Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/5j_Bpo40lkweIsuoO4mIZboIKL4.roa
File: 5j_Bpo40lkweIsuoO4mIZboIKL4.roa (raw, json)
Hash identifier: 5nD+5v7g+ANQSvKe/gbiVsJzIDnXaVZ/q9uRxSXuKMA=
Subject key identifier: E6:3F:C1:A6:8E:34:96:4C:1E:22:CB:A8:3B:89:88:65:BA:08:28:BE
Certificate issuer: /CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Certificate serial: 019516C23BC327FD47061A8A58CCCAB50738
Authority key identifier: 59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/5j_Bpo40lkweIsuoO4mIZboIKL4.roa
Signing time: Tue 18 Feb 2025 01:53:02 +0000
ROA not before: Tue 18 Feb 2025 01:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9186
IP address blocks: 62.233.41.0/24 maxlen: 24
185.31.156.0/22 maxlen: 22
185.31.156.0/24 maxlen: 24
185.31.157.0/24 maxlen: 24
185.31.158.0/24 maxlen: 24
185.90.56.0/22 maxlen: 22
185.90.56.0/24 maxlen: 24
185.90.57.0/24 maxlen: 24
185.90.59.0/24 maxlen: 24
185.204.111.0/24 maxlen: 24
185.248.35.0/24 maxlen: 24
194.39.124.0/22 maxlen: 22
194.39.124.0/24 maxlen: 24
194.39.125.0/24 maxlen: 24
194.39.126.0/24 maxlen: 24
194.39.127.0/24 maxlen: 24
2a00:bc20::/32 maxlen: 32
2a05:df40::/29 maxlen: 29
2a10:7b40::/29 maxlen: 29
2a10:a4c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 26 Feb 2025 01:15:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:16:c2:3b:c3:27:fd:47:06:1a:8a:58:cc:ca:b5:07:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Validity
Not Before: Feb 18 01:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e63fc1a68e34964c1e22cba83b898865ba0828be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:51:b8:9a:e0:86:ae:f0:31:3c:f7:08:c8:
e6:d5:39:98:03:a8:ae:ea:85:9f:26:4d:f2:73:be:
74:4b:e9:53:2a:e0:52:0e:ea:cc:f8:65:9f:07:60:
63:fd:df:8f:f9:d2:ba:a7:2c:87:42:27:98:7b:ea:
a6:7f:37:29:69:c8:df:11:89:15:8f:c4:33:46:3d:
97:22:93:07:7a:c8:bb:bd:f0:6d:98:9c:da:33:61:
58:46:7d:8b:7c:5a:19:a9:7b:a3:fc:c2:b8:77:40:
57:b2:67:9b:f2:42:70:30:d2:c2:bf:16:cb:7a:1e:
0b:0f:24:c0:09:94:dd:5c:f5:70:29:7a:57:be:57:
f0:07:0c:3d:f0:45:f6:87:eb:29:af:1f:56:f5:9e:
b7:c3:61:44:ad:5b:45:8b:de:d1:89:71:e7:83:bf:
5b:9a:c0:34:b9:88:fd:c6:3d:fd:e4:f6:b3:5c:c5:
11:d1:09:1f:7b:89:b4:5a:80:fc:51:49:d9:47:79:
7a:8a:85:cf:42:3a:18:c4:67:80:d5:d1:18:96:40:
26:4a:83:77:7b:9c:a0:87:3d:c7:4a:8e:b2:7f:b5:
5b:e6:2b:42:8e:bf:62:c0:e6:12:3d:9c:ff:07:99:
4b:5a:1c:1a:a1:50:54:95:e5:53:e2:4a:10:50:f9:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3F:C1:A6:8E:34:96:4C:1E:22:CB:A8:3B:89:88:65:BA:08:28:BE
X509v3 Authority Key Identifier:
keyid:59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/5j_Bpo40lkweIsuoO4mIZboIKL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.41.0/24
185.31.156.0/22
185.90.56.0/22
185.204.111.0/24
185.248.35.0/24
194.39.124.0/22
IPv6:
2a00:bc20::/32
2a05:df40::/29
2a10:7b40::/29
2a10:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
75:58:5c:fe:da:8f:4e:17:4a:c9:04:9d:9e:8a:e8:44:d2:12:
4d:70:6e:7e:78:d6:e4:8d:04:d0:6a:e5:60:ff:8f:b7:08:f5:
64:7d:c0:60:f5:1d:a3:1d:46:0b:d6:7d:66:48:e0:96:b2:34:
7f:43:9a:6a:e9:c2:1d:c5:76:ed:5b:02:87:b2:ab:38:f1:91:
74:3a:e8:79:eb:ac:98:f7:e5:86:c0:c4:6e:6e:47:51:d4:8b:
c0:29:6c:a2:fb:1c:53:0a:7f:48:9e:8c:28:cb:93:bb:29:6e:
ed:c6:95:c1:b4:a1:7a:c4:7f:5b:7d:78:9d:0a:01:6a:1f:e8:
46:0f:32:13:8a:99:e1:6f:f2:0c:46:6c:8b:40:70:45:c6:f7:
7b:9d:3b:67:e1:7c:c6:07:c1:6e:a2:c1:60:4e:24:21:f9:b8:
cf:87:de:66:a9:b7:cb:30:93:ca:a1:61:1b:61:3a:27:e2:da:
79:0e:66:73:20:5b:60:83:2e:1d:28:23:af:5d:34:4b:50:56:
05:a5:84:9b:7a:67:92:5f:f9:7b:6d:c3:17:80:c5:35:05:55:
8c:4f:8b:f8:54:ab:c6:97:6d:17:77:e8:63:db:e9:92:08:d5:
39:f0:da:3d:35:ea:83:39:8e:d4:06:4d:30:d8:31:5e:b7:40:
f9:b2:2d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:02:14 2025 by rpki-client