Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WoAkUaJ4iBEi7T6UKwbWhluuEWc.roa
File: WoAkUaJ4iBEi7T6UKwbWhluuEWc.roa (raw, json)
Hash identifier: rTDLskyAtAGhyQV4Gd7xhJ+iLQ85C2QY255QGJCIgPQ=
Subject key identifier: 5A:80:24:51:A2:78:88:11:22:ED:3E:94:2B:06:D6:86:5B:AE:11:67
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019332870739D0272BFFC452C81C3BCF6D73
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WoAkUaJ4iBEi7T6UKwbWhluuEWc.roa
Signing time: Sat 16 Nov 2024 01:12:10 +0000
ROA not before: Sat 16 Nov 2024 01:12:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.153.0/24 maxlen: 24
5.83.156.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sat 16 Nov 2024 05:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:32:87:07:39:d0:27:2b:ff:c4:52:c8:1c:3b:cf:6d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 16 01:12:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a802451a278881122ed3e942b06d6865bae1167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:ef:6c:ac:a2:06:6e:94:4f:9c:0c:97:4d:
a9:49:14:26:b3:74:dd:47:9d:bb:52:9e:1e:70:b6:
0b:42:96:49:4b:c9:c3:da:95:0e:7a:62:94:c0:21:
ac:73:e1:9e:1b:a0:5e:82:66:f6:03:87:33:3c:9d:
e0:cb:74:c5:62:c7:25:8b:fa:65:df:0f:64:95:2b:
db:69:3c:66:27:3b:ea:38:21:97:2e:c3:39:09:b4:
c3:30:3f:3e:36:b2:25:6a:6e:d3:a5:78:fd:74:aa:
f8:38:23:0e:e8:dc:b1:88:aa:92:2d:57:b8:38:4e:
3e:14:cb:50:ee:56:24:f5:f2:9c:ca:f3:51:7e:4b:
72:1c:fa:b8:90:55:62:c8:6c:10:e4:69:ee:a6:fb:
8e:15:32:71:34:72:fe:ff:db:3a:79:a3:46:ff:15:
70:c6:5a:a0:3d:92:0c:13:bb:41:9c:3b:d5:c8:6f:
21:76:4c:99:57:2e:d0:10:c2:a8:24:4b:ed:3d:a6:
e5:a0:0c:30:69:8f:ea:20:f7:17:df:af:72:34:62:
1d:b7:6b:47:e5:06:f6:16:bc:1b:d1:da:9e:1a:00:
29:eb:60:7d:a9:48:89:f6:ad:e2:77:17:19:df:b4:
da:18:2f:03:9b:fc:b8:65:f5:65:0c:8a:10:98:70:
ec:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:80:24:51:A2:78:88:11:22:ED:3E:94:2B:06:D6:86:5B:AE:11:67
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WoAkUaJ4iBEi7T6UKwbWhluuEWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
e4:d8:6f:38:71:59:da:1e:93:c0:57:68:7e:0b:b4:de:04:7f:
48:dd:2c:fe:f1:ee:de:f1:4b:c1:f1:a8:05:44:6f:93:c0:b1:
2c:51:20:fb:21:6c:93:2a:eb:ec:d1:da:57:45:d3:ed:93:22:
c9:a5:d7:52:f2:e8:31:0b:c4:42:27:ef:21:7e:57:d0:1f:1d:
40:08:8c:1c:f2:1f:a4:7d:98:d6:3a:50:9d:bb:11:bb:b2:d7:
c3:04:25:db:f0:b8:f0:09:02:3d:b1:d4:c9:0b:30:72:d5:4a:
da:7c:6f:b6:e8:f7:6d:e3:12:2b:9d:e4:00:a6:63:1d:3c:fc:
b0:61:35:9d:34:5e:47:e0:6a:ba:57:86:15:19:bc:5a:fb:7e:
c7:96:23:51:f1:22:40:4b:c1:92:83:4d:d2:ca:f7:a6:56:d2:
72:9b:df:50:c8:de:3e:f5:e0:4a:cd:2e:f9:04:df:74:c5:99:
40:41:93:48:f0:42:c2:1e:c2:fe:5b:0c:b7:7f:31:d1:70:cf:
49:f7:f0:5f:75:01:73:5d:32:d3:34:ba:5a:3c:56:38:23:c8:
d4:02:30:2a:19:38:49:4c:cd:c3:ea:ea:8c:fc:f6:2e:67:5b:
66:73:a1:c7:29:d5:7e:c3:78:e6:91:a0:be:66:27:03:8d:0d:
f3:24:d7:78
-----BEGIN CERTIFICATE-----
MIIF6TCCBNGgAwIBAgISAZMyhwc50Ccr/8RSyBw7z21zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMTE2MDExMjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTgwMjQ1MWEyNzg4ODExMjJlZDNlOTQyYjA2ZDY4NjViYWUxMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApifvbKyiBm6UT5wMl02pSRQms3Td
R527Up4ecLYLQpZJS8nD2pUOemKUwCGsc+GeG6Begmb2A4czPJ3gy3TFYscli/pl
3w9klSvbaTxmJzvqOCGXLsM5CbTDMD8+NrIlam7TpXj9dKr4OCMO6NyxiKqSLVe4
OE4+FMtQ7lYk9fKcyvNRfktyHPq4kFViyGwQ5GnupvuOFTJxNHL+/9s6eaNG/xVw
xlqgPZIME7tBnDvVyG8hdkyZVy7QEMKoJEvtPabloAwwaY/qIPcX369yNGIdt2tH
5Qb2Frwb0dqeGgAp62B9qUiJ9q3idxcZ37TaGC8Dm/y4ZfVlDIoQmHDssQIDAQAB
o4IC9TCCAvEwHQYDVR0OBBYEFFqAJFGieIgRIu0+lCsG1oZbrhFnMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvV29Ba1VhSjRpQkVpN1Q2VUt3YldobHV1RVdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCQYIKwYBBQUHAQcBAf8EgfkwgfYwgcEEAgABMIG6AwQF
BVOAAwQCBa+AAwQABa+FMAwDBAEFr9oDBAAFr9wwDAMEAAWv4QMEAAWv6AMEAAWv
6zAMAwQEBa/wAwQABa/0MAsDBAAFr/sDAwQFoAMDAQXmAwQGTVoAAwQDU/NQAwQF
VV0AAwQDVXagAwQDV++AAwQFWWpAAwQGWZAAAwQEXmegAwQHXvmAAwQCX9cgAwQE
shKQAwQCuQ2cAwQBuS+MAwQAuXlHAwQAwRz7AwQBw24OAwQE2UWgMDAEAgACMCoD
BQMqABLYAwUDKgAZ0AMFACoAzcADBQMqAb1AAwUDKgIHoAMFAyoCL8AwDQYJKoZI
hvcNAQELBQADggEBAOTYbzhxWdoek8BXaH4LtN4Ef0jdLP7x7t7xS8HxqAVEb5PA
sSxRIPshbJMq6+zR2ldF0+2TIsml11Ly6DELxEIn7yF+V9AfHUAIjBzyH6R9mNY6
UJ27Ebuy18MEJdvwuPAJAj2x1MkLMHLVStp8b7bo923jEiud5ACmYx08/LBhNZ00
XkfgarpXhhUZvFr7fseWI1HxIkBLwZKDTdLK96ZW0nKb31DI3j714ErNLvkE33TF
mUBBk0jwQsIewv5bDLd/MdFwz0n38F91AXNdMtM0ulo8VjgjyNQCMCoZOElMzcPq
6oz89i5nW2Zzoccp1X7DeOaRoL5mJwONDfMk13g=
-----END CERTIFICATE-----
Generated at Sat Nov 16 06:52:31 2024 by rpki-client on console-ams.rpki-client.org