Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WOmr2MCZMoQkzeb-McbbnFPHH4I.roa
File: WOmr2MCZMoQkzeb-McbbnFPHH4I.roa (raw, json)
Hash identifier: +4PBYHECN38W7hUi5yVkRr+zh10ZTQ5Jm1wMHdiCNUo=
Subject key identifier: 58:E9:AB:D8:C0:99:32:84:24:CD:E6:FE:31:C6:DB:9C:53:C7:1F:82
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0196825B1AA5A61BE29A3C53DF0E60F32A2D
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WOmr2MCZMoQkzeb-McbbnFPHH4I.roa
Signing time: Tue 29 Apr 2025 16:22:10 +0000
ROA not before: Tue 29 Apr 2025 16:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 89.187.5.0/24 maxlen: 24
89.187.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:5b:1a:a5:a6:1b:e2:9a:3c:53:df:0e:60:f3:2a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Apr 29 16:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58e9abd8c099328424cde6fe31c6db9c53c71f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:59:3a:b1:3f:8b:8a:49:62:1c:1c:6f:a4:
9b:da:03:1e:32:2e:56:1a:7c:8d:3e:93:83:db:c7:
98:bf:d7:53:20:15:e9:04:2c:ee:0d:1c:64:bf:d5:
b2:7a:26:c6:3f:22:bf:38:e9:af:03:27:57:58:a3:
8a:89:25:d9:8b:55:04:5f:18:90:a3:ec:fe:c8:87:
f4:21:e7:cb:33:83:11:1b:25:16:b3:31:28:71:dc:
37:6e:d8:94:67:f8:f6:bd:39:c2:dd:1c:6b:27:96:
13:38:f5:47:b4:56:94:a7:c0:82:3e:24:d7:77:06:
d7:bf:1a:d3:e9:5b:b4:4f:89:c0:7e:0a:a0:ec:8e:
8e:89:df:c9:3d:b6:a2:05:26:48:36:02:21:70:3e:
6a:82:fd:9d:87:0c:c1:18:28:8e:8a:af:7f:9b:00:
52:40:be:9c:a5:9a:b8:9f:00:77:b0:1e:4b:54:29:
92:d1:f9:ca:e7:cf:2a:91:8b:a2:ea:8e:46:1a:15:
41:a4:c5:93:07:12:ca:61:a3:c2:13:3f:83:8b:5d:
ee:6a:6f:51:cf:d3:42:9f:a0:a9:cb:9d:06:fc:9a:
2a:3e:6b:41:f8:6e:a0:a8:88:7a:59:c8:6f:b8:a5:
51:b3:70:73:0a:14:72:45:23:59:8b:ec:20:84:a3:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E9:AB:D8:C0:99:32:84:24:CD:E6:FE:31:C6:DB:9C:53:C7:1F:82
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WOmr2MCZMoQkzeb-McbbnFPHH4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.5.0/24
89.187.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:0b:d7:66:39:10:d0:7b:da:02:e1:6c:ac:17:8f:93:fb:22:
6b:c5:0c:71:77:92:9c:51:50:ec:99:fe:d4:e8:22:ca:70:13:
b0:8b:d2:b6:a4:85:6d:8d:92:4d:68:77:d1:7d:37:e1:69:cf:
64:0e:e6:c8:cd:1b:5d:df:61:e1:68:be:d7:80:d7:b7:e5:10:
1a:9d:66:6d:52:51:c7:a7:a7:e5:fd:e5:37:5f:05:2e:b8:d7:
19:ef:1b:f9:b9:c1:34:21:47:5f:73:68:c1:7b:76:e5:6f:3b:
e7:a5:f5:0a:43:a1:50:ed:de:6d:d9:bf:c3:15:88:4e:07:a7:
09:60:67:2b:37:5f:e5:9f:d7:df:dc:ce:80:ce:f2:6f:b8:82:
1a:96:ce:ba:87:55:13:d6:88:8b:38:90:a6:ff:ad:59:8b:11:
0d:03:a4:22:e6:ed:38:69:d4:4d:b8:8c:b1:4f:89:3d:03:50:
ae:91:db:a2:3f:eb:92:2a:d1:12:3c:11:a3:78:ce:be:13:2a:
62:cf:ac:06:30:54:1d:16:87:34:7a:b7:2a:df:b7:fa:eb:95:
9f:62:c3:2d:62:bf:7b:cb:e5:06:00:a0:22:04:a9:48:f4:14:
cc:96:c1:3f:09:88:a8:a5:73:c9:41:7c:9b:1d:8d:76:d9:03:
ce:42:14:88
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZaCWxqlphvimjxT3w5g8yotMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjUwNDI5MTYyMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGU5YWJkOGMwOTkzMjg0MjRjZGU2ZmUzMWM2ZGI5YzUzYzcxZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+pZOrE/i4pJYhwcb6Sb2gMeMi5W
GnyNPpOD28eYv9dTIBXpBCzuDRxkv9WyeibGPyK/OOmvAydXWKOKiSXZi1UEXxiQ
o+z+yIf0IefLM4MRGyUWszEocdw3btiUZ/j2vTnC3RxrJ5YTOPVHtFaUp8CCPiTX
dwbXvxrT6Vu0T4nAfgqg7I6Oid/JPbaiBSZINgIhcD5qgv2dhwzBGCiOiq9/mwBS
QL6cpZq4nwB3sB5LVCmS0fnK588qkYui6o5GGhVBpMWTBxLKYaPCEz+Di13uam9R
z9NCn6Cpy50G/JoqPmtB+G6gqIh6WchvuKVRs3BzChRyRSNZi+wghKM/TQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFjpq9jAmTKEJM3m/jHG25xTxx+CMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvV09tcjJNQ1pNb1FremViLU1jYmJuRlBISDRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWbsFAwQA
WbsLMA0GCSqGSIb3DQEBCwUAA4IBAQCKC9dmORDQe9oC4WysF4+T+yJrxQxxd5Kc
UVDsmf7U6CLKcBOwi9K2pIVtjZJNaHfRfTfhac9kDubIzRtd32HhaL7XgNe35RAa
nWZtUlHHp6fl/eU3XwUuuNcZ7xv5ucE0IUdfc2jBe3blbzvnpfUKQ6FQ7d5t2b/D
FYhOB6cJYGcrN1/ln9ff3M6AzvJvuIIals66h1UT1oiLOJCm/61ZixENA6Qi5u04
adRNuIyxT4k9A1CukduiP+uSKtESPBGjeM6+Eypiz6wGMFQdFoc0ercq37f665Wf
YsMtYr97y+UGAKAiBKlI9BTMlsE/CYiopXPJQXybHY122QPOQhSI
-----END CERTIFICATE-----
Generated at Mon May 12 03:55:32 2025 by rpki-client