Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WuU5uGR-SjnANlJDpZeoUQW9sY8.roa
File: WuU5uGR-SjnANlJDpZeoUQW9sY8.roa (raw, json)
Hash identifier: B7zLSJ78UNift1ZRkC+l1nwsf5pf+klAd+ESRc0VdtU=
Subject key identifier: 5A:E5:39:B8:64:7E:4A:39:C0:36:52:43:A5:97:A8:51:05:BD:B1:8F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01967D8E8F3AE6C2005555F95A3CFCD25AFC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WuU5uGR-SjnANlJDpZeoUQW9sY8.roa
Signing time: Mon 28 Apr 2025 18:00:16 +0000
ROA not before: Mon 28 Apr 2025 18:00:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.208.0/23 maxlen: 23
84.32.214.0/23 maxlen: 24
84.32.223.0/24 maxlen: 24
84.32.230.0/24 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.66.0/23 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.127.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 06:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:8f:3a:e6:c2:00:55:55:f9:5a:3c:fc:d2:5a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 28 18:00:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ae539b8647e4a39c0365243a597a85105bdb18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:82:ad:c8:1b:b8:ef:a5:50:cb:8b:62:8a:
a4:9b:2f:5a:75:0f:05:2a:ee:e1:dc:0b:58:1a:68:
86:8b:c3:75:aa:89:21:8c:66:95:c2:cc:e4:0c:1d:
53:53:63:ad:70:9f:29:c0:89:93:fe:3c:69:4b:64:
20:ed:e7:8d:98:2d:44:03:eb:a8:11:89:00:0a:55:
1c:df:74:37:b8:cb:dd:35:b2:95:52:cf:6e:22:9f:
f3:eb:ce:fd:ad:ec:54:a3:f8:ae:d3:a3:73:c5:fb:
31:47:f3:60:97:f3:b7:a4:f9:89:c6:ad:54:8e:7e:
0c:48:6c:66:55:3f:2b:4e:ca:ea:a3:a4:ec:40:05:
08:6e:d7:f8:00:22:3f:15:0b:53:c1:ab:fe:c1:22:
3d:2f:1e:27:35:21:44:c9:01:6c:a7:23:47:dd:c0:
68:6b:c1:9c:ae:94:7a:3c:61:41:3b:27:e5:18:89:
74:6f:e9:75:b6:7e:1b:c6:4e:f2:58:0e:e3:a1:31:
f6:b9:63:da:ac:5f:03:4a:44:0e:cb:ab:47:f8:5e:
55:21:e0:5c:57:cd:6a:71:81:09:09:0c:94:e2:d7:
e7:af:50:eb:7c:ec:85:e1:85:22:1c:a1:c1:74:65:
a9:65:74:97:12:af:53:43:76:d8:e7:7e:aa:ca:57:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E5:39:B8:64:7E:4A:39:C0:36:52:43:A5:97:A8:51:05:BD:B1:8F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WuU5uGR-SjnANlJDpZeoUQW9sY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0/22
84.32.46.0/23
84.32.64.0/24
84.32.104.0/24
84.32.148.0/22
84.32.174.0/23
84.32.208.0/23
84.32.214.0/23
84.32.223.0/24
84.32.230.0/24
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.66.0/23
88.216.93.0/24
88.216.127.0/24
88.216.130.0/23
88.216.134.0/23
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
83:20:0f:37:49:36:61:48:01:a5:f2:b3:b7:2e:a0:00:6e:c3:
d1:51:34:8a:50:0f:4f:f7:c7:62:ff:fe:fb:f6:19:a9:9d:e5:
5b:da:ce:76:9c:11:c1:6f:38:1b:a1:9c:56:2c:61:95:04:32:
43:f7:9c:56:92:1e:39:9f:1a:9b:7d:2c:fa:2f:ef:8d:05:a7:
4d:19:96:51:af:0a:40:e2:28:cd:bf:d9:88:7e:0d:a3:f0:b9:
91:80:7b:50:22:85:ca:46:02:50:63:d4:26:3f:af:b8:5c:45:
bc:eb:aa:36:89:48:f2:ed:25:9f:d6:47:fc:47:69:aa:b2:c5:
c7:a1:ec:ea:1e:fe:a8:39:4d:b4:d4:64:22:c3:c0:10:51:48:
74:81:a0:63:5e:40:f5:cc:9e:74:66:3d:87:ae:85:61:b2:a0:
01:6c:63:73:cc:eb:0b:87:71:5d:23:b6:97:ea:df:1e:69:4d:
96:01:6b:8c:8d:9a:11:3c:91:1a:e3:d4:5a:4f:eb:25:de:82:
6a:e6:87:4e:bb:54:89:62:ab:f7:9b:ef:41:b2:a2:21:fa:62:
a9:05:fc:ef:31:23:01:67:40:3f:44:60:74:6c:d6:fd:4c:ff:
f4:0f:2c:1f:df:7b:d3:5e:e4:bf:69:6e:05:ec:f1:ce:61:de:
bf:b2:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:43:30 2025 by rpki-client