Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/WEDVfc9pOk4rXU_6pmDXPgTC-Ms.roa
File: WEDVfc9pOk4rXU_6pmDXPgTC-Ms.roa (raw, json)
Hash identifier: ZaQign3eJw6oc3QBpOVnZML+e0R4ss6pAx63JmGhqcc=
Subject key identifier: 58:40:D5:7D:CF:69:3A:4E:2B:5D:4F:FA:A6:60:D7:3E:04:C2:F8:CB
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 01950926A62A8136BF215BD3389838ECBBDA
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/WEDVfc9pOk4rXU_6pmDXPgTC-Ms.roa
Signing time: Sat 15 Feb 2025 10:28:02 +0000
ROA not before: Sat 15 Feb 2025 10:28:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212616
IP address blocks: 91.230.48.0/24 maxlen: 24
93.175.32.0/19 maxlen: 24
176.97.214.0/24 maxlen: 24
2a0e:5b00::/29 maxlen: 48
2a0e:5b00:500::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Feb 2025 04:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:09:26:a6:2a:81:36:bf:21:5b:d3:38:98:38:ec:bb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Feb 15 10:28:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5840d57dcf693a4e2b5d4ffaa660d73e04c2f8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:17:e4:af:dc:47:0f:4b:6e:02:64:68:8a:
6f:c6:ac:34:c7:56:f8:82:66:37:e0:3e:5d:93:5a:
2f:f3:86:de:11:46:17:b2:fd:79:49:51:8d:71:a0:
50:84:9c:94:4b:cf:5e:a8:c0:71:1f:f6:f9:9a:00:
ee:ff:d3:be:79:35:9e:b8:83:f5:6e:e4:e0:58:81:
cd:7a:f2:2d:a8:64:4b:21:16:bd:7d:b8:d2:f7:2b:
3d:9b:2a:64:4a:a4:cc:d0:13:65:08:3d:2c:a2:67:
de:f3:0a:d5:71:41:d2:02:c6:51:2f:da:50:0c:96:
11:32:16:68:39:e1:a3:28:73:57:40:d7:6f:dd:7e:
a7:b7:35:90:bc:2d:34:5e:f5:cf:64:a8:35:fa:30:
4c:b9:19:0f:96:f5:9f:65:2e:36:a1:ce:eb:2c:a8:
82:c1:be:28:30:9f:ed:00:00:10:bb:cb:f5:2b:a6:
2e:bf:7a:3b:ff:42:39:1c:b8:be:31:32:a4:c1:c7:
4f:55:6e:95:b3:19:fa:3b:59:b3:22:34:25:ac:19:
28:05:87:6a:a8:70:27:72:aa:2d:27:c6:dd:25:b4:
5e:ba:41:e0:43:6d:88:be:88:95:8f:14:f6:24:fb:
dd:f6:f2:4b:34:a1:b8:fa:37:bf:e5:ec:92:16:da:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:40:D5:7D:CF:69:3A:4E:2B:5D:4F:FA:A6:60:D7:3E:04:C2:F8:CB
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/WEDVfc9pOk4rXU_6pmDXPgTC-Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.48.0/24
93.175.32.0/19
176.97.214.0/24
IPv6:
2a0e:5b00::/29
Signature Algorithm: sha256WithRSAEncryption
50:06:f6:08:d0:8d:c7:09:4b:8f:d2:83:ec:c9:1e:43:5a:4c:
88:f0:ae:b2:16:2b:98:1d:1c:e5:84:1f:3b:64:03:82:9f:9a:
cf:2b:0c:37:53:75:49:4e:7e:be:29:11:9b:47:67:59:b7:5f:
d0:6c:95:ab:8d:8e:1f:bb:a8:de:68:20:3d:6b:ff:68:5c:25:
e4:99:be:73:25:ff:7b:9a:f2:98:a5:cd:00:c6:74:f6:7c:6b:
96:58:55:2d:c1:f9:ef:ce:c3:49:6e:54:a7:ab:4a:93:48:27:
0c:a5:6a:d1:98:0f:a4:ca:c1:a4:c7:d0:1d:1b:7b:9c:06:13:
ec:3c:5c:62:88:e0:6a:62:bb:f3:ef:07:8d:96:0f:4f:20:da:
12:b1:34:cf:c4:ce:7c:55:4e:8f:4d:40:56:22:df:17:c3:14:
7c:b1:48:b6:7a:fd:11:5f:1c:be:f4:3a:ff:96:16:83:ca:c4:
c7:30:8f:9d:27:87:35:69:ae:2b:d6:29:e7:02:97:63:6f:da:
b4:45:9e:f4:17:13:c9:02:6d:cd:16:e6:2f:d8:51:e0:02:f3:
d2:a7:a1:3e:ef:a7:9c:bc:5b:a4:9b:d6:46:4d:08:a5:bf:e7:
bf:66:a1:25:3b:cf:17:e9:cf:25:e1:a8:d5:f1:30:b3:84:cb:
8e:04:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:12:32 2025 by rpki-client