Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/w5ftwDX8--DCMq03DjmFuHcEpiU.roa
File: w5ftwDX8--DCMq03DjmFuHcEpiU.roa (raw, json)
Hash identifier: HMRNromKc8DGuyJUIbz2tN8rTh+rOXBvS/oIQVXssV8=
Subject key identifier: C3:97:ED:C0:35:FC:FB:E0:C2:32:AD:37:0E:39:85:B8:77:04:A6:25
Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial: 018BD2BEBBC5D09028FA1EADBF9F8445DCE9
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/w5ftwDX8--DCMq03DjmFuHcEpiU.roa
Signing time: Wed 15 Nov 2023 11:29:57 +0000
ROA not before: Wed 15 Nov 2023 11:29:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30722
IP address blocks: 91.80.64.0/18 maxlen: 18
109.114.0.0/15 maxlen: 19
176.242.0.0/15 maxlen: 15
91.80.0.0/19 maxlen: 19
93.144.0.0/16 maxlen: 20
2.43.0.0/16 maxlen: 16
93.70.0.0/16 maxlen: 18
91.80.32.0/21 maxlen: 21
2.33.0.0/17 maxlen: 17
83.225.0.0/16 maxlen: 16
91.80.46.0/24 maxlen: 24
91.80.48.0/20 maxlen: 24
2.33.128.0/17 maxlen: 17
93.148.0.0/16 maxlen: 20
93.151.128.0/17 maxlen: 20
2.40.0.0/16 maxlen: 20
91.80.128.0/17 maxlen: 17
83.224.64.0/20 maxlen: 20
83.224.81.0/24 maxlen: 24
83.224.80.0/24 maxlen: 24
83.224.86.0/23 maxlen: 23
93.66.0.0/15 maxlen: 17
2.32.0.0/16 maxlen: 20
93.150.0.0/16 maxlen: 20
2.36.0.0/14 maxlen: 18
31.26.0.0/16 maxlen: 16
188.218.0.0/15 maxlen: 18
37.117.0.0/16 maxlen: 19
93.147.0.0/16 maxlen: 20
83.224.128.0/17 maxlen: 17
2.46.0.0/15 maxlen: 20
37.176.0.0/13 maxlen: 20
37.119.0.0/17 maxlen: 19
109.119.0.0/16 maxlen: 16
31.156.0.0/14 maxlen: 19
93.146.0.0/16 maxlen: 20
37.159.128.0/17 maxlen: 20
109.115.192.0/19 maxlen: 19
2.45.0.0/16 maxlen: 20
109.115.96.0/19 maxlen: 19
109.112.0.0/15 maxlen: 15
188.152.128.0/17 maxlen: 20
31.27.224.0/19 maxlen: 19
93.65.0.0/16 maxlen: 18
37.116.0.0/16 maxlen: 19
109.116.0.0/15 maxlen: 20
176.244.0.0/14 maxlen: 14
2.42.0.0/16 maxlen: 20
37.119.128.0/17 maxlen: 20
93.69.0.0/16 maxlen: 16
109.115.224.0/19 maxlen: 19
188.153.0.0/16 maxlen: 20
130.25.0.0/16 maxlen: 18
2.44.0.0/16 maxlen: 19
93.71.0.0/16 maxlen: 18
2.34.0.0/15 maxlen: 20
2.33.176.0/20 maxlen: 20
93.64.0.0/16 maxlen: 18
31.27.0.0/18 maxlen: 18
37.118.0.0/16 maxlen: 16
109.118.0.0/16 maxlen: 16
91.81.0.0/17 maxlen: 19
93.145.0.0/16 maxlen: 20
5.88.0.0/13 maxlen: 20
93.68.0.0/16 maxlen: 16
91.81.128.0/17 maxlen: 24
37.159.0.0/17 maxlen: 17
31.27.192.0/19 maxlen: 19
93.149.0.0/16 maxlen: 20
188.152.0.0/17 maxlen: 20
31.27.96.0/20 maxlen: 20
188.216.0.0/15 maxlen: 17
130.0.128.0/18 maxlen: 21
31.27.128.0/17 maxlen: 19
2.41.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:be:bb:c5:d0:90:28:fa:1e:ad:bf:9f:84:45:dc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
Validity
Not Before: Nov 15 11:29:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c397edc035fcfbe0c232ad370e3985b87704a625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:66:6e:69:ed:d2:fb:22:dd:45:14:40:87:
26:3b:63:a0:c8:6e:a7:57:99:10:8b:e2:f9:09:7d:
33:77:7a:85:af:45:0b:de:7c:e8:01:80:99:d9:ad:
52:6c:5e:4e:38:6c:29:b8:2c:db:a4:45:28:8a:78:
dd:c3:7b:be:26:b2:c8:73:bf:57:8b:22:61:41:a2:
f5:c2:a4:33:76:34:cc:14:b6:07:30:04:5b:31:46:
13:f6:9d:28:35:db:7b:35:02:3b:91:ca:6a:43:6d:
dd:db:30:54:a5:90:98:07:a3:96:98:03:a5:ee:3b:
5f:31:9a:bd:2a:53:cd:4d:2b:78:c4:2f:54:6a:5d:
5f:e7:0e:18:51:5e:23:70:f8:ab:3f:57:0c:9c:f1:
5b:d0:58:89:eb:a2:24:05:f6:f7:82:75:57:4b:7b:
55:18:cd:5b:6b:b8:22:a9:2f:21:f0:c7:59:30:3d:
85:c4:30:3a:3e:40:c2:4f:9d:df:ac:71:4f:38:b2:
1c:36:dd:7f:cf:38:33:91:c5:de:96:1e:e5:db:54:
2d:3b:97:48:b8:e1:cd:4f:a3:b5:94:5a:50:6e:59:
0e:c5:f7:3a:a0:1e:11:3f:8b:75:5e:6b:35:46:91:
53:1b:b4:95:3e:34:91:47:a9:e3:4e:0d:81:c0:f2:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:97:ED:C0:35:FC:FB:E0:C2:32:AD:37:0E:39:85:B8:77:04:A6:25
X509v3 Authority Key Identifier:
keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/w5ftwDX8--DCMq03DjmFuHcEpiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.32.0.0/12
5.88.0.0/13
31.26.0.0-31.27.63.255
31.27.96.0/20
31.27.128.0/17
31.156.0.0/14
37.116.0.0/14
37.159.0.0/16
37.176.0.0/13
83.224.64.0-83.224.81.255
83.224.86.0/23
83.224.128.0-83.225.255.255
91.80.0.0-91.80.39.255
91.80.46.0/24
91.80.48.0-91.81.255.255
93.64.0.0/13
93.144.0.0-93.150.255.255
93.151.128.0/17
109.112.0.0/13
130.0.128.0/18
130.25.0.0/16
176.242.0.0-176.247.255.255
188.152.0.0/15
188.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
03:7a:5b:3b:b1:03:dd:c4:3d:54:1a:2c:f2:a2:41:f2:e1:91:
35:8d:d1:5a:ca:29:fa:33:ff:5c:c3:0f:fe:c2:16:ae:6c:82:
ec:a4:d8:76:f4:23:0d:0d:a2:ca:db:25:25:e0:2d:0b:70:16:
2e:82:8d:31:24:eb:2c:75:ec:b4:b5:0a:7a:3a:6e:fd:dc:be:
b5:aa:1c:b8:3b:b5:9c:7a:0d:0a:ef:f1:cf:f2:e5:8b:77:7a:
a8:45:7b:fb:97:99:9e:82:82:cc:a7:c7:df:28:01:8d:a4:e9:
36:56:e1:f5:bc:d9:94:83:6a:c3:41:1d:2f:c7:a7:87:35:91:
f7:1d:42:24:67:e4:70:69:b3:f4:8e:4c:38:02:46:06:86:6f:
6f:61:9a:df:f1:1d:7b:4b:be:4e:dc:22:c8:99:a7:a8:aa:bd:
2f:4f:e9:77:ad:ee:2c:49:8d:90:96:03:64:c6:fa:25:75:f3:
9f:a2:15:43:6f:67:f8:0f:9f:6e:9b:af:4b:23:4e:81:e1:ef:
ec:d3:c9:0f:5a:fb:24:70:58:86:3a:e2:c3:c0:00:22:b9:a2:
d7:18:eb:4c:7d:a3:f1:28:eb:6e:ce:83:1e:42:17:0e:fb:7f:
1b:f0:48:da:4d:04:d9:10:41:45:20:db:4a:58:ac:0d:14:5b:
1c:ae:50:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org