Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wuQHYuJYLmE0O60NvUIGRfHBxwA.roa
File: wuQHYuJYLmE0O60NvUIGRfHBxwA.roa (raw, json)
Hash identifier: tNazBz6O1Feaw5MddPYRotxJPETecApIjBBUbHTsLMo=
Subject key identifier: C2:E4:07:62:E2:58:2E:61:34:3B:AD:0D:BD:42:06:45:F1:C1:C7:00
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01942748186FF5D0E3455A50694DC51A8803
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wuQHYuJYLmE0O60NvUIGRfHBxwA.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.58.108.0/24 maxlen: 24
195.66.24.0/24 maxlen: 24
2a09:17c0:1000::/48 maxlen: 48
2a0a:2d02::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 Jan 2025 09:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:18:6f:f5:d0:e3:45:5a:50:69:4d:c5:1a:88:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2e40762e2582e61343bad0dbd420645f1c1c700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:0d:ee:d8:08:d1:35:69:8d:56:8c:07:9a:
b1:59:d5:e9:78:e3:d7:50:1c:b5:08:a9:d8:5f:25:
6a:bf:81:c5:ae:eb:e6:d6:e9:9b:d4:09:3c:12:26:
0d:d6:d1:71:08:3d:59:d1:1c:e9:91:85:bc:fd:6d:
69:2a:4c:67:00:68:e4:cb:70:ef:58:0c:80:30:58:
31:46:71:eb:4b:50:f1:c8:b1:92:df:9b:da:50:a4:
24:03:0d:f3:22:58:77:cc:85:1f:70:ea:2d:63:79:
79:ec:61:2f:ea:ed:6e:22:8a:0f:bc:b1:6c:70:c7:
f0:3e:1a:34:37:5c:47:56:60:b4:b2:a8:59:f8:07:
75:69:42:40:28:b4:80:9d:f7:fd:b8:3a:94:bc:c7:
d7:ba:06:b8:06:90:b0:46:0f:7e:13:d5:4c:c7:7b:
c2:b7:c1:19:c2:0e:fb:59:1a:dd:b7:ba:98:71:5f:
80:85:8e:d2:84:ca:4a:6b:a3:a9:34:b8:d8:c9:a1:
70:bc:27:2e:33:86:65:23:48:f1:3a:e2:73:1f:30:
74:ef:a1:4e:28:a1:6d:75:8b:7e:66:0f:46:50:81:
8a:cd:5a:81:8d:fd:0b:80:21:52:1f:b0:cd:45:17:
14:f8:36:f7:07:14:e8:a3:d3:41:cd:e9:d6:c9:19:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E4:07:62:E2:58:2E:61:34:3B:AD:0D:BD:42:06:45:F1:C1:C7:00
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wuQHYuJYLmE0O60NvUIGRfHBxwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.108.0/24
195.66.24.0/24
IPv6:
2a09:17c0:1000::/48
2a0a:2d02::/32
Signature Algorithm: sha256WithRSAEncryption
be:b1:fa:ba:e7:1b:4e:43:9e:a1:74:31:5e:f9:cb:ca:f3:a7:
a7:21:cf:95:f5:ef:52:15:86:fb:40:19:32:91:ec:1a:0a:a6:
83:07:c7:06:32:62:b6:0d:10:89:9f:fc:8c:91:1a:01:ac:c3:
18:f1:6d:c1:2f:3d:06:70:c2:a9:15:50:1b:6a:70:4a:5f:a7:
94:29:97:68:bc:3c:93:02:9b:86:a2:35:5d:80:42:c7:c5:65:
84:2f:f7:88:f1:de:e0:a5:ff:a8:b4:9c:95:67:60:bf:c6:7d:
cb:1f:89:99:d0:00:49:1b:8e:58:1f:b5:9e:2a:b3:ad:87:ba:
a2:3b:cb:0e:29:7e:8d:03:45:ef:0e:ae:74:54:b5:aa:e7:02:
e8:79:cc:de:0a:47:45:40:3d:fd:10:bd:bd:05:96:8d:7b:45:
53:c0:49:5c:15:47:63:fc:91:e9:64:c9:bf:0b:4d:eb:c7:c9:
dc:88:fa:49:4a:22:23:94:e8:89:5a:af:bc:77:66:77:de:b7:
ef:b6:94:15:b6:63:01:15:ac:86:49:44:03:66:6e:86:3d:4f:
1d:47:f0:a0:70:21:23:8f:f7:72:4d:bb:ed:78:fb:71:b8:4e:
15:98:93:f6:07:14:cc:76:20:81:6d:f8:95:d7:b9:2f:71:0f:
11:c4:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:04:12 2025 by rpki-client