b:49:51:0e:26:ef:4c:f7:e4:5c:35:ca:62:40:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Dec 9 15:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a62730dd0cc66a6be48e3d775ba1e8342760455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:07:9d:d5:64:db:87:6a:4a:91:13:71:b5:6e:
0d:7a:80:f8:e7:f3:48:f4:d7:73:78:28:9c:55:49:
97:44:03:57:a4:88:25:4d:0d:a4:57:c5:f8:3e:3e:
be:8b:f3:0d:a7:5b:a7:69:db:d1:74:c4:8a:da:00:
6e:1a:fd:94:51:67:d5:82:18:47:a2:3f:35:35:d5:
15:5c:b2:52:13:70:73:b0:a5:cf:a2:44:f8:74:8b:
f1:0b:d0:c1:bf:ec:0b:bf:68:54:90:a5:63:29:86:
ee:23:ed:04:4d:0e:e9:14:e3:a8:19:cf:50:d6:90:
b5:fe:ff:de:e2:87:c9:27:57:4c:11:0a:25:9a:58:
b2:69:83:55:70:cc:8a:4d:bf:b1:1c:c0:b8:d4:6c:
b3:23:ec:98:69:9a:1b:fd:a1:f2:2c:f4:cb:80:24:
52:8b:63:fe:81:b9:94:90:46:50:56:8c:c9:7d:af:
b7:50:19:0b:16:8f:7a:5c:2c:b3:8b:1b:43:43:22:
15:c3:db:38:82:23:a8:32:3e:70:bf:21:4c:fe:4e:
93:71:40:6d:90:bf:42:69:64:18:4c:f2:c1:3b:33:
cf:38:ed:51:df:b1:29:0d:c8:60:d3:2d:df:e3:b7:
36:d8:2d:16:2b:3f:0e:2c:1a:34:27:6f:b0:9a:e2:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:62:73:0D:D0:CC:66:A6:BE:48:E3:D7:75:BA:1E:83:42:76:04:55
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/WmJzDdDMZqa-SOPXdboeg0J2BFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.148.0/22
Signature Algorithm: sha256WithRSAEncryption
19:8b:d0:64:4b:9c:dd:3b:fd:9d:80:74:ce:40:fb:54:13:34:
4f:7b:bb:73:e7:e5:46:fb:0d:55:48:ff:27:40:ad:88:70:5a:
0c:59:09:ee:83:7d:21:52:10:fa:fc:17:c5:31:0c:ad:ab:05:
49:70:e7:38:0c:4f:f1:1a:78:26:ad:0e:7a:2e:ba:81:5c:c5:
a6:cd:e7:43:ff:c7:06:e9:40:50:a2:17:8f:c2:b5:dc:f0:80:
4c:9a:5f:19:ac:5d:d3:24:45:40:76:33:5f:7c:4e:0d:de:de:
25:53:29:c0:ce:f4:47:39:ac:e1:2a:45:dd:04:1d:ae:9e:ff:
59:38:71:63:e6:52:90:b5:dc:25:58:8a:5c:88:41:19:d3:6f:
1a:5f:0c:93:51:8b:69:43:9e:b9:f6:e5:d8:05:51:9f:38:85:
a8:89:1a:e4:de:d9:da:83:58:d3:66:f1:4a:96:ed:73:2a:4f:
75:17:35:f6:17:ee:ba:b3:f8:73:db:b5:17:fb:c5:72:66:94:
f1:5e:d0:2a:4e:db:dd:37:17:82:5b:e5:c9:ad:d3:f7:df:f4:
ac:90:22:81:70:ec:c4:1c:2c:72:70:fd:5f:dc:45:97:a3:02:
26:1e:dc:d3:e2:6a:29:bc:e4:67:ee:23:82:7e:8c:1d:89:eb:
ca:4d:1e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:34:04 2025 by rpki-client