Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/WF7l43Sa_muPmtasDji4OCSEz8g.roa
File: WF7l43Sa_muPmtasDji4OCSEz8g.roa (raw, json)
Hash identifier: ZcdENIxDPcMP6GlnVRzToqdQDdSA2jlDoX0SH9+ACo0=
Subject key identifier: 58:5E:E5:E3:74:9A:FE:6B:8F:9A:D6:AC:0E:38:B8:38:24:84:CF:C8
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 0188AB81360836522DA9C03C723513D0A252
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/WF7l43Sa_muPmtasDji4OCSEz8g.roa
Signing time: Sun 11 Jun 2023 17:29:11 +0000
ROA not before: Sun 11 Jun 2023 17:29:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44143
IP address blocks: 188.120.112.0/22 maxlen: 22
37.19.104.0/21 maxlen: 21
188.120.118.0/24 maxlen: 24
188.120.117.0/24 maxlen: 24
37.19.104.0/22 maxlen: 22
188.120.116.0/22 maxlen: 22
188.120.116.0/24 maxlen: 24
188.120.113.0/24 maxlen: 24
37.19.110.0/24 maxlen: 24
37.19.108.0/23 maxlen: 23
37.19.107.0/24 maxlen: 24
188.120.119.0/24 maxlen: 24
95.86.48.0/21 maxlen: 21
185.37.24.0/24 maxlen: 24
185.37.24.0/22 maxlen: 22
185.37.27.0/24 maxlen: 24
185.37.26.0/24 maxlen: 24
185.37.25.0/24 maxlen: 24
188.120.96.0/24 maxlen: 24
188.120.96.0/21 maxlen: 21
188.120.98.0/24 maxlen: 24
188.120.97.0/24 maxlen: 24
188.120.104.0/21 maxlen: 21
188.120.103.0/24 maxlen: 24
188.120.102.0/24 maxlen: 24
188.120.101.0/24 maxlen: 24
188.120.100.0/24 maxlen: 24
188.120.99.0/24 maxlen: 24
77.243.16.0/21 maxlen: 21
77.243.16.0/24 maxlen: 24
77.243.16.0/20 maxlen: 20
77.243.24.0/22 maxlen: 22
77.243.23.0/24 maxlen: 24
77.243.22.0/24 maxlen: 24
77.243.20.0/23 maxlen: 23
77.243.20.0/22 maxlen: 22
77.243.20.0/24 maxlen: 24
77.243.19.0/24 maxlen: 24
77.243.31.0/24 maxlen: 24
77.243.30.0/24 maxlen: 24
77.243.29.0/24 maxlen: 24
77.243.28.0/22 maxlen: 22
77.243.28.0/24 maxlen: 24
2a00:61c0::/32 maxlen: 32
2a00:61c0::/29 maxlen: 29
2a00:61c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 27 Jul 2023 10:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ab:81:36:08:36:52:2d:a9:c0:3c:72:35:13:d0:a2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Jun 11 17:29:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=585ee5e3749afe6b8f9ad6ac0e38b8382484cfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:d5:1b:6a:07:f5:ab:92:57:7a:60:f5:35:
3e:bb:54:4d:d7:a2:b5:40:56:fe:22:07:82:91:7c:
9b:82:c7:54:b1:d0:0d:83:a9:34:55:5d:7b:f9:ce:
b3:61:03:79:84:16:c1:9a:b3:c0:20:96:24:79:e5:
d8:e8:7d:cc:43:e9:15:ff:bb:c6:81:66:93:9b:ca:
5e:d0:13:b7:80:da:4a:0b:93:26:46:52:17:f4:80:
f5:5f:e1:c8:19:7c:50:8e:3e:a2:97:74:30:f2:3f:
a5:d5:ef:42:28:68:b4:9b:32:24:bf:d2:44:68:b9:
58:14:0e:4a:e0:69:80:d3:f8:6f:30:e5:12:7c:36:
d0:10:fb:6f:96:19:9a:91:be:26:55:1f:a3:cf:6b:
48:09:43:e2:5b:e6:c6:b5:3e:dd:b5:a3:f9:8a:2c:
d9:bf:36:db:08:86:fd:fe:80:49:c6:90:c5:a4:01:
b7:da:e7:80:65:12:5c:67:f5:46:63:39:87:af:14:
6c:66:6d:41:65:52:97:10:6b:66:ff:9d:e0:b6:21:
52:3d:75:af:5e:c0:3b:3d:b8:24:1a:c4:3f:b5:16:
91:2f:0d:30:68:ed:51:71:8f:f8:78:01:72:2b:03:
e1:c2:e0:a2:57:40:0a:fb:bf:fb:0a:f5:c2:5c:40:
76:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5E:E5:E3:74:9A:FE:6B:8F:9A:D6:AC:0E:38:B8:38:24:84:CF:C8
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/WF7l43Sa_muPmtasDji4OCSEz8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.104.0/21
77.243.16.0/20
95.86.48.0/21
185.37.24.0/22
188.120.96.0-188.120.119.255
IPv6:
2a00:61c0::/29
Signature Algorithm: sha256WithRSAEncryption
8b:91:e0:cc:37:79:af:63:27:a4:5c:de:a9:65:e9:c7:0a:95:
af:e3:ab:26:00:49:ca:d4:8b:56:56:03:6c:af:32:e1:a8:d6:
96:6d:56:28:cb:d4:e4:f3:5e:11:ce:fd:e9:7a:82:77:e9:fe:
81:73:c3:e0:d2:31:79:ac:b7:51:13:ba:5e:6e:09:91:99:11:
6c:0b:cf:c6:49:77:b6:47:68:d4:4e:49:7e:c0:af:05:74:7b:
49:0b:e3:e8:93:fc:b2:8b:45:64:c3:28:8d:34:e3:26:fe:30:
6f:f8:50:8f:78:b5:1c:c4:bd:7b:4a:b4:0d:ff:89:43:37:be:
3b:cc:3b:41:91:67:0a:99:50:f2:a3:93:91:1c:b5:d1:2e:8a:
74:ea:8d:17:40:45:3f:5b:b3:81:89:48:0d:6b:00:22:f9:26:
f4:09:6d:09:78:6e:52:5c:c5:95:07:5d:8e:0f:9e:ad:17:2e:
8d:76:4f:06:ef:d0:03:77:91:25:12:d9:c0:30:e6:b3:48:00:
3b:a4:d9:91:6a:98:dc:ff:5c:cb:bb:89:35:25:13:4e:8e:f7:
dd:a5:bb:56:c6:2e:d5:eb:2e:50:70:81:d4:06:91:46:02:ee:
71:a4:4f:f1:c5:ce:5f:d4:7b:93:42:e1:57:fc:a7:e3:a9:b8:
85:69:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:52 2024 by rpki-client on console-ams.rpki-client.org