Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/WaMefjtPTmWkk5xjaIaEiu4uY04.roa
File: WaMefjtPTmWkk5xjaIaEiu4uY04.roa (raw, json)
Hash identifier: VefSxI9OO0HSPgiIDwN2EWt8aXEj9Q1PJbXE/5Mp3FE=
Subject key identifier: 59:A3:1E:7E:3B:4F:4E:65:A4:93:9C:63:68:86:84:8A:EE:2E:63:4E
Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial: 01928A09D148803A3AC9CC2D992D0B1242B6
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/WaMefjtPTmWkk5xjaIaEiu4uY04.roa
Signing time: Mon 14 Oct 2024 07:59:11 +0000
ROA not before: Mon 14 Oct 2024 07:59:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207369
IP address blocks: 185.39.79.0/24 maxlen: 24
185.138.184.0/22 maxlen: 22
185.138.184.0/23 maxlen: 23
185.138.184.0/24 maxlen: 24
185.138.186.0/23 maxlen: 23
185.138.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 08:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:09:d1:48:80:3a:3a:c9:cc:2d:99:2d:0b:12:42:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Validity
Not Before: Oct 14 07:59:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59a31e7e3b4f4e65a4939c636886848aee2e634e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:7a:56:df:2b:7c:bd:82:d9:1d:f1:c9:d6:
4f:12:62:9b:7e:ce:2a:ef:f5:96:b2:86:a1:71:06:
e3:03:dd:d0:6a:ec:8c:57:2a:10:83:98:c0:ac:f5:
f8:ec:8a:ca:53:10:40:c7:1e:2c:87:9d:f3:e8:13:
37:87:2a:48:72:fe:94:f4:83:99:16:cc:35:9e:7d:
ed:da:28:90:73:ef:1b:03:4b:11:c9:79:73:ee:5c:
18:7d:de:c7:9b:66:c6:20:4d:ef:43:3c:a2:ee:9a:
f7:a5:9b:16:2a:1c:41:cb:c7:4f:78:a3:19:81:29:
55:61:15:4e:30:1d:37:5a:c5:24:1e:e3:7f:9f:00:
d9:9c:04:86:f9:a5:1d:3c:4c:3f:f7:a5:bb:95:ba:
18:4d:eb:b7:3c:5c:94:2b:58:55:42:75:5b:ea:f1:
25:56:15:19:38:70:5f:30:7d:b3:4e:f9:cf:80:9d:
18:82:28:e5:f2:6b:b8:7c:73:5e:e4:fc:81:b8:84:
ec:46:d1:7c:62:36:9b:88:40:c3:95:2e:ce:ad:e9:
da:33:8e:6d:14:61:c9:07:5b:9e:b8:2a:ea:b1:5b:
ba:69:f0:a6:ed:30:82:7d:49:47:9e:7a:bd:38:fb:
77:14:df:f0:cf:35:fe:74:34:d2:af:28:37:d0:a1:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A3:1E:7E:3B:4F:4E:65:A4:93:9C:63:68:86:84:8A:EE:2E:63:4E
X509v3 Authority Key Identifier:
keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/WaMefjtPTmWkk5xjaIaEiu4uY04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.79.0/24
185.138.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:0e:7a:95:c1:a2:dc:33:fe:ac:c3:03:f2:d0:f0:7d:a8:a6:
36:c9:06:0c:9c:30:61:ef:d2:ef:d8:21:bd:81:9b:ea:ec:55:
38:c5:1a:71:c1:61:91:b7:e6:f3:d8:b0:1a:8f:e6:f1:7a:38:
1f:c2:99:e8:c3:1e:61:eb:af:93:8e:5b:c5:15:f7:40:68:39:
06:27:26:47:89:0d:55:b5:74:0a:f9:f7:dd:86:ba:b2:50:54:
13:cd:4f:83:8c:6c:33:e4:93:02:24:62:03:53:8c:5c:dc:0b:
42:a6:e6:cd:af:6e:25:e4:3c:e6:c2:5d:59:44:25:59:12:71:
84:f9:21:07:64:21:d5:b5:a9:c5:58:3f:9b:71:ca:83:15:bb:
2e:7d:f9:4f:e0:f4:5c:c9:cb:c3:e4:12:2f:5a:d9:b4:06:11:
71:6f:e6:56:52:d3:83:34:00:d5:c0:f6:8f:c3:1f:7b:0f:6b:
1b:fc:a2:c5:97:cf:c9:14:00:0f:ae:5d:8f:af:fb:3d:72:14:
84:15:84:33:2e:77:d1:22:17:a9:10:9a:14:28:77:59:11:e4:
55:d3:86:ef:91:ce:a4:f0:b0:e1:b2:db:5d:bf:66:db:9b:e9:
83:f4:a0:50:d0:c5:0d:8a:17:eb:db:22:cc:fe:67:0d:d6:af:
80:46:d7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:04:24 2025 by rpki-client