Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/9WR90z5gGYKGB8CTNDwQXTrcaMU.roa
File: 9WR90z5gGYKGB8CTNDwQXTrcaMU.roa (raw, json)
Hash identifier: dQHDCW3YOyndOcyvHyrKsO7OaqK8pyqsXyo7ed/8Ec4=
Subject key identifier: F5:64:7D:D3:3E:60:19:82:86:07:C0:93:34:3C:10:5D:3A:DC:68:C5
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 0186EAE4C7A01D6B7E31EADFA63CD7BCC125
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/9WR90z5gGYKGB8CTNDwQXTrcaMU.roa
Signing time: Thu 16 Mar 2023 14:48:27 +0000
ROA not before: Thu 16 Mar 2023 14:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48176
IP address blocks: 81.177.228.0/22 maxlen: 22
81.177.240.0/21 maxlen: 21
81.177.248.0/22 maxlen: 22
81.177.252.0/23 maxlen: 23
81.177.184.0/24 maxlen: 24
81.177.188.0/22 maxlen: 22
81.177.187.0/24 maxlen: 24
81.177.198.0/23 maxlen: 23
81.177.195.0/24 maxlen: 24
81.177.200.0/21 maxlen: 21
81.177.200.0/22 maxlen: 22
81.177.226.0/23 maxlen: 23
81.177.224.0/20 maxlen: 20
81.177.224.0/23 maxlen: 23
185.8.20.0/22 maxlen: 22
178.237.176.0/20 maxlen: 20
178.237.176.0/21 maxlen: 21
178.237.176.0/22 maxlen: 22
178.237.184.0/21 maxlen: 21
178.237.180.0/22 maxlen: 22
178.237.190.0/23 maxlen: 23
178.237.188.0/23 maxlen: 23
81.177.56.0/21 maxlen: 21
91.207.136.0/23 maxlen: 23
62.122.240.0/21 maxlen: 21
37.18.152.0/21 maxlen: 21
37.18.156.0/22 maxlen: 22
213.222.240.0/20 maxlen: 20
213.222.240.0/21 maxlen: 21
213.59.150.0/24 maxlen: 24
213.59.148.0/23 maxlen: 23
213.59.146.0/24 maxlen: 24
213.59.154.0/24 maxlen: 24
213.222.248.0/21 maxlen: 21
213.59.186.0/23 maxlen: 23
213.59.186.0/24 maxlen: 24
149.255.24.0/21 maxlen: 21
213.59.190.0/23 maxlen: 23
213.59.188.0/22 maxlen: 22
213.222.224.0/22 maxlen: 22
213.222.224.0/21 maxlen: 21
213.222.232.0/22 maxlen: 22
213.222.232.0/21 maxlen: 21
213.222.236.0/22 maxlen: 22
213.59.144.0/22 maxlen: 22
2a03:aa00::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:e4:c7:a0:1d:6b:7e:31:ea:df:a6:3c:d7:bc:c1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Mar 16 14:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5647dd33e6019828607c093343c105d3adc68c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:9d:dd:72:5b:df:82:0f:36:6e:bf:9c:fe:
1d:02:6a:e7:d4:7e:e5:7a:1c:8b:7c:e9:2e:32:84:
77:c9:fc:28:d3:85:99:44:6d:86:35:2a:f5:86:9a:
4b:79:29:c9:70:ee:06:72:e3:b0:bd:4f:ff:20:9d:
63:d7:52:b0:bf:5b:f2:1e:83:9e:92:8f:da:83:db:
a2:bf:f5:f0:09:df:01:c5:c7:2c:36:96:20:20:e9:
44:08:b0:0b:1f:95:5d:98:d5:70:25:7b:8b:cd:ab:
b3:5c:b1:d9:58:b2:8b:65:92:b5:8b:8f:c4:39:7e:
98:b3:04:5b:60:6c:07:46:e6:da:33:b8:02:62:38:
d5:71:88:b6:fa:42:c9:47:0a:84:b1:da:7d:96:45:
f3:b4:cd:22:fd:d9:3a:f3:28:22:7c:bf:b9:7b:b5:
a6:26:08:ad:a4:a1:74:7c:5a:0a:9a:6e:23:21:90:
e4:ba:74:7b:d3:73:be:6c:0a:47:71:60:09:8f:51:
99:4a:42:eb:f5:bb:6d:f5:a0:3f:b2:dd:7d:93:74:
52:bf:46:c1:f8:63:e5:57:3e:81:8c:e4:b3:5f:83:
40:52:b5:d2:66:5d:c7:03:5e:cd:4d:7a:b4:25:98:
9e:75:8a:d0:7f:b9:68:47:90:94:4a:0f:12:d4:52:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:64:7D:D3:3E:60:19:82:86:07:C0:93:34:3C:10:5D:3A:DC:68:C5
