Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/wgzQU288TVwzNWGVak8r8pr1SNc.roa
File: wgzQU288TVwzNWGVak8r8pr1SNc.roa (raw, json)
Hash identifier: OFGG2OEn0nc0ItbVXnV0Wnv22bj92ZNfSIkgvLZeuNA=
Subject key identifier: C2:0C:D0:53:6F:3C:4D:5C:33:35:61:95:6A:4F:2B:F2:9A:F5:48:D7
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 018793C3926462BBBEFF294E6544ECC5D44A
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/wgzQU288TVwzNWGVak8r8pr1SNc.roa
Signing time: Tue 18 Apr 2023 09:48:00 +0000
ROA not before: Tue 18 Apr 2023 09:48:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42313
IP address blocks: 79.106.242.0/23 maxlen: 23
79.106.244.0/23 maxlen: 23
79.106.240.0/21 maxlen: 21
79.106.246.0/23 maxlen: 23
79.106.255.0/24 maxlen: 24
79.106.254.0/24 maxlen: 24
185.171.146.0/24 maxlen: 24
185.171.144.0/23 maxlen: 23
79.106.84.0/24 maxlen: 24
79.106.90.0/24 maxlen: 24
79.106.95.0/24 maxlen: 24
79.106.96.0/19 maxlen: 19
79.106.94.0/23 maxlen: 23
79.106.104.0/24 maxlen: 24
79.106.102.0/24 maxlen: 24
79.106.103.0/24 maxlen: 24
79.106.101.0/24 maxlen: 24
79.106.107.0/24 maxlen: 24
79.106.118.0/23 maxlen: 23
79.106.117.0/24 maxlen: 24
79.106.125.0/24 maxlen: 24
79.106.123.0/24 maxlen: 24
79.106.124.0/24 maxlen: 24
79.106.122.0/24 maxlen: 24
79.106.120.0/24 maxlen: 24
79.106.127.0/24 maxlen: 24
79.106.128.0/19 maxlen: 19
79.106.126.0/24 maxlen: 24
79.106.32.0/19 maxlen: 19
79.106.37.0/24 maxlen: 24
79.106.42.0/24 maxlen: 24
79.106.56.0/22 maxlen: 22
79.106.64.0/19 maxlen: 19
79.106.64.0/24 maxlen: 24
79.106.77.0/24 maxlen: 24
79.106.192.0/19 maxlen: 19
79.106.195.0/24 maxlen: 24
79.106.194.0/23 maxlen: 23
79.106.196.0/24 maxlen: 24
79.106.205.0/24 maxlen: 24
79.106.204.0/24 maxlen: 24
79.106.210.0/24 maxlen: 24
79.106.211.0/24 maxlen: 24
79.106.209.0/24 maxlen: 24
79.106.207.0/24 maxlen: 24
79.106.215.0/24 maxlen: 24
79.106.214.0/24 maxlen: 24
79.106.218.0/23 maxlen: 23
79.106.220.0/24 maxlen: 24
79.106.224.0/19 maxlen: 19
79.106.229.0/24 maxlen: 24
79.106.232.0/22 maxlen: 22
79.106.230.0/24 maxlen: 24
79.106.228.0/24 maxlen: 24
79.106.240.0/23 maxlen: 23
79.106.160.0/19 maxlen: 19
79.106.176.0/21 maxlen: 21
79.106.0.0/24 maxlen: 24
79.106.0.0/19 maxlen: 19
79.106.0.0/17 maxlen: 17
79.106.0.0/16 maxlen: 16
217.24.240.0/21 maxlen: 21
217.24.240.0/20 maxlen: 20
217.24.248.0/21 maxlen: 21
217.24.248.0/24 maxlen: 24
217.24.254.0/24 maxlen: 24
2a05:fdc0:2100::/40 maxlen: 40
2a05:fdc0::/32 maxlen: 32
2a05:fdc0:2200::/40 maxlen: 40
2a05:fdc0:2300::/40 maxlen: 40
2a05:fdc0:3100::/40 maxlen: 40
2a05:fdc0:3200::/40 maxlen: 40
2a05:fdc2:9000::/36 maxlen: 36
2a05:fdc2:1000::/36 maxlen: 36
2a05:fdc2:6000::/36 maxlen: 36
