Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/WphgSC5npjy6infDkkkcMGtEHvk.roa
File: WphgSC5npjy6infDkkkcMGtEHvk.roa (raw, json)
Hash identifier: LseGeNvQcSwVlkSoYHrvtGQddK5W2dCyWvYSmNAm3Zw=
Subject key identifier: 5A:98:60:48:2E:67:A6:3C:BA:8A:77:C3:92:49:1C:30:6B:44:1E:F9
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01968786091E9613436AB2A2BC8CEFFC5DFF
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/WphgSC5npjy6infDkkkcMGtEHvk.roa
Signing time: Wed 30 Apr 2025 16:27:10 +0000
ROA not before: Wed 30 Apr 2025 16:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60647
IP address blocks: 46.38.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 20:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:86:09:1e:96:13:43:6a:b2:a2:bc:8c:ef:fc:5d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 30 16:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a9860482e67a63cba8a77c392491c306b441ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:39:a4:bc:93:1f:b0:c4:a1:26:04:27:e5:
d2:e8:d2:a1:a7:59:f8:75:22:6c:88:18:21:67:98:
ee:34:93:f3:f1:f9:4a:ec:1d:b5:ff:a0:a6:b5:98:
ed:32:68:e0:81:6f:40:c2:7a:0f:e7:75:e8:f5:42:
e0:38:87:1b:31:cf:4d:60:0f:28:bc:58:9a:67:b9:
37:50:7f:14:f8:81:4f:6e:77:bd:e2:63:d0:61:2b:
72:1f:05:e3:1d:45:25:eb:fa:8a:dd:11:d1:a9:2b:
03:b2:95:02:1d:3a:16:36:01:52:ef:ed:d3:90:3a:
70:12:62:6f:fa:66:18:a3:13:df:26:15:35:85:ad:
ae:cc:1a:5c:34:2f:25:70:5f:5a:c4:4c:5c:00:51:
df:8a:45:44:82:60:f0:1c:bb:83:8d:b1:b5:ef:2b:
ef:1f:d9:74:6b:86:0b:4c:06:17:e0:4e:ce:41:fb:
10:27:a5:08:d2:34:9a:af:0e:8e:d4:c2:41:d4:e9:
b1:3f:80:a6:7c:89:80:6e:e9:70:e3:af:8f:88:d2:
1d:e8:43:4b:90:c4:c4:25:46:ef:e9:1c:8d:62:b0:
54:ff:15:8a:2f:5a:da:00:d0:13:83:92:17:fb:f9:
5a:ee:43:cd:e7:45:6e:2f:9c:3a:ea:bd:9f:42:84:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:60:48:2E:67:A6:3C:BA:8A:77:C3:92:49:1C:30:6B:44:1E:F9
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/WphgSC5npjy6infDkkkcMGtEHvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:de:3d:0d:e7:86:14:79:92:64:da:5a:b0:94:87:58:16:b1:
28:d6:4e:70:57:d7:d3:bf:5b:1d:a2:20:ab:73:f2:1d:90:a0:
fa:b3:da:26:4b:2b:2a:4c:2d:aa:cc:6e:99:60:66:be:4f:6d:
af:fc:65:db:dd:51:86:a0:61:64:96:2a:6d:c1:c4:92:9f:ab:
33:36:d0:85:b2:73:77:5a:47:6c:48:54:e0:0e:bd:03:2e:b6:
4e:6c:02:57:e1:9c:ea:63:ad:d5:33:39:fd:8a:d5:34:db:e6:
8c:42:a8:7d:23:87:64:b7:56:81:51:61:53:90:84:72:08:97:
c1:dc:47:bc:98:c8:06:b2:b7:d2:6f:ed:4f:f5:a9:1e:7d:b5:
0b:73:4f:fe:1a:45:04:a1:16:c7:0e:7f:47:45:36:0c:c9:96:
2a:d7:5c:83:0a:cf:14:8e:82:26:90:ba:79:6d:43:e9:ee:e7:
1d:ec:2f:6e:ff:e1:9b:3e:28:5e:b6:67:11:99:3e:66:a0:98:
3c:ec:c3:d4:98:ed:12:e0:70:24:c6:38:3e:5a:bc:17:95:1d:
19:3d:31:10:2f:2d:1f:82:0d:70:d1:38:94:98:0e:d4:d4:d1:
b7:de:fc:4a:9b:cb:06:af:c3:25:97:56:f4:1d:9f:bf:c5:67:
84:d2:c3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:00:30 2025 by rpki-client