Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/DwExY8-DCmQX7UAzQjXaowPJQus.roa
File: DwExY8-DCmQX7UAzQjXaowPJQus.roa (raw, json)
Hash identifier: uXKW6WAlKTXy52/rbFudXLaO/JK0CLIFpgHXRYxYkzg=
Subject key identifier: 0F:01:31:63:CF:83:0A:64:17:ED:40:33:42:35:DA:A3:03:C9:42:EB
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 0193A69F5DE539F24C5EA5361B0D682FFEFA
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/DwExY8-DCmQX7UAzQjXaowPJQus.roa
Signing time: Sun 08 Dec 2024 14:14:42 +0000
ROA not before: Sun 08 Dec 2024 14:14:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132839
IP address blocks: 2.59.100.0/22 maxlen: 22
2.59.100.0/24 maxlen: 24
2.59.101.0/24 maxlen: 24
2.59.102.0/24 maxlen: 24
2.59.103.0/24 maxlen: 24
45.8.28.0/22 maxlen: 22
45.9.108.0/22 maxlen: 22
45.9.108.0/24 maxlen: 24
45.9.109.0/24 maxlen: 24
45.9.110.0/24 maxlen: 24
45.9.111.0/24 maxlen: 24
45.10.208.0/22 maxlen: 22
45.13.160.0/22 maxlen: 22
45.13.160.0/24 maxlen: 24
45.66.188.0/22 maxlen: 22
45.66.188.0/24 maxlen: 24
45.66.189.0/24 maxlen: 24
45.66.190.0/24 maxlen: 24
45.66.191.0/24 maxlen: 24
45.80.112.0/22 maxlen: 22
45.87.228.0/22 maxlen: 22
45.87.231.0/24 maxlen: 24
45.93.64.0/22 maxlen: 22
45.93.64.0/24 maxlen: 24
45.93.65.0/24 maxlen: 24
45.93.66.0/24 maxlen: 24
45.93.67.0/24 maxlen: 24
45.131.156.0/22 maxlen: 22
45.131.156.0/24 maxlen: 24
45.131.157.0/24 maxlen: 24
45.131.158.0/24 maxlen: 24
45.131.159.0/24 maxlen: 24
45.142.76.0/22 maxlen: 22
45.142.79.0/24 maxlen: 24
45.147.212.0/22 maxlen: 22
45.147.215.0/24 maxlen: 24
45.149.68.0/22 maxlen: 22
45.149.68.0/24 maxlen: 24
45.149.69.0/24 maxlen: 24
45.156.168.0/22 maxlen: 22
45.156.169.0/24 maxlen: 24
45.156.171.0/24 maxlen: 24
45.156.216.0/22 maxlen: 22
45.158.220.0/22 maxlen: 22
45.158.221.0/24 maxlen: 24
45.158.223.0/24 maxlen: 24
62.192.188.0/22 maxlen: 22
62.192.188.0/24 maxlen: 24
62.192.189.0/24 maxlen: 24
62.192.190.0/24 maxlen: 24
62.192.191.0/24 maxlen: 24
83.150.224.0/22 maxlen: 22
83.150.224.0/24 maxlen: 24
83.150.225.0/24 maxlen: 24
85.208.56.0/22 maxlen: 22
85.208.56.0/24 maxlen: 24
85.208.57.0/24 maxlen: 24
85.208.58.0/24 maxlen: 24
85.208.59.0/24 maxlen: 24
92.118.144.0/22 maxlen: 22
92.118.144.0/24 maxlen: 24
92.118.145.0/24 maxlen: 24
92.118.146.0/24 maxlen: 24
92.118.147.0/24 maxlen: 24
185.51.164.0/22 maxlen: 22
185.51.164.0/24 maxlen: 24