2a05:fdc2:3000::/36 maxlen: 36
2a05:fdc2:8000::/36 maxlen: 36
2a05:fdc2::/32 maxlen: 32
2a05:fdc2:7000::/36 maxlen: 36
2a05:fdc2:5000::/36 maxlen: 36
2a05:fdc2:2000::/36 maxlen: 36
2a05:fdc2:4000::/36 maxlen: 36
2a05:fdc0::/29 maxlen: 29
2a05:fdc1::/32 maxlen: 32
2a05:fdc0:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Jun 2023 11:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:c3:92:64:62:bb:be:ff:29:4e:65:44:ec:c5:d4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Apr 18 09:48:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c20cd0536f3c4d5c333561956a4f2bf29af548d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a4:1c:fc:5f:e6:dc:f0:a0:f2:e9:8f:aa:5a:
80:da:12:55:20:70:05:0b:e7:5a:f3:c8:64:45:c3:
10:e5:33:e8:40:ff:69:03:2b:21:83:c6:40:0e:b0:
70:ef:58:2e:a4:6f:60:32:45:08:5e:64:ea:59:e7:
66:9f:65:de:c9:44:1c:c7:ac:41:61:40:62:ca:d9:
9c:a0:98:0d:d8:e4:1d:56:a9:31:8d:04:b5:a7:9d:
ad:5f:12:e7:e2:6c:ea:ad:75:bf:ae:ae:6a:b6:8b:
3e:c4:17:86:61:41:e7:9f:f3:c0:0f:60:86:13:6c:
90:3f:ed:76:e9:93:23:f6:d2:e9:92:d2:60:8c:eb:
30:a5:8c:f8:c2:c3:5c:5f:c7:8b:a5:fe:44:c0:9e:
fe:d0:05:14:7c:fc:f2:01:eb:ff:52:16:32:7e:cb:
bc:cf:d5:0f:70:92:d6:3b:cc:98:12:32:15:08:b3:
4b:75:d2:f7:d9:54:9b:25:58:38:5d:33:3e:bf:b3:
08:28:bc:17:7b:b1:05:96:1f:5f:f9:23:3e:62:74:
d6:59:7a:86:09:8d:7a:cc:c8:d3:8a:3f:8d:9b:6d:
50:48:dd:a7:14:0e:ec:c7:6b:62:da:57:aa:73:88:
a7:7f:ef:95:1f:0a:c9:41:74:d1:0d:c8:46:ee:9c:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0C:D0:53:6F:3C:4D:5C:33:35:61:95:6A:4F:2B:F2:9A:F5:48:D7
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/wgzQU288TVwzNWGVak8r8pr1SNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.0.0/16
185.171.144.0-185.171.146.255
217.24.240.0/20
IPv6:
2a05:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:03:40:db:7d:0d:1c:23:6f:f4:64:34:4b:72:a0:b9:91:de:
25:f7:46:e1:a4:18:3a:26:82:16:ef:fc:30:c2:45:7a:7d:33:
df:a3:74:9f:97:39:8d:3e:c4:a3:4d:ac:a9:2b:45:62:6b:61:
a9:78:40:14:90:34:06:e4:7d:de:17:eb:cb:12:8f:78:39:31:
14:60:60:e1:8a:a1:a3:70:49:91:b3:02:cf:95:c6:58:a2:5a:
04:4c:bf:c2:cd:77:79:bd:95:96:44:bf:26:0e:b5:63:97:a9:
80:ae:d0:27:e4:9f:23:9b:6d:a1:20:72:e3:a7:1d:98:d7:1f:
83:87:07:35:92:fc:ed:8b:21:c5:b2:2b:34:bd:50:c0:a6:d5:
04:75:c2:e0:95:ba:e6:92:3a:5c:16:56:82:be:64:2a:dd:48:
db:6f:fc:9b:b0:24:94:c9:85:35:02:11:00:49:9e:a9:0b:43:
b7:f5:15:aa:b4:99:56:20:76:45:76:9a:34:6a:50:f6:85:47:
9d:e8:c0:9d:74:7f:19:9b:33:9f:44:b9:0f:57:2a:2f:9e:95:
e5:79:98:70:a4:4a:00:26:83:ed:83:d1:5f:cb:34:3c:98:5a:
93:fd:49:91:7a:48:c1:c7:2f:bd:54:ee:de:81:7e:07:b8:5a:
16:1d:48:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:59 2024 by rpki-client on console-ams.rpki-client.org