Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wKWDjxjWSjFETr43dys3oXYq1WE.roa
File: wKWDjxjWSjFETr43dys3oXYq1WE.roa (raw, json)
Hash identifier: 6qojYvyG3JoS8EfszvMJC1JyfuQIXBF/Y7wGeXUbE1Q=
Subject key identifier: C0:A5:83:8F:18:D6:4A:31:44:4E:BE:37:77:2B:37:A1:76:2A:D5:61
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196A9C60CB5704B20DD10E21FB7BB132E41
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wKWDjxjWSjFETr43dys3oXYq1WE.roa
Signing time: Wed 07 May 2025 08:04:11 +0000
ROA not before: Wed 07 May 2025 08:04:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 83.219.97.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 13:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c6:0c:b5:70:4b:20:dd:10:e2:1f:b7:bb:13:2e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 7 08:04:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0a5838f18d64a31444ebe37772b37a1762ad561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:86:09:f5:96:cd:d4:7d:2c:f2:b3:70:44:
2e:2b:9e:a9:33:c2:cb:6f:29:76:00:71:c7:2b:61:
b3:8f:23:0c:94:3e:5e:79:c7:ad:be:90:ec:40:ac:
9c:3e:85:b4:90:23:63:1c:dc:61:a3:f4:6e:00:91:
51:78:c1:06:2f:1f:c5:a8:1a:77:b2:96:a9:ae:91:
5d:e3:a6:78:d7:31:d2:d7:cd:2e:25:f7:12:d8:38:
8d:e5:62:b2:5d:f8:a4:a1:31:a4:e1:9b:6b:f0:5c:
3e:f5:7d:d8:8f:35:9e:60:67:18:29:26:50:22:17:
74:6b:a8:e3:33:18:4a:78:85:ef:29:fe:3e:17:ab:
57:d0:36:4f:d5:28:bb:8e:57:c0:74:99:bf:82:8b:
b3:52:3c:98:04:f8:07:e2:4b:03:59:27:0b:09:eb:
44:96:ae:e5:b9:bd:71:e5:2a:1e:b5:86:81:6a:25:
3b:e5:7f:44:67:17:fb:58:1b:37:57:b8:92:ff:3f:
ec:99:e8:c4:63:d5:56:b9:62:9d:f5:80:33:87:ce:
14:18:dd:9a:97:04:6b:50:d5:d1:6b:35:fe:1b:ef:
b3:2b:6a:68:62:36:53:9c:26:ea:7c:be:9b:32:84:
ce:06:98:27:5c:43:a1:a3:19:a2:fa:24:bc:52:fd:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A5:83:8F:18:D6:4A:31:44:4E:BE:37:77:2B:37:A1:76:2A:D5:61
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wKWDjxjWSjFETr43dys3oXYq1WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.97.0/24
87.121.86.0/24
87.121.221.0/24
141.98.6.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:42:7c:45:7e:f3:d8:d7:f9:e4:bd:f3:52:0a:f3:d7:9f:17:
63:59:01:38:33:35:33:49:88:17:b3:d2:ed:c5:c4:a3:cb:3d:
1f:b7:5b:be:51:1f:13:eb:a1:0c:58:90:17:1b:69:eb:19:40:
3c:75:a8:3c:49:c5:c3:8f:10:2a:0e:6e:97:72:fb:82:ea:aa:
6e:42:60:ae:aa:3f:dc:80:29:dc:df:b5:12:ce:7e:0b:39:17:
3c:51:a5:87:58:72:28:82:e8:ff:a7:29:f1:f0:71:38:d3:d7:
76:a3:9a:46:2f:6e:9f:cc:ef:25:32:4b:77:a2:80:64:11:30:
e0:fc:24:8c:5c:16:47:21:a6:dc:76:fe:25:86:b8:93:38:48:
f2:64:70:c1:ce:7c:09:cd:75:94:86:0d:ab:65:a1:3f:39:fb:
49:ca:75:2b:3d:fd:82:ac:c3:b9:4e:f1:a8:bf:1e:2b:e2:aa:
77:31:50:ae:7f:82:b6:19:48:db:8f:f2:2a:24:8c:0d:94:8d:
96:42:53:a2:f2:f5:d6:73:73:a7:09:eb:33:7c:42:60:c1:fa:
19:ca:e6:e0:9a:0e:9c:21:9e:e3:f8:36:cf:49:52:f3:3f:a4:
ce:7f:74:96:21:0f:fa:ae:1a:7e:e9:f9:0e:ad:80:1c:21:28:
31:7b:19:c9
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZapxgy1cEsg3RDiH7e7Ey5BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNTA3MDgwNDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGE1ODM4ZjE4ZDY0YTMxNDQ0ZWJlMzc3NzJiMzdhMTc2MmFkNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm6GCfWWzdR9LPKzcEQuK56pM8LL
byl2AHHHK2GzjyMMlD5eecetvpDsQKycPoW0kCNjHNxho/RuAJFReMEGLx/FqBp3
spaprpFd46Z41zHS180uJfcS2DiN5WKyXfikoTGk4Ztr8Fw+9X3YjzWeYGcYKSZQ
Ihd0a6jjMxhKeIXvKf4+F6tX0DZP1Si7jlfAdJm/gouzUjyYBPgH4ksDWScLCetE
lq7lub1x5SoetYaBaiU75X9EZxf7WBs3V7iS/z/smejEY9VWuWKd9YAzh84UGN2a
lwRrUNXRazX+G++zK2poYjZTnCbqfL6bMoTOBpgnXEOhoxmi+iS8Uv3ozwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFMClg48Y1koxRE6+N3crN6F2KtVhMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvd0tXRGp4aldTakZFVHI0M2R5czNvWFlxMVdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAU9thAwQA
V3lWAwQAV3ndAwQAjWIGAwQAufyxAwQAwjD6MA0GCSqGSIb3DQEBCwUAA4IBAQB8
QnxFfvPY1/nkvfNSCvPXnxdjWQE4MzUzSYgXs9LtxcSjyz0ft1u+UR8T66EMWJAX
G2nrGUA8dag8ScXDjxAqDm6XcvuC6qpuQmCuqj/cgCnc37USzn4LORc8UaWHWHIo
guj/pynx8HE409d2o5pGL26fzO8lMkt3ooBkETDg/CSMXBZHIabcdv4lhriTOEjy
ZHDBznwJzXWUhg2rZaE/OftJynUrPf2CrMO5TvGovx4r4qp3MVCuf4K2GUjbj/Iq
JIwNlI2WQlOi8vXWc3OnCeszfEJgwfoZyubgmg6cIZ7j+DbPSVLzP6TOf3SWIQ/6
rhp+6fkOrYAcISgxexnJ
-----END CERTIFICATE-----
Generated at Tue May 13 17:37:17 2025 by rpki-client