Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/wGWJx1FPHh8VLP7GtgJTdnxx__g.roa
File: wGWJx1FPHh8VLP7GtgJTdnxx__g.roa (raw, json)
Hash identifier: 200Wqc3Pcti84BChRrhyhi7OK2QAju7UaMOoaqOFIy8=
Subject key identifier: C0:65:89:C7:51:4F:1E:1F:15:2C:FE:C6:B6:02:53:76:7C:71:FF:F8
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018CC3B6889CFBA855AE23E5D1D60BD19D5D
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/wGWJx1FPHh8VLP7GtgJTdnxx__g.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203020
IP address blocks: 45.144.88.0/22 maxlen: 24
193.36.89.0/24 maxlen: 32
185.147.140.0/22 maxlen: 32
91.228.216.0/24 maxlen: 24
185.36.254.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
5.154.174.0/24 maxlen: 24
45.156.224.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
188.119.154.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.96.162.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
87.239.254.0/24 maxlen: 32
45.149.28.0/22 maxlen: 24
89.44.205.0/24 maxlen: 32
185.217.64.0/22 maxlen: 22
185.166.84.0/24 maxlen: 32
86.105.183.0/24 maxlen: 32
185.152.248.0/22 maxlen: 32
80.246.30.0/24 maxlen: 32
185.242.217.0/24 maxlen: 24
45.95.24.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
2a12:adc0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a05:6700::/29 maxlen: 29
2a06:46c0::/29 maxlen: 32
2a06:5000::/29 maxlen: 32
2a06:3040::/29 maxlen: 48
2a07:9c80::/29 maxlen: 29
2a06:4a00::/29 maxlen: 32
2a05:28c0::/29 maxlen: 32
2a06:5700::/29 maxlen: 32
2a07:f2c0::/29 maxlen: 29
2a01:4740::/32 maxlen: 32
2a05:f4c0::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a06:df80::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 05 Mar 2024 06:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:88:9c:fb:a8:55:ae:23:e5:d1:d6:0b:d1:9d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c06589c7514f1e1f152cfec6b60253767c71fff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:2c:6c:c8:f4:04:b6:27:25:97:21:ad:c1:
cc:93:66:bf:25:ab:43:2f:f1:66:10:0f:83:8d:67:
4b:9a:32:88:02:1d:0d:c3:7a:36:bc:33:c2:5e:58:
7d:88:5c:02:e5:21:e0:42:1d:e8:6e:9c:52:41:71:
99:a6:8f:1f:62:a1:d9:57:8c:62:77:fb:60:d0:6a:
da:3c:38:e3:01:e0:01:6d:9b:f6:94:b4:c7:62:75:
2c:bd:7b:0f:da:47:39:5f:30:6d:81:30:cd:96:86:
0b:09:98:2d:9a:c1:83:da:a5:8f:6e:b4:c8:79:d8:
97:52:73:bd:0c:9a:10:0c:62:1b:e5:db:26:fe:a8:
7f:7b:53:6c:71:52:e1:b7:ea:71:92:27:0d:2c:e9:
c8:db:71:c6:cd:85:8a:5e:d2:b8:62:6f:e8:06:29:
97:66:2e:ea:11:30:24:75:f5:ff:58:b5:94:22:ff:
fb:38:1b:d2:b4:f6:f7:b4:ed:50:fb:07:f5:ec:34:
68:21:77:d8:39:67:81:c4:9b:8d:6e:9c:f1:1b:bb:
5e:f0:ab:11:9c:a3:d5:01:27:61:94:3d:5e:c0:e1:
e6:8a:b0:f7:31:38:88:e0:c2:3c:60:00:3a:ad:16:
2e:46:6b:91:d5:e6:a4:88:a9:de:ad:73:4e:34:29:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:89:C7:51:4F:1E:1F:15:2C:FE:C6:B6:02:53:76:7C:71:FF:F8
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/wGWJx1FPHh8VLP7GtgJTdnxx__g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.156.224.0/22
80.246.30.0/24
86.105.183.0/24
87.239.254.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
195.47.194.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:6700::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
2a12:adc0::/29
Signature Algorithm: sha256WithRSAEncryption
b1:0b:24:a9:cc:e4:ce:31:ed:33:8a:2d:97:8d:f7:b6:03:cf:
3d:d2:c3:55:16:35:48:a3:e0:f0:fa:36:f4:7b:74:f0:a0:f8:
4d:4b:36:98:a4:58:5d:2a:22:20:a6:65:67:a3:b4:2c:09:43:
59:f5:98:6e:d5:7c:3a:55:62:14:8d:c7:e7:d8:e8:a3:cc:42:
33:48:d2:62:63:37:d7:e4:7c:b1:0c:62:44:48:26:c7:f2:e4:
d4:60:df:cd:85:1f:4a:ad:d6:01:ac:04:54:a3:b4:85:d3:06:
fe:3e:87:db:d0:ea:85:da:38:12:fe:6c:67:33:c3:88:12:af:
fe:0a:a5:a5:79:35:38:8b:42:1d:f6:d7:67:d8:d4:50:fa:df:
19:16:af:24:22:58:ab:74:03:0e:5c:b4:d6:f7:6c:ff:80:99:
df:a7:43:f3:11:dc:cc:49:6e:45:2b:22:0b:39:0f:10:1e:1d:
35:64:11:c3:ec:d4:f5:ff:2c:de:11:42:ca:cf:ad:a2:66:de:
68:fd:80:92:e3:7c:0e:f0:e6:d2:1b:0c:79:a3:e4:67:60:54:
c0:91:65:11:6f:7b:57:33:e9:14:0e:bd:a4:b5:e3:07:b2:b3:
01:5f:de:f0:88:53:23:d2:cb:ca:ee:c0:b5:e6:2f:7a:19:60:
27:9d:c0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:46 2024 by rpki-client on console-fra.rpki-client.org