Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/wJBB5G7LTFmIaUDPL8I98ZVNZQQ.roa
File: wJBB5G7LTFmIaUDPL8I98ZVNZQQ.roa (raw, json)
Hash identifier: MsK5LBXgs1sYmZHkrZwkp5fTO6MEm5PJRCYjbm/z7po=
Subject key identifier: C0:90:41:E4:6E:CB:4C:59:88:69:40:CF:2F:C2:3D:F1:95:4D:65:04
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 019156579A075A5C082EF12ADED516BDEB04
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/wJBB5G7LTFmIaUDPL8I98ZVNZQQ.roa
Signing time: Thu 15 Aug 2024 14:01:07 +0000
ROA not before: Thu 15 Aug 2024 14:01:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23764
IP address blocks: 5.10.136.112/29 maxlen: 29
5.10.136.208/30 maxlen: 30
5.10.141.8/30 maxlen: 30
5.10.141.136/30 maxlen: 30
5.154.128.0/24 maxlen: 24
5.154.129.0/24 maxlen: 24
5.154.144.0/24 maxlen: 24
5.154.145.0/24 maxlen: 24
5.154.146.0/24 maxlen: 24
5.154.147.0/24 maxlen: 24
5.154.154.0/24 maxlen: 24
5.154.155.0/24 maxlen: 24
5.154.156.0/24 maxlen: 24
5.154.157.0/24 maxlen: 24
5.154.158.0/24 maxlen: 24
5.154.159.0/24 maxlen: 24
79.139.0.0/24 maxlen: 24
79.139.1.0/24 maxlen: 24
79.139.2.0/24 maxlen: 24
79.139.3.0/24 maxlen: 24
79.139.4.0/24 maxlen: 24
79.139.5.0/24 maxlen: 24
79.139.6.0/24 maxlen: 24
79.139.7.0/24 maxlen: 24
79.139.8.0/24 maxlen: 24
79.139.9.0/24 maxlen: 24
79.139.10.0/24 maxlen: 24
79.139.11.0/24 maxlen: 24
79.139.12.0/24 maxlen: 24
79.139.13.0/24 maxlen: 24
79.139.14.0/24 maxlen: 24
87.120.16.0/24 maxlen: 24
87.120.17.0/24 maxlen: 24
87.120.18.0/24 maxlen: 24
87.120.19.0/24 maxlen: 24
87.120.20.0/24 maxlen: 24
87.120.21.0/24 maxlen: 24
87.120.22.0/24 maxlen: 24
87.120.23.0/24 maxlen: 24
87.120.24.0/24 maxlen: 24
87.120.25.0/24 maxlen: 24
87.120.26.0/24 maxlen: 24
87.120.27.0/24 maxlen: 24
95.130.192.0/24 maxlen: 24
95.130.194.0/24 maxlen: 24
95.130.199.0/24 maxlen: 24
145.14.66.0/24 maxlen: 24
145.14.68.0/24 maxlen: 24
145.14.70.0/24 maxlen: 24
145.14.73.0/24 maxlen: 24
145.14.76.0/24 maxlen: 24
145.14.77.0/24 maxlen: 24
145.14.78.0/24 maxlen: 24
145.14.80.0/24 maxlen: 24
145.14.83.0/24 maxlen: 24
145.14.85.0/24 maxlen: 24
145.14.87.0/24 maxlen: 24
145.14.89.0/24 maxlen: 24
145.14.91.0/24 maxlen: 24
145.14.92.0/24 maxlen: 24
145.14.93.0/24 maxlen: 24
2a04:f580:9030:100::/56 maxlen: 56
2a04:f580:9210::/48 maxlen: 48
2a04:f581:110a::/48 maxlen: 48
2a04:f581:110b::/48 maxlen: 48
2a04:f581:8040::/48 maxlen: 48
2a04:f581:8070::/48 maxlen: 48
2a04:f581:8090::/48 maxlen: 48
2a04:f581:80b0::/48 maxlen: 48
2a04:f581:8140::/48 maxlen: 48
2a04:f581:8170::/48 maxlen: 48
2a04:f581:8190::/48 maxlen: 48
2a04:f581:81b0::/48 maxlen: 48
2a04:f581:8240::/48 maxlen: 48
2a04:f581:8270::/48 maxlen: 48
2a04:f581:8290::/48 maxlen: 48
2a04:f581:82b0::/48 maxlen: 48
2a04:f581:a00e:a001::/64 maxlen: 64
2a04:f581:a00e:a002::/64 maxlen: 64
2a04:f581:a00e:a003::/64 maxlen: 64
2a04:f581:a00e:a004::/64 maxlen: 64
2a04:f581:a00f::/48 maxlen: 48
2a04:f581:a111::/48 maxlen: 48
2a04:f581:a123::/48 maxlen: 48
2a04:f581:a125::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Sep 2024 16:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:57:9a:07:5a:5c:08:2e:f1:2a:de:d5:16:bd:eb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Aug 15 14:01:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c09041e46ecb4c59886940cf2fc23df1954d6504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:b0:1e:56:fb:ef:fe:c7:a0:9c:96:d3:76:
84:bf:bd:d3:f1:c2:0e:ef:0e:1d:a2:98:8a:fb:16:
8c:e7:08:63:ac:8e:1a:cf:8a:84:5d:d4:7e:b5:8b:
b8:6b:1c:a3:5f:27:85:1a:81:c1:6a:d7:fa:d3:d4:
1f:bd:9c:89:e5:30:5f:90:c6:84:8f:f9:d2:fe:d0:
46:4a:6d:dd:27:e7:fa:65:26:7f:44:a8:21:97:8f:
ee:57:89:48:1f:a7:e0:ca:7d:be:98:50:e0:13:e