Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/MuyNqPgDoIpXF4InV4DVoL_Wii4.roa
File: MuyNqPgDoIpXF4InV4DVoL_Wii4.roa (raw, json)
Hash identifier: 81c7iCkCTdLaml56YDjn0SlZumiZjUCcHQ7OFfyFg6g=
Subject key identifier: 32:EC:8D:A8:F8:03:A0:8A:57:17:82:27:57:80:D5:A0:BF:D6:8A:2E
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018F4FF302A2F92FA9916C8D11E11FB26737
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/MuyNqPgDoIpXF4InV4DVoL_Wii4.roa
Signing time: Mon 06 May 2024 22:07:56 +0000
ROA not before: Mon 06 May 2024 22:07:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 46.15.0.0/16 maxlen: 16
46.212.0.0/17 maxlen: 17
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
46.212.48.0/20 maxlen: 20
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
46.212.88.0/21 maxlen: 21
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
80.232.124.0/24 maxlen: 24
80.239.0.0/17 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.128.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.144.0/20 maxlen: 20
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.0.0/20 maxlen: 20
84.214.16.0/20 maxlen: 20
84.214.32.0/20 maxlen: 20
84.214.46.0/23 maxlen: 23
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.114.0/24 maxlen: 24
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
89.254.64.0/18 maxlen: 18
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
158.58.152.0/21 maxlen: 21
158.58.152.0/23 maxlen: 23
176.11.0.0/16 maxlen: 16
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.97.84.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.145.0/24 maxlen: 24
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.197.0/24 maxlen: 24
188.126.200.0/21 maxlen: 21
188.126.214.0/24 maxlen: 24
212.45.160.0/19 maxlen: 19
212.125.252.0/22 maxlen: 22
2a00:a540::/32 maxlen: 32
2a02:228::/29 maxlen: 29
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 May 2024 23:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:f3:02:a2:f9:2f:a9:91:6c:8d:11:e1:1f:b2:67:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: May 6 22:07:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32ec8da8f803a08a571782275780d5a0bfd68a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:55:3e:4c:aa:fb:2d:d5:50:b6:94:62:ce:
5f:46:89:f0:f7:1c:7f:a4:a0:74:cf:0a:2f:be:a1:
5e:a0:38:6d:81:4c:bf:6b:1f:3d:7e:02:e2:6f:41:
b1:c0:d7:f7:57:73:06:5a:5b:2d:e0:51:5a:76:be:
d8:04:06:04:cf:13:78:72:db:60:18:e6:91:b0:e9:
ac:5a:97:bc:11:df:13:88:6e:66:3d:1b:56:19:78:
2a:9c:06:c8:50:34:78:7d:49:e5:cc:4e:53:ab:c3:
2f:6d:5e:7c:c0:aa:42:0d:41:23:5b:63:f1:70:9c:
d3:c4:8a:e2:71:ba:a5:62:f9:e1:26:58:bc:89:2f:
27:fc:cc:cd:78:93:8a:2b:6c:6c:1d:37:3a:3a:c5:
12:bd:0c:ef:64:fb:28:40:35:c5:95:9b:ce:01:b1:
b2:0a:03:00:2f:b0:53:fe:e0:ff:4b:45:29:e5:b0:
68:3a:1a:52:bd:60:bd:90:a4:af:bf:6b:27:b7:7e:
69:09:fb:06:47:1e:46:3b:ae:06:39:bd:1b:16:68:
5d:6f:ab:ba:ca:a8:ef:5d:89:42:be:55:d4:af:d3:
80:74:0e:b5:2b:8e:ba:c4:22:64:10:1c:f4:95:d8:
a6:95:4d:e3:7d:9e:06:6c:39:4f:c0:45:ed:55:6a:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EC:8D:A8:F8:03:A0:8A:57:17:82:27:57:80:D5:A0:BF:D6:8A:2E
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/MuyNqPgDoIpXF4InV4DVoL_Wii4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.15.0.0/16
46.212.0.0/16
46.249.224.0/19
62.73.252.0/24
62.97.160.0/19
62.141.128.0/19
78.156.0.0/19
80.232.124.0/24
80.239.0.0/17
82.194.192.0/19
84.208.0.0/13
89.254.64.0/18
109.108.192.0/19
158.58.152.0/21
176.11.0.0/16
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.97.84.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
212.45.160.0/19
212.125.252.0/22
IPv6:
2a00:a540::/32
2a02:228::/29
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:3f:f6:29:c3:94:ac:75:b3:63:61:ba:03:52:1a:f8:92:b2:
91:59:6f:89:3d:be:b9:be:71:5e:e2:6f:7c:b9:1d:74:43:d3:
3d:7f:0e:f6:5a:94:3c:3e:ad:71:8f:f2:57:c5:d4:1c:69:24:
52:1f:eb:b5:43:6e:76:e8:3e:f9:13:8e:7f:a6:c9:99:18:0d:
ff:33:f5:ef:f1:dd:e3:1f:0e:66:2b:4a:f6:da:de:47:c9:42:
ae:d0:c7:46:9b:58:49:d5:cf:c2:d5:82:ac:79:f1:9d:31:a2:
18:47:63:73:25:95:b6:0b:6f:b2:9e:4d:d3:c0:e5:b6:9f:ef:
87:b5:61:0f:b8:17:0b:35:6a:a1:54:b5:c4:82:49:55:eb:1e:
f7:ed:40:d9:4a:66:1b:fd:be:e6:b2:6d:26:ec:20:81:d9:a7:
ca:fa:60:07:53:33:d6:0d:64:19:1b:b8:24:27:7f:20:a3:0b:
df:b4:c3:ea:f6:08:ab:11:bb:e5:f5:a3:22:a5:af:f0:dc:3c:
9a:a5:b5:93:26:94:df:58:07:3a:9d:43:39:d2:22:82:b3:c9:
04:61:89:14:c9:7d:f7:6a:59:9e:95:55:e1:d1:c7:49:fb:fb:
2c:71:53:cd:d0:35:68:be:f6:d8:b7:bf:ab:0a:ae:70:e3:94:
c1:33:4c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:43 2024 by rpki-client on console-fra.rpki-client.org