Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/whslSWR4IaR2QOPxb9wkz5gt-_Q.roa
File: whslSWR4IaR2QOPxb9wkz5gt-_Q.roa (raw, json)
Hash identifier: 1j2uBTyL1Q6AQd0Qf6hqOvYghhVXkQ8u3xFK+0TXeFg=
Subject key identifier: C2:1B:25:49:64:78:21:A4:76:40:E3:F1:6F:DC:24:CF:98:2D:FB:F4
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 018C0FE4CAEED866A36D9A6109E58CC772F4
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/whslSWR4IaR2QOPxb9wkz5gt-_Q.roa
Signing time: Mon 27 Nov 2023 08:28:21 +0000
ROA not before: Mon 27 Nov 2023 08:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 37.235.48.0/24 maxlen: 24
37.235.51.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.121.0/24 maxlen: 24
91.132.92.0/24 maxlen: 24
91.132.93.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
2a03:f80:65::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:44::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:32::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:e4:ca:ee:d8:66:a3:6d:9a:61:09:e5:8c:c7:72:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Nov 27 08:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c21b2549647821a47640e3f16fdc24cf982dfbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:e0:e8:67:ed:12:a2:3f:4e:a2:07:a3:07:
dc:0d:95:19:1d:3f:95:84:67:92:e1:c6:5e:93:64:
c1:06:47:ca:4c:66:90:07:3c:bd:00:8a:e8:85:ab:
ad:64:02:dc:43:6e:d9:51:06:93:ba:97:6b:32:99:
28:bd:4e:b7:ea:6f:52:d9:06:f4:04:b5:00:4c:85:
7d:63:a2:10:2e:d2:5d:0d:b8:4a:e0:b0:94:64:9f:
bf:7b:82:5b:09:5a:3e:30:34:c8:50:16:83:ec:be:
76:8b:c0:15:94:40:1d:71:4d:58:5a:d2:60:0c:80:
f6:7a:f6:8b:12:53:17:2f:46:41:bc:67:02:17:95:
e5:1f:fb:58:4c:c7:5e:86:5d:15:16:d2:d5:ff:05:
48:c0:8c:55:a0:17:ca:d7:1a:71:2a:51:fa:e0:d2:
57:a8:00:86:ea:7c:f4:1c:12:e5:58:ce:55:02:3a:
9c:c9:f3:3d:24:d9:e6:44:7d:c5:e4:e0:5e:26:e7:
27:6b:0d:30:b1:39:9e:88:c5:d0:20:f6:22:b6:a6:
93:7b:a0:6a:6f:32:91:20:16:19:20:ae:ee:81:f9:
bf:2d:67:a5:fe:e4:24:ff:ea:a8:26:18:9b:b3:a9:
14:f9:cc:40:dc:5f:a2:7b:3a:8b:94:86:f3:d9:a9:
77:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:25:49:64:78:21:A4:76:40:E3:F1:6F:DC:24:CF:98:2D:FB:F4
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/whslSWR4IaR2QOPxb9wkz5gt-_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.48.0/24
37.235.51.0/24
46.183.187.0/24
83.243.120.0/23
89.31.120.0/23
89.31.123.0/24
91.132.92.0/23
91.132.95.0/24
92.243.64.0/24
103.57.248.0/23
103.57.251.0/24
149.154.157.0-149.154.159.255
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
185.26.239.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/48
2a03:f80:44::/47
2a03:f80:47::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
2a03:f80:ed51::/48
Signature Algorithm: sha256WithRSAEncryption
47:69:6a:d9:c1:1f:08:d5:8b:30:4f:9e:a4:61:ca:f9:6e:7c:
9d:b3:81:58:9d:0e:6b:9d:5b:96:d2:8d:af:0e:56:42:27:8a:
f1:e3:18:60:4f:07:6b:21:06:c0:a8:f1:e7:1e:a0:89:bf:28:
74:a6:20:d9:fd:43:82:89:9d:d5:57:6c:34:92:66:17:eb:1f:
ae:f3:47:b9:be:67:c5:39:8d:5e:47:cd:17:f9:93:58:fa:ef:
83:68:25:fd:bb:fb:77:b5:61:12:0f:cd:30:5d:be:bb:f1:73:
5b:67:ae:49:fe:f6:19:49:5b:57:1f:60:51:34:c5:16:24:74:
38:7a:3a:69:46:8a:87:50:93:b7:dd:03:78:f5:6b:64:d1:59:
0a:7a:2f:f0:89:34:88:0e:6a:4e:84:2d:8f:a8:3c:ff:96:4a:
0f:7f:03:ac:d0:e2:55:49:e1:8b:8f:5d:0c:b6:c5:0d:ad:90:
44:2a:88:c4:3b:a3:04:d8:3a:0c:68:ae:d5:09:85:84:eb:bc:
91:6b:51:21:7f:9c:2f:70:b7:0d:55:bd:07:c9:42:65:40:80:
2b:6b:90:0b:c6:e0:9a:f9:64:44:57:22:30:ab:78:85:9f:e4:
e8:af:9e:f9:3c:6f:c9:b2:9f:3f:44:b6:5d:bf:63:d1:c0:e3:
0e:24:63:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 11:30:05 2023 by rpki-client on console-ams.rpki-client.org