Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/W0CwQMdlenm9O8iWYpm5ZNIBwfw.roa
File: W0CwQMdlenm9O8iWYpm5ZNIBwfw.roa (raw, json)
Hash identifier: pRbnUpoeAUzNhs4iLLrt/U2Mxjyr3ZjlHUkecnsqKxc=
Subject key identifier: 5B:40:B0:40:C7:65:7A:79:BD:3B:C8:96:62:99:B9:64:D2:01:C1:FC
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 019668AE8717330828D2D1032626CFC0727C
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/W0CwQMdlenm9O8iWYpm5ZNIBwfw.roa
Signing time: Thu 24 Apr 2025 16:43:10 +0000
ROA not before: Thu 24 Apr 2025 16:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49285
IP address blocks: 188.93.80.0/24 maxlen: 24
188.93.87.0/24 maxlen: 24
2a03:3600::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 24 Apr 2025 16:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:68:ae:87:17:33:08:28:d2:d1:03:26:26:cf:c0:72:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Apr 24 16:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b40b040c7657a79bd3bc8966299b964d201c1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:fa:eb:cc:f0:6b:5c:bf:c5:3f:d1:04:35:
df:c4:b7:bd:ea:2e:c8:cd:34:20:9b:19:c1:46:a5:
ae:86:cd:a4:bd:76:42:29:15:3c:c1:e6:4e:13:bf:
7d:50:2e:aa:12:76:ce:af:6a:f8:28:a7:4f:7b:16:
4b:81:29:7e:8c:39:16:7e:dc:73:f3:ee:e8:52:53:
58:89:0b:42:b3:3b:40:27:b5:cb:8c:a9:42:10:68:
cb:c5:72:22:4d:d2:08:f2:9a:c9:82:5f:51:a9:f2:
12:c5:8c:54:3d:b1:8e:de:b7:5b:32:be:fa:dc:f3:
cb:97:c5:09:9e:08:28:b0:f7:f5:2c:c3:74:52:95:
75:6f:4a:25:6e:4e:ef:31:4b:85:cb:0a:ad:b1:f7:
5f:1b:2a:4b:82:26:95:46:80:91:bf:b1:ad:f8:c9:
38:98:58:ee:88:c4:fe:8a:78:4f:ed:1b:e2:ea:97:
f3:82:36:1d:c8:d7:09:63:26:45:f0:0c:c1:30:4a:
76:4e:81:1b:0e:54:3c:99:2c:34:df:3f:4d:bb:a2:
2a:ce:82:c6:b2:04:44:bb:c2:c6:8c:ff:bf:18:d1:
e9:3a:4d:6c:46:63:ac:3d:43:c6:fc:69:5e:38:b1:
c9:0d:e4:ee:69:de:8b:ba:cc:54:b6:2d:32:5f:38:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:40:B0:40:C7:65:7A:79:BD:3B:C8:96:62:99:B9:64:D2:01:C1:FC
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/W0CwQMdlenm9O8iWYpm5ZNIBwfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.80.0/24
188.93.87.0/24
IPv6:
2a03:3600::/32
Signature Algorithm: sha256WithRSAEncryption
4f:d3:34:f3:72:5b:42:50:05:a6:43:21:d1:ac:30:b1:30:6d:
58:87:29:dd:85:4a:db:29:e2:b1:b9:87:86:48:73:65:2e:78:
c5:40:d9:90:db:2a:96:a2:0a:ce:a2:67:55:4b:3f:57:55:c5:
47:f3:9f:1f:54:e0:90:a6:e2:e2:b9:2c:e4:17:c5:6e:36:3e:
ed:05:c5:c3:35:b2:a7:b8:e0:01:03:da:97:9e:98:3f:c5:1a:
0b:e7:92:7c:80:83:09:5c:6f:bd:b4:f4:70:55:f0:32:74:79:
47:5f:12:99:6f:5d:1f:35:1b:bf:a3:5d:72:d9:84:78:52:1a:
c3:f5:ca:5e:e0:19:27:a5:9d:44:d9:2f:0a:6d:7c:d2:8e:8f:
b0:09:a7:7c:bb:1b:b1:1b:f5:6b:b2:3b:3d:9a:df:fd:7b:33:
a1:61:8b:a8:70:7b:f3:30:b1:15:23:c3:33:7a:0d:8d:cf:15:
4a:76:2f:dc:01:5f:6e:87:6d:da:12:e7:ec:80:f5:05:27:9b:
73:c1:91:2b:b8:67:c3:15:ec:60:c5:24:e9:87:04:e0:c1:ef:
ed:7e:fb:1e:e9:ad:40:7a:4b:a2:5a:8c:5d:08:99:ee:72:f4:
40:e6:f7:0c:06:30:56:28:44:62:90:37:c4:4f:4f:96:c6:c5:
da:8a:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:01:39 2025 by rpki-client