Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/wkF_A4SXX6q_JMEGiXQ14N5VHW4.roa
File: wkF_A4SXX6q_JMEGiXQ14N5VHW4.roa (raw, json)
Hash identifier: Y2Gi1ddD0MFEaCv/F9+Crh/6jDDVn07vxfY++y0Ou0o=
Subject key identifier: C2:41:7F:03:84:97:5F:AA:BF:24:C1:06:89:74:35:E0:DE:55:1D:6E
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 01941FFA29F860FF7A2DC2937B05484A719F
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/wkF_A4SXX6q_JMEGiXQ14N5VHW4.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35185
IP address blocks: 85.209.164.0/24 maxlen: 24
85.209.165.0/24 maxlen: 24
85.209.166.0/24 maxlen: 24
85.209.167.0/24 maxlen: 24
91.208.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 10:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:29:f8:60:ff:7a:2d:c2:93:7b:05:48:4a:71:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2417f0384975faabf24c106897435e0de551d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:33:93:b3:40:12:f4:80:af:4c:ae:72:d7:
31:5f:ac:50:88:a2:bc:63:dd:bd:5f:70:95:f7:03:
a0:3c:72:04:4e:5b:c9:04:ce:13:2f:23:e5:fe:56:
a4:aa:da:62:12:94:be:bd:2e:e5:7e:69:44:5d:42:
24:74:84:17:e4:1b:0c:f6:02:45:2d:1f:2e:c8:0d:
e4:f8:ce:ea:24:63:00:7b:0c:e3:48:04:01:ee:b3:
f3:da:67:0d:97:7c:40:28:3b:b6:20:ad:ab:20:3d:
21:b6:07:99:66:79:52:6e:35:6e:2f:62:e2:f0:15:
21:fa:4e:81:18:5a:14:71:77:3d:de:9f:f5:32:2f:
84:ef:49:bc:fc:05:46:ca:39:c8:0e:7b:a7:11:45:
d2:50:a5:2c:42:e5:4b:ce:71:5e:11:15:5c:06:d6:
09:8b:09:63:87:eb:f2:d1:d8:95:73:fc:8a:f5:7a:
8c:8f:0f:17:e9:29:6a:20:cd:a5:d9:72:b4:e2:29:
ce:4e:67:49:5d:88:07:1f:e0:22:b7:02:19:d5:fb:
f9:84:fd:51:94:59:1f:f3:7e:51:58:fb:64:22:7d:
ea:5a:49:3a:a8:81:8d:e3:34:52:21:88:c9:fb:bd:
3b:cc:1a:00:84:42:c6:d9:e8:01:0d:31:1f:a2:4e:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:41:7F:03:84:97:5F:AA:BF:24:C1:06:89:74:35:E0:DE:55:1D:6E
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/wkF_A4SXX6q_JMEGiXQ14N5VHW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.164.0/22
91.208.199.0/24
Signature Algorithm: sha256WithRSAEncryption
35:45:3e:ec:06:ad:7a:cc:a6:85:30:9d:4e:fe:19:07:5e:fd:
17:16:35:c0:01:30:f0:91:7c:58:af:41:d5:bb:d1:29:e1:61:
08:4b:1d:cd:12:38:ce:98:04:4b:2b:70:cc:be:1b:68:ee:72:
0a:a9:51:44:55:86:6b:fe:4f:63:4b:5f:4e:b4:60:fa:24:6d:
7a:a7:ac:d5:c6:4b:80:a6:a7:5a:25:10:fc:6d:7a:9e:c0:98:
65:85:fe:db:c3:bf:7b:89:74:c6:80:f6:78:d3:8e:36:e2:70:
1c:68:63:69:56:5d:68:ed:88:01:cb:d2:37:79:2c:5a:cf:d0:
f3:22:d4:81:4f:fa:da:91:64:75:c0:7c:e3:9b:80:98:e8:2c:
6b:74:1a:8b:4e:5d:84:bb:a9:4b:74:4e:b2:02:b7:b2:25:9b:
71:bc:ed:51:fa:c7:e6:80:51:06:31:c9:bd:3a:31:51:b2:d3:
1e:5e:66:f7:c0:43:c5:ab:58:22:80:72:cb:ea:ad:56:31:9e:
fd:2d:65:3b:b2:0c:94:35:49:4c:ab:87:13:f3:7f:02:aa:cb:
0a:4d:26:7d:01:ac:dc:52:29:0f:d0:98:14:8b:fb:8c:07:e0:
1f:e2:fa:42:73:52:42:1c:39:00:f6:6f:f6:72:76:8d:d7:03:
65:40:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:40:10 2025 by rpki-client