Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/_1SfzN2h7UVuE6LLQZRmR7_lDTg.roa
File: _1SfzN2h7UVuE6LLQZRmR7_lDTg.roa (raw, json)
Hash identifier: EjLTDCob//q/9su8NFOUDbiHq86NEDGE5jm+EbR9i2M=
Subject key identifier: FF:54:9F:CC:DD:A1:ED:45:6E:13:A2:CB:41:94:66:47:BF:E5:0D:38
Certificate issuer: /CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Certificate serial: 01955E2814B56D14D4BD75EDDE5E6A997015
Authority key identifier: 59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/_1SfzN2h7UVuE6LLQZRmR7_lDTg.roa
Signing time: Mon 03 Mar 2025 22:37:19 +0000
ROA not before: Mon 03 Mar 2025 22:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9186
IP address blocks: 185.31.156.0/22 maxlen: 22
185.31.156.0/24 maxlen: 24
185.31.157.0/24 maxlen: 24
185.31.158.0/24 maxlen: 24
185.90.56.0/22 maxlen: 22
185.90.57.0/24 maxlen: 24
185.204.111.0/24 maxlen: 24
185.248.35.0/24 maxlen: 24
194.39.124.0/22 maxlen: 22
194.39.125.0/24 maxlen: 24
194.39.126.0/24 maxlen: 24
194.39.127.0/24 maxlen: 24
2a00:bc20::/32 maxlen: 32
2a05:df40::/29 maxlen: 29
2a10:7b40::/29 maxlen: 29
2a10:a4c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 07 Mar 2025 22:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5e:28:14:b5:6d:14:d4:bd:75:ed:de:5e:6a:99:70:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Validity
Not Before: Mar 3 22:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff549fccdda1ed456e13a2cb41946647bfe50d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:74:f6:3d:2c:80:ae:4b:a3:6b:8c:16:56:
65:58:8a:fc:fd:eb:ed:21:d1:0e:bc:9b:20:2b:02:
32:46:bf:cc:fd:3b:8a:e2:55:ae:c8:01:6b:ef:c3:
40:97:f4:88:f5:d7:9a:9f:f9:db:22:df:13:2a:5c:
ff:3c:c9:05:07:55:3a:32:4f:ea:81:5b:ef:cf:79:
06:c9:30:04:5f:be:47:60:97:06:49:db:f1:ce:e9:
8c:9f:2d:69:72:2b:08:e6:ab:88:28:6b:3e:55:35:
df:fb:e0:6b:ca:24:60:4b:dc:44:50:98:f4:13:7d:
f7:5a:97:1b:ac:0f:6b:c1:8c:63:97:cc:26:73:7a:
b9:91:69:8b:3d:a3:18:9d:a7:cc:9e:2d:77:14:48:
ab:9f:43:3f:97:bd:19:eb:81:da:68:98:90:b3:cc:
f4:6b:0f:ba:1d:ce:f7:61:62:da:12:c9:61:b7:37:
a2:dc:a7:9f:0a:d7:9a:7a:be:e4:43:a6:5b:b2:09:
d5:2a:de:5f:29:9f:b9:28:34:7d:0f:9a:f0:c0:33:
a5:3b:f2:3b:a2:20:6f:f3:03:fd:a4:87:75:6f:8e:
53:07:6c:52:70:ac:a5:ec:d2:6b:42:c9:e5:ab:95:
e5:45:cc:43:5e:a5:41:76:d7:2f:81:f5:b8:53:d5:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:54:9F:CC:DD:A1:ED:45:6E:13:A2:CB:41:94:66:47:BF:E5:0D:38
X509v3 Authority Key Identifier:
keyid:59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/_1SfzN2h7UVuE6LLQZRmR7_lDTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.156.0/22
185.90.56.0/22
185.204.111.0/24
185.248.35.0/24
194.39.124.0/22
IPv6:
2a00:bc20::/32
2a05:df40::/29
2a10:7b40::/29
2a10:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
ed:6a:96:2f:f2:24:7c:40:fd:d6:ac:d8:2c:0b:c4:88:b3:c2:
55:40:3c:b4:c1:02:1f:ef:3d:e1:e3:2d:a5:bf:a2:f3:e2:16:
0e:1a:16:73:67:c6:92:03:26:f6:bd:c7:82:14:b4:c2:71:bd:
ff:1c:d1:ed:00:a7:b9:28:64:72:34:f0:9d:3d:0b:37:ff:00:
d7:70:ad:0f:73:08:bc:c9:c0:88:7c:28:71:df:0b:cc:52:ec:
56:bf:52:46:10:15:0a:a9:19:86:3a:b6:b5:5c:c4:4c:91:98:
cb:60:68:7d:0d:6e:d5:3e:28:37:f1:d5:f7:22:77:64:2d:8b:
97:48:e0:81:72:d4:e1:fc:26:52:1a:24:9f:3d:14:9d:29:aa:
e4:79:7c:21:8e:71:b7:4f:b2:ef:2e:89:eb:ac:03:2a:36:76:
4c:44:48:01:50:e0:fa:c8:00:ef:5e:2c:16:ee:db:9f:35:f6:
e4:c4:e3:a1:d0:a4:ac:d6:64:50:13:9c:f9:b9:c6:0d:a0:c4:
23:dc:ff:8a:ba:d9:cc:2d:73:26:5c:29:d8:9b:05:2f:ff:55:
c9:51:3e:dc:d4:0f:8e:d7:59:20:5f:ae:2c:86:65:9b:16:2b:
bf:16:a3:a5:56:c6:45:1b:9f:e1:a5:8e:03:ee:70:50:13:ae:
ed:b7:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 16:34:43 2025 by rpki-client