Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WZXMozWIPVQ6CBqdCcR6xkJrhyQ.roa
File: WZXMozWIPVQ6CBqdCcR6xkJrhyQ.roa (raw, json)
Hash identifier: zsWWLobZ4ve83eSRszFUQ5V2mzxi2J5YxKgHl6yDP2Q=
Subject key identifier: 59:95:CC:A3:35:88:3D:54:3A:08:1A:9D:09:C4:7A:C6:42:6B:87:24
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01953B53806BDD4C6D2B8C73990B6686D000
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WZXMozWIPVQ6CBqdCcR6xkJrhyQ.roa
Signing time: Tue 25 Feb 2025 04:18:02 +0000
ROA not before: Tue 25 Feb 2025 04:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 45.87.120.0/24 maxlen: 24
91.132.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3b:53:80:6b:dd:4c:6d:2b:8c:73:99:0b:66:86:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 25 04:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5995cca335883d543a081a9d09c47ac6426b8724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:97:15:21:72:71:ca:ba:e0:eb:2d:de:ca:f9:
1f:93:4d:e2:c9:07:93:91:c6:8e:af:ff:ba:b2:98:
5b:29:31:4a:f7:7a:54:b3:79:48:f6:e4:b6:10:59:
9f:93:d1:45:98:f3:24:c4:b2:ef:82:d8:f4:57:58:
e3:ff:12:69:eb:f0:30:54:30:60:6e:b1:40:54:7c:
84:7e:c3:0a:f3:26:26:29:d0:4c:c9:e2:c0:de:39:
ba:3b:db:f1:c7:95:42:84:06:f3:9f:10:42:4e:69:
a7:5e:07:c7:87:c6:16:7e:cd:0e:66:31:48:3f:f0:
5b:41:f4:9e:ea:ab:88:bc:9e:b7:29:0a:ce:97:a7:
6e:58:43:e0:e8:3c:ba:d7:1d:9b:1b:27:fc:c2:13:
5c:db:7e:98:28:c9:17:cc:51:e1:44:17:9e:e3:41:
be:5f:87:3f:49:06:86:e8:e4:c7:fc:5e:f7:90:49:
9f:d6:93:6e:0c:83:a9:e4:37:ca:5c:8e:d6:15:d1:
b2:6f:d0:08:1e:63:4f:12:d3:ff:cc:8a:e8:27:29:
11:fa:0e:3d:1c:20:a4:9c:90:91:f1:c0:1f:a5:cf:
c2:d7:ce:dc:5e:00:d8:fd:53:37:17:60:5f:22:e8:
f7:5c:a8:ef:36:80:72:8d:96:5d:59:57:ec:5b:e8:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:95:CC:A3:35:88:3D:54:3A:08:1A:9D:09:C4:7A:C6:42:6B:87:24
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WZXMozWIPVQ6CBqdCcR6xkJrhyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.120.0/24
91.132.49.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2b:10:1b:e7:52:ac:6e:6e:2a:bf:e9:c1:dc:53:99:67:29:
19:fe:0d:02:7d:2a:e9:46:bd:1e:94:e5:fd:18:23:5e:c3:fb:
b4:06:af:ba:00:d5:f5:3b:d2:00:23:18:e5:d4:ec:2c:ee:e5:
26:d5:11:f9:ad:ba:ac:e6:c3:7d:98:1d:8c:73:c0:4d:97:8d:
5a:42:f3:e5:9e:0c:0b:62:0d:0c:5c:08:5a:3b:49:54:b9:b8:
9b:3f:26:7e:ed:3e:7d:c5:dc:0e:aa:58:c8:74:c6:63:2a:89:
43:1c:4d:70:95:66:68:17:68:5c:dc:07:4f:6d:92:28:03:ce:
f4:34:ab:24:91:d4:61:05:7d:32:5a:37:1e:4b:fa:7c:2b:7c:
e8:9e:66:ef:0c:9e:50:3e:47:7b:0b:38:b9:fd:8a:45:eb:6f:
89:14:31:ea:6b:f9:8d:85:05:f3:0c:1c:3c:b7:c5:bb:6b:40:
6d:19:5a:e1:52:2f:98:65:27:59:a9:38:ef:c2:f8:b9:99:56:
0b:97:da:c9:ce:1f:7f:a6:02:5e:d3:a5:10:5e:27:3f:06:32:
bd:ae:89:89:b9:5b:77:72:a5:53:ab:22:12:f5:7d:85:05:75:
30:79:b1:25:a8:dc:15:19:b6:5a:d5:55:dd:b9:98:df:67:5f:
56:64:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:37:37 2025 by rpki-client