Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/wMjJPLxJcuUAbQAAaXOhEZYjyCY.roa
File: wMjJPLxJcuUAbQAAaXOhEZYjyCY.roa (raw, json)
Hash identifier: 3B66znv9hG21GM9TG4VAQA8fkcVQZj/NH3iVPJeX9OQ=
Subject key identifier: C0:C8:C9:3C:BC:49:72:E5:00:6D:00:00:69:73:A1:11:96:23:C8:26
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 018C3E23121044085727B3A9EB75A43536A9
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/wMjJPLxJcuUAbQAAaXOhEZYjyCY.roa
Signing time: Wed 06 Dec 2023 07:58:54 +0000
ROA not before: Wed 06 Dec 2023 07:58:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
193.104.68.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.66.0/23 maxlen: 23
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.77.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.145.0/24 maxlen: 24
178.254.140.0/22 maxlen: 22
178.254.165.0/24 maxlen: 24
178.254.163.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/24 maxlen: 24
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
178.254.187.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
109.111.254.0/24 maxlen: 24
217.169.208.0/20 maxlen: 20
217.169.208.0/22 maxlen: 22
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.34.0/24 maxlen: 24
5.172.33.0/24 maxlen: 24
5.172.34.0/23 maxlen: 23
5.172.36.0/23 maxlen: 23
5.172.36.0/22 maxlen: 22
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.240.0/24 maxlen: 24
109.111.236.0/22 maxlen: 22
109.111.246.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.245.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 23
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:23:12:10:44:08:57:27:b3:a9:eb:75:a4:35:36:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Dec 6 07:58:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0c8c93cbc4972e5006d00006973a1119623c826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:d5:de:af:f9:75:a0:8d:11:2a:b8:0b:35:
3a:5e:f2:54:30:cf:ec:04:fa:da:b7:de:e4:fd:61:
a3:71:45:8f:bd:1e:0f:f1:b4:67:24:1e:3e:6c:b5:
37:6e:81:6b:a6:e4:73:4b:b8:72:ef:38:48:96:0a:
a7:7a:dd:40:d9:13:74:b2:42:79:43:26:a2:e8:4e:
27:5b:bd:34:92:c0:86:2e:b3:1e:45:c0:8f:3d:eb:
3a:6c:92:d3:36:f4:3f:96:8d:7f:73:ee:9f:e8:b6:
eb:b2:fd:df:a3:8c:4f:9b:d8:14:4e:f9:b5:e0:51:
ef:4d:7a:48:9a:55:89:50:64:99:24:13:41:b4:e4:
9a:b1:c6:aa:f5:12:14:0b:1f:af:f8:a5:d2:b0:8b:
ad:3a:5a:10:cd:06:17:65:d2:0a:c5:1e:89:09:3b:
36:11:19:8b:ad:28:85:52:1d:21:ae:50:6e:fd:9f:
aa:43:bf:d1:05:2a:e0:aa:d7:05:85:10:9e:40:82:
ae:34:ce:98:33:af:70:fa:8f:c5:e9:05:ef:78:cb:
87:b7:3e:eb:34:07:8a:bf:11:a6:2c:78:d7:63:ff:
42:32:70:6e:e1:05:95:54:89:97:2d:46:a6:70:bf:
ed:9e:62:0f:dc:68:00:60:81:c2:87:6f:bf:c4:43:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C8:C9:3C:BC:49:72:E5:00:6D:00:00:69:73:A1:11:96:23:C8:26
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/wMjJPLxJcuUAbQAAaXOhEZYjyCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0-5.172.39.255
89.23.65.0-89.23.70.255
89.23.74.0/23
89.23.77.0/24
89.23.84.0/24
89.23.90.0/24
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0/19
178.254.163.0/24
178.254.165.0/24
178.254.169.0/24
178.254.172.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0-178.254.184.255
178.254.187.0-178.254.191.255
185.157.44.0/24
193.104.68.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
36:22:0b:a5:30:3b:c1:84:54:d7:4d:1f:67:1e:75:01:4c:7b:
72:2f:0e:04:4d:6c:35:65:d8:2f:34:ff:22:97:db:75:20:ba:
07:cd:9d:d1:68:ca:22:7a:62:d2:47:cd:76:e6:6a:64:c8:db:
ca:a2:4a:7c:a4:10:fc:2b:ea:0e:16:5a:eb:0a:a1:c1:ab:3f:
a0:37:55:9e:01:ea:99:f5:a1:54:d8:0a:10:61:62:4d:49:13:
9d:d4:84:be:1e:e3:7d:94:a6:a5:2f:d4:ff:3f:df:79:74:d7:
94:cd:02:5e:71:2a:c6:bd:34:89:44:84:c5:6c:8d:5b:9a:46:
ee:99:ec:94:95:83:53:9f:ef:f6:26:d2:4c:c4:e2:cf:ea:29:
5f:ef:d4:0f:13:37:47:f7:9c:22:3a:e8:20:93:a9:df:37:a9:
04:4e:ce:10:2a:a6:a7:bf:cf:3a:b3:5b:f6:87:4f:79:be:31:
8c:59:11:23:00:95:70:3d:da:1c:b6:f3:05:1e:cb:d7:5c:28:
bd:35:4e:36:a8:05:8c:64:e5:28:ce:2c:a3:cd:16:8d:89:e1:
3b:45:7b:1a:02:5c:83:29:00:79:1d:86:4f:35:1f:ca:0b:14:
f4:5b:3a:e5:44:87:dd:e7:c0:ef:b7:2f:0f:6e:ca:9c:cd:d2:
cb:29:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org