Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/wCnT5ALVVe6XkicPAURyKhaHSAw.roa
File: wCnT5ALVVe6XkicPAURyKhaHSAw.roa (raw, json)
Hash identifier: YDTJGwFpBf/LmDEpi+CPf50crXsXZvONUT6y761phf4=
Subject key identifier: C0:29:D3:E4:02:D5:55:EE:97:92:27:0F:01:44:72:2A:16:87:48:0C
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0197C9C074D583BAF75569370F4D8EFDF947
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/wCnT5ALVVe6XkicPAURyKhaHSAw.roa
Signing time: Wed 02 Jul 2025 06:08:42 +0000
ROA not before: Wed 02 Jul 2025 06:08:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43075
IP address blocks: 88.135.128.0/19 maxlen: 19
109.229.192.0/19 maxlen: 19
171.25.218.0/23 maxlen: 23
176.106.48.0/20 maxlen: 20
176.106.160.0/20 maxlen: 20
176.106.176.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 02 Jul 2025 07:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:c0:74:d5:83:ba:f7:55:69:37:0f:4d:8e:fd:f9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jul 2 06:08:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c029d3e402d555ee9792270f0144722a1687480c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:8f:d7:c1:6c:01:90:d8:0a:5e:58:cd:b8:
70:25:a2:1f:db:c3:e4:99:45:f0:da:f8:56:c5:78:
0c:94:6e:91:75:f4:25:db:8b:c2:20:cf:95:52:61:
ce:e0:1d:1f:98:c2:27:9f:4d:69:3c:ab:e4:3f:3c:
d1:a9:3f:9b:18:94:19:af:eb:bd:4f:0e:86:d5:aa:
d9:21:02:61:d8:2d:3c:24:68:70:a4:98:6d:75:0e:
c4:67:a7:33:5c:eb:c7:3f:2b:08:7d:be:66:af:da:
6a:cf:1d:e1:78:94:2a:c5:ea:cd:69:f2:28:28:c4:
29:dc:56:f7:57:a9:af:0d:67:5a:bc:34:ae:7b:60:
c4:30:bf:f2:b3:3e:09:1f:35:e9:9c:33:93:84:cc:
f2:fb:b8:58:b2:be:a3:ea:78:24:19:c4:ce:0c:91:
a7:f6:3d:68:56:f3:b1:1d:fb:c5:ae:41:85:bc:0d:
23:29:31:da:c7:83:b6:1a:54:da:96:cd:6a:78:a7:
fc:0d:ea:cd:b0:d7:45:62:ae:5f:90:40:e7:d5:71:
fe:15:51:a3:6b:22:cc:71:e3:33:97:f5:e7:e5:68:
95:a8:8f:34:ae:bb:15:f6:db:6e:ec:18:29:35:da:
71:b1:99:7c:ab:ed:e8:00:90:04:db:22:18:11:55:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:29:D3:E4:02:D5:55:EE:97:92:27:0F:01:44:72:2A:16:87:48:0C
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/wCnT5ALVVe6XkicPAURyKhaHSAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.128.0/19
109.229.192.0/19
171.25.218.0/23
176.106.48.0/20
176.106.160.0-176.106.183.255
Signature Algorithm: sha256WithRSAEncryption
8e:71:a0:23:78:ab:30:0f:46:0d:e8:aa:ca:1e:bf:03:c0:55:
f9:d5:3f:08:07:75:fc:5c:5b:61:c1:e2:5a:b6:56:73:11:9b:
8c:55:04:90:45:a7:82:5d:8d:9b:99:bd:93:a2:96:3e:80:e5:
74:24:d0:2f:5b:9f:7f:38:7a:ef:51:dd:16:fc:1c:21:f7:9e:
e6:c6:9b:f9:ab:d4:58:a9:49:28:aa:b5:ae:b0:25:1a:1f:19:
e3:e4:2a:16:6c:18:1f:06:ef:3a:e1:2c:70:4d:78:28:f1:8e:
d0:ff:e7:32:96:36:84:00:19:db:66:07:78:c6:cc:c1:01:d8:
da:43:4c:14:00:44:4a:57:1f:40:33:0d:20:1d:91:95:5a:3d:
a1:f3:92:4f:c5:83:8b:cb:43:81:b2:2e:85:75:a5:2e:2a:6e:
2b:d6:a0:27:db:b9:f0:93:a0:29:57:0f:b0:24:43:83:c2:35:
7a:b7:e7:87:10:70:ad:1e:00:91:04:40:29:72:97:da:ae:11:
b6:27:c8:70:43:2d:9e:3b:45:5b:2d:a7:d9:88:c8:9b:07:c8:
de:5b:16:90:4e:f7:45:38:3e:21:a0:db:10:20:e8:74:e1:10:
4f:31:03:7f:a1:34:a9:e2:9c:02:e4:30:03:fc:03:f6:81:0b:
20:9d:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:42:20 2025 by rpki-client