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/9WR90z5gGYKGB8CTNDwQXTrcaMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.152.0/21
62.122.240.0/21
81.177.56.0/21
81.177.184.0/24
81.177.187.0-81.177.191.255
81.177.195.0/24
81.177.198.0-81.177.207.255
81.177.224.0-81.177.253.255
91.207.136.0/23
149.255.24.0/21
178.237.176.0/20
185.8.20.0/22
213.59.144.0-213.59.150.255
213.59.154.0/24
213.59.186.0-213.59.191.255
213.222.224.0/19
IPv6:
2a03:aa00::/36
Signature Algorithm: sha256WithRSAEncryption
50:6c:65:9d:52:7e:ba:4a:26:70:2a:a2:bb:78:97:4c:68:03:
cc:a4:de:a8:3b:9b:ef:45:37:48:e5:d4:dd:e4:b2:e7:41:28:
d6:23:18:f7:61:8c:94:ba:8c:8e:92:5a:83:66:16:82:89:1b:
65:43:fe:19:18:16:b8:cf:ee:95:b5:31:82:71:c0:66:0e:b9:
85:ef:df:70:06:fc:fb:d2:03:a9:1d:9b:6c:f4:2c:99:37:2c:
ed:ea:eb:48:94:69:80:ad:21:8d:c3:fd:04:80:30:b4:8f:0c:
c5:c2:25:08:df:01:b9:9f:a5:d0:f0:cf:84:66:81:ce:ff:2a:
83:4f:3f:d5:48:e6:af:12:38:fd:12:c2:be:d7:85:36:b3:04:
3a:0f:cc:2c:36:5f:17:c0:4e:ab:ad:78:43:cf:16:6b:ab:62:
03:a4:06:85:a4:4e:e8:ec:5b:28:04:86:12:27:0d:61:b8:02:
32:9d:35:10:05:58:a2:77:eb:31:47:a9:89:cb:3e:05:b6:b5:
c3:9a:d9:5b:ae:d7:65:45:b2:03:45:ec:5d:ae:aa:3f:1a:10:
e0:9c:87:87:e9:3f:b4:f1:cb:2c:b3:cd:1e:22:11:2a:28:ae:
a6:fd:95:ff:45:02:77:aa:c6:0d:71:c8:49:10:76:5f:e6:32:
64:1f:85:f9
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYbq5MegHWt+MerfpjzXvMElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh
OWQ2ODcwHhcNMjMwMzE2MTQ0ODI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTY0N2RkMzNlNjAxOTgyODYwN2MwOTMzNDNjMTA1ZDNhZGM2OGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1Gd3XJb34IPNm6/nP4dAmrn1H7l
ehyLfOkuMoR3yfwo04WZRG2GNSr1hppLeSnJcO4GcuOwvU//IJ1j11Kwv1vyHoOe
ko/ag9uiv/XwCd8BxccsNpYgIOlECLALH5VdmNVwJXuLzauzXLHZWLKLZZK1i4/E
OX6YswRbYGwHRubaM7gCYjjVcYi2+kLJRwqEsdp9lkXztM0i/dk68ygifL+5e7Wm
JgitpKF0fFoKmm4jIZDkunR703O+bApHcWAJj1GZSkLr9btt9aA/st19k3RSv0bB
+GPlVz6BjOSzX4NAUrXSZl3HA17NTXq0JZiedYrQf7loR5CUSg8S1FIOEwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFPVkfdM+YBmChgfAkzQ8EF063GjFMB8GA1UdIwQY
MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt
YTA4NGY3NmM4ZTJiLzEvOVdSOTB6NWdHWUtHQjhDVE5Ed1FYVHJjYU1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi
LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBjwQCAAEwgYgDBAMl
EpgDBAM+evADBANRsTgDBABRsbgwDAMEAFGxuwMEBlGxgAMEAFGxwzAMAwQBUbHG
AwQEUbHAMAwDBAVRseADBAFRsfwDBAFbz4gDBAOV/xgDBASy7bADBAK5CBQwDAME
BNU7kAMEANU7lgMEANU7mjAMAwQB1Tu6AwQG1TuAAwQF1d7gMA4EAgACMAgDBgQq
A6oAADANBgkqhkiG9w0BAQsFAAOCAQEAUGxlnVJ+ukomcCqiu3iXTGgDzKTeqDub
70U3SOXU3eSy50Eo1iMY92GMlLqMjpJag2YWgokbZUP+GRgWuM/ulbUxgnHAZg65
he/fcAb8+9IDqR2bbPQsmTcs7errSJRpgK0hjcP9BIAwtI8MxcIlCN8BuZ+l0PDP
hGaBzv8qg08/1UjmrxI4/RLCvteFNrMEOg/MLDZfF8BOq614Q88Wa6tiA6QGhaRO
6OxbKASGEicNYbgCMp01EAVYonfrMUepics+Bba1w5rZW67XZUWyA0XsXa6qPxoQ
4JyHh+k/tPHLLLPNHiIRKiiupv2V/0UCd6rGDXHISRB2X+YyZB+F+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:13 2024 by rpki-client on console-ams.rpki-client.org