185.51.167.0/24 maxlen: 24
193.42.15.0/24 maxlen: 24
193.42.132.0/24 maxlen: 24
193.42.135.0/24 maxlen: 24
193.42.149.0/24 maxlen: 24
193.108.46.0/23 maxlen: 23
193.108.96.0/23 maxlen: 23
193.164.222.0/23 maxlen: 23
193.168.4.0/23 maxlen: 23
194.146.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a6:9f:5d:e5:39:f2:4c:5e:a5:36:1b:0d:68:2f:fe:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Dec 8 14:14:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f013163cf830a6417ed40334235daa303c942eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:d2:ed:ab:75:9f:9c:6b:e3:ff:2f:52:d1:
b1:cb:bd:a1:48:a2:e4:d8:0c:15:a4:2f:3f:34:32:
0a:27:06:c6:51:27:06:75:3d:d0:93:16:ab:ef:4b:
27:86:55:43:35:4f:af:7b:7f:22:c5:8f:5b:62:85:
5e:f7:f1:56:98:c9:fa:ea:4c:7b:59:dd:f3:ab:7a:
6c:0d:b7:44:00:8a:3b:96:b0:50:22:2f:1c:c4:79:
fa:f5:27:79:74:8a:53:ae:c1:87:01:b7:48:b8:40:
3e:3a:be:7f:1e:8a:18:98:99:83:ff:e4:41:f5:83:
2c:d2:ba:dd:86:b8:aa:78:64:80:e1:e8:69:64:d6:
09:dd:cb:46:8c:76:d5:75:2e:db:17:5a:62:8f:2e:
7b:7f:f5:83:e4:66:d7:7f:6c:7a:95:b8:5a:2f:60:
28:38:8f:4f:db:2a:01:a2:73:b4:d3:95:d3:f6:6d:
94:2f:e0:f0:05:0c:47:97:61:cf:e1:c5:03:b9:f3:
a7:b3:cc:12:6a:a9:2a:a9:c7:0c:c8:e9:fc:7f:ad:
21:9d:70:38:56:f6:8d:96:75:56:f4:3c:19:cd:3b:
fe:45:0a:9f:ed:b3:cd:6e:10:6f:f2:4a:1b:2e:24:
bf:51:98:ce:c3:34:35:6a:4b:b8:6f:eb:9b:12:ed:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:01:31:63:CF:83:0A:64:17:ED:40:33:42:35:DA:A3:03:C9:42:EB
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/DwExY8-DCmQX7UAzQjXaowPJQus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.100.0/22
45.8.28.0/22
45.9.108.0/22
45.10.208.0/22
45.13.160.0/22
45.66.188.0/22
45.80.112.0/22
45.87.228.0/22
45.93.64.0/22
45.131.156.0/22
45.142.76.0/22
45.147.212.0/22
45.149.68.0/22
45.156.168.0/22
45.156.216.0/22
45.158.220.0/22
62.192.188.0/22
83.150.224.0/22
85.208.56.0/22
92.118.144.0/22
185.51.164.0/22
193.42.15.0/24
193.42.132.0/24
193.42.135.0/24
193.42.149.0/24
193.108.46.0/23
193.108.96.0/23
193.164.222.0/23
193.168.4.0/23
194.146.84.0/22
Signature Algorithm: sha256WithRSAEncryption
71:6a:74:75:5c:26:b1:3e:67:94:6f:82:bf:e3:70:c7:e9:4b:
e4:08:08:e6:25:23:a1:c0:27:61:03:ac:66:13:b9:81:ad:b9:
1c:0a:c5:54:9e:1a:8a:12:8b:ad:70:3e:98:55:fa:a4:d8:d2:
ee:55:6a:ab:e8:a8:08:4f:a2:da:13:c1:57:72:13:42:21:9d:
b2:69:2c:1d:12:92:e6:32:67:a6:99:fe:b1:ad:38:2c:0f:15:
48:f9:79:24:97:88:aa:fa:f7:80:1a:63:c4:27:4a:9b:c8:07:
ab:5d:7e:4d:8a:be:da:32:d6:7d:af:b3:f1:85:bf:79:21:43:
04:af:19:ee:a7:b2:83:d2:cd:a5:50:b5:60:3b:85:d5:67:11:
79:af:8e:36:1c:ea:2b:c2:fb:c5:38:e7:89:5d:14:09:d1:14:
ed:25:ec:f8:f1:a7:76:17:ff:06:85:0d:e4:ea:a2:0e:af:8b:
ca:58:a2:dd:fc:a3:2f:c9:63:28:19:21:58:ef:c3:a6:9d:1e:
b9:64:da:28:49:e7:19:79:c4:9a:73:13:cd:ff:db:62:8e:70:
e7:c6:ff:c2:7c:94:fc:bb:d7:c7:d8:e9:de:6c:27:76:6a:ac:
32:09:a7:a2:ca:98:ac:86:3b:ef:72:13:22:53:f0:b6:63:2a:
df:9e:b0:76
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZOmn13lOfJMXqU2Gw1oL/76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGFiYjI5OTc3YTY1YjE0MGNhY2I2ZTcyYWIyNGNlZGRk
NGU4YzUwHhcNMjQxMjA4MTQxNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjAxMzE2M2NmODMwYTY0MTdlZDQwMzM0MjM1ZGFhMzAzYzk0MmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr63S7at1n5xr4/8vUtGxy72hSKLk
2AwVpC8/NDIKJwbGUScGdT3Qkxar70snhlVDNU+ve38ixY9bYoVe9/FWmMn66kx7
Wd3zq3psDbdEAIo7lrBQIi8cxHn69Sd5dIpTrsGHAbdIuEA+Or5/HooYmJmD/+RB
9YMs0rrdhriqeGSA4ehpZNYJ3ctGjHbVdS7bF1pijy57f/WD5GbXf2x6lbhaL2Ao
OI9P2yoBonO005XT9m2UL+DwBQxHl2HP4cUDufOns8wSaqkqqccMyOn8f60hnXA4
VvaNlnVW9DwZzTv+RQqf7bPNbhBv8kobLiS/UZjOwzQ1aku4b+ubEu2XVQIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFA8BMWPPgwpkF+1AM0I12qMDyULrMB8GA1UdIwQY
MBaAFIeKuymXemWxQMrLbnKrJM7d1OjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2Et
YWM4NjQ3ZDA1NThhLzEvRHdFeFk4LURDbVFYN1VBelFqWGFvd1BKUXVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2EtYWM4NjQ3ZDA1NThh
LzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHRBggrBgEFBQcBBwEB/wSBwTCBvjCBuwQCAAEwgbQDBAIC
O2QDBAItCBwDBAItCWwDBAItCtADBAItDaADBAItQrwDBAItUHADBAItV+QDBAIt
XUADBAItg5wDBAItjkwDBAItk9QDBAItlUQDBAItnKgDBAItnNgDBAItntwDBAI+
wLwDBAJTluADBAJV0DgDBAJcdpADBAK5M6QDBADBKg8DBADBKoQDBADBKocDBADB
KpUDBAHBbC4DBAHBbGADBAHBpN4DBAHBqAQDBALCklQwDQYJKoZIhvcNAQELBQAD
ggEBAHFqdHVcJrE+Z5Rvgr/jcMfpS+QICOYlI6HAJ2EDrGYTuYGtuRwKxVSeGooS
i61wPphV+qTY0u5VaqvoqAhPotoTwVdyE0IhnbJpLB0SkuYyZ6aZ/rGtOCwPFUj5
eSSXiKr694AaY8QnSpvIB6tdfk2Kvtoy1n2vs/GFv3khQwSvGe6nsoPSzaVQtWA7
hdVnEXmvjjYc6ivC+8U454ldFAnRFO0l7Pjxp3YX/waFDeTqog6vi8pYot38oy/J
YygZIVjvw6adHrlk2ihJ5xl5xJpzE83/22KOcOfG/8J8lPy718fY6d5sJ3ZqrDIJ
p6LKmKyGO+9yEyJT8LZjKt+esHY=
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:31 2025 by rpki-client