Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/wPb0jQbIeEXirSHdA-PdNrw-WeM.roa
File: wPb0jQbIeEXirSHdA-PdNrw-WeM.roa (raw, json)
Hash identifier: LHKLkrZquIZYOX62T+pqkESsJ/2fLWwxdsJ2GS2K16Y=
Subject key identifier: C0:F6:F4:8D:06:C8:78:45:E2:AD:21:DD:03:E3:DD:36:BC:3E:59:E3
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018DD06925D77796A848F13351FF608C76F9
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/wPb0jQbIeEXirSHdA-PdNrw-WeM.roa
Signing time: Thu 22 Feb 2024 10:42:48 +0000
ROA not before: Thu 22 Feb 2024 10:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9119
IP address blocks: 2.58.48.0/22 maxlen: 22
45.8.0.0/22 maxlen: 22
45.15.44.0/22 maxlen: 22
45.156.140.0/23 maxlen: 23
45.156.140.0/24 maxlen: 24
45.156.143.0/24 maxlen: 24
46.163.0.0/19 maxlen: 19
46.163.32.0/20 maxlen: 20
46.163.48.0/21 maxlen: 21
46.163.56.0/23 maxlen: 23
46.163.56.0/24 maxlen: 24
46.163.58.0/23 maxlen: 23
46.163.58.0/24 maxlen: 24
46.163.59.0/24 maxlen: 24
46.163.60.0/22 maxlen: 22
80.65.160.0/20 maxlen: 20
80.65.160.0/24 maxlen: 24
80.65.161.0/24 maxlen: 24
80.65.162.0/24 maxlen: 24
80.65.163.0/24 maxlen: 24
80.65.164.0/24 maxlen: 24
80.65.165.0/24 maxlen: 24
80.65.166.0/24 maxlen: 24
80.65.167.0/24 maxlen: 24
80.65.168.0/24 maxlen: 24
80.65.169.0/24 maxlen: 24
80.65.170.0/24 maxlen: 24
80.65.171.0/24 maxlen: 24
80.65.172.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.174.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
84.41.0.0/18 maxlen: 18
84.41.0.0/19 maxlen: 19
84.41.0.0/21 maxlen: 21
84.41.32.0/19 maxlen: 19
84.41.64.0/19 maxlen: 19
84.41.96.0/21 maxlen: 21
84.41.104.0/22 maxlen: 22
84.41.108.0/23 maxlen: 23
84.41.110.0/24 maxlen: 24
84.41.111.0/24 maxlen: 24
84.41.112.0/23 maxlen: 23
84.41.114.0/24 maxlen: 24
84.41.115.0/24 maxlen: 24
84.41.116.0/22 maxlen: 22
84.41.120.0/23 maxlen: 23
84.41.122.0/23 maxlen: 23
84.41.124.0/22 maxlen: 22
85.208.172.0/24 maxlen: 24
91.132.74.0/23 maxlen: 23
147.78.216.0/22 maxlen: 22
147.78.216.0/24 maxlen: 24
147.78.217.0/24 maxlen: 24
147.78.218.0/24 maxlen: 24
147.78.219.0/24 maxlen: 24
185.54.128.0/23 maxlen: 23
185.54.128.0/24 maxlen: 24
185.54.130.0/24 maxlen: 24
185.54.131.0/24 maxlen: 24
185.175.0.0/22 maxlen: 22
212.13.224.0/19 maxlen: 19
212.103.128.0/19 maxlen: 19
213.253.64.0/19 maxlen: 19
213.253.96.0/20 maxlen: 20
213.253.96.0/21 maxlen: 21
213.253.104.0/22 maxlen: 22
213.253.108.0/22 maxlen: 22
213.253.108.0/24 maxlen: 24
213.253.109.0/24 maxlen: 24
213.253.110.0/24 maxlen: 24
213.253.111.0/24 maxlen: 24
213.253.112.0/22 maxlen: 22
213.253.116.0/22 maxlen: 22
213.253.120.0/22 maxlen: 22
213.253.124.0/22 maxlen: 22
217.199.128.0/20 maxlen: 24
217.199.128.0/24 maxlen: 24
217.199.129.0/24 maxlen: 24
217.199.130.0/24 maxlen: 24
217.199.131.0/24 maxlen: 24
217.199.132.0/24 maxlen: 24
217.199.133.0/24 maxlen: 24
217.199.134.0/24 maxlen: 24
217.199.135.0/24 maxlen: 24
217.199.136.0/24 maxlen: 24
217.199.137.0/24 maxlen: 24
217.199.138.0/24 maxlen: 24
217.199.139.0/24 maxlen: 24
217.199.140.0/24 maxlen: 24
217.199.141.0/24 maxlen: 24
217.199.142.0/24 maxlen: 24
217.199.143.0/24 maxlen: 24
2a02:800::/32 maxlen: 32
2a02:801::/32 maxlen: 32
2a02:801::/33 maxlen: 33
2a02:805::/33 maxlen: 33
2a09:e140::/29 maxlen: 29
2a0b:c300::/29 maxlen: 29
2a0b:c306::/32 maxlen: 32
2a0e:1e80::/29 maxlen: 29
2a0e:2e00::/29 maxlen: 29
2a0f:2180::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 23 Feb 2024 16:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:69:25:d7:77:96:a8:48:f1:33:51:ff:60:8c:76:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Feb 22 10:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0f6f48d06c87845e2ad21dd03e3dd36bc3e59e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:7d:34:c5:21:09:4e:6b:c7:64:9f:6f:a0:
74:74:81:c0:90:19:2c:9f:15:58:a2:9b:5d:72:6b:
b0:42:8a:e2:33:d8:9c:82:8a:37:cc:b4:cc:a0:55:
65:b6:34:5e:2e:d0:40:0a:9b:b9:69:cf:f8:6e:be:
3f:71:60:cd:74:51:e6:48:26:da:10:47:8c:bc:d9:
0d:66:b1:af:4f:64:74:af:b6:c5:1a:92:77:81:73:
3c:47:83:41:7e:42:eb:83:a5:53:1e:cb:c8:15:34:
f2:4c:8a:c3:3a:aa:bf:03:a4:ce:64:40:1f:1d:1d:
d8:ab:23:e4:85:b8:ee:72:f2:63:5a:8e:ef:78:af:
d5:6d:a1:7b:d0:a1:57:fa:59:ed:4f:d2:90:36:5a:
d2:c7:e9:18:61:c8:50:c7:ae:49:54:14:15:5e:c8:
9d:ec:71:d3:79:26:06:e4:cd:9d:9f:15:0e:9a:c4:
55:ea:a0:cf:47:96:78:f3:b2:45:1a:66:c7:0b:44:
f3:5b:c9:04:3c:6f:f6:dd:a4:08:37:1f:91:ae:ec:
15:0b:2e:eb:19:83:21:62:85:3b:4c:76:fc:6f:dd:
b7:43:45:1e:2d:97:45:c8:e3:1d:77:ea:4e:a8:3e:
07:b2:b5:af:8b:26:a0:22:b6:cf:d4:9b:50:34:9c:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:F4:8D:06:C8:78:45:E2:AD:21:DD:03:E3:DD:36:BC:3E:59:E3
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/wPb0jQbIeEXirSHdA-PdNrw-WeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.48.0/22
45.8.0.0/22
45.15.44.0/22
45.156.140.0/23
45.156.143.0/24
46.163.0.0/18
80.65.160.0/20
84.41.0.0/17
85.208.172.0/24
91.132.74.0/23
147.78.216.0/22
185.54.128.0/22
185.175.0.0/22
212.13.224.0/19
212.103.128.0/19
213.253.64.0/18
217.199.128.0/20
IPv6:
2a02:800::/31
2a02:805::/33
2a09:e140::/29
2a0b:c300::/29
2a0e:1e80::/29
2a0e:2e00::/29
2a0f:2180::/29
Signature Algorithm: sha256WithRSAEncryption
82:42:50:62:e1:69:be:55:44:5c:51:b4:c6:3d:1c:54:e5:a7:
c3:bf:34:c4:e6:a3:4e:c2:36:b7:f8:c1:ae:f6:2d:7e:f4:4c:
3a:1f:2b:83:14:66:bf:16:03:6e:31:aa:d6:f0:15:0b:54:7c:
72:d6:9e:cc:38:29:f5:9c:63:93:a4:58:a3:8a:97:3a:fb:22:
ff:96:ca:c9:31:8c:50:72:a3:36:36:02:a7:23:35:b5:56:12:
57:14:3a:33:e1:a5:85:3a:b6:65:fa:dc:5f:58:b4:c9:0c:50:
7c:9d:f0:0f:b4:a9:7f:d1:db:1f:90:5d:e1:96:9a:9c:31:e2:
65:5a:77:d3:db:84:b9:25:08:51:5c:b7:90:b7:65:df:ad:82:
8f:ac:c5:26:36:d2:3f:85:57:22:34:ac:94:7c:f3:65:d8:84:
a7:21:7e:8c:4c:94:3a:e6:cd:22:83:95:5f:9b:ab:91:33:c8:
0a:2f:db:ba:97:dd:47:66:d4:d7:27:8c:1f:72:33:3e:55:69:
c8:42:53:ce:8e:d2:95:c5:7b:fd:c6:4b:9c:66:56:57:31:75:
7a:be:de:8b:8f:25:49:97:3f:9a:39:81:a0:39:1f:54:7e:3e:
cd:c8:94:8d:63:6a:66:0f:17:1f:f1:df:d3:01:e5:61:86:f3:
23:36:6b:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:35 2025 by rpki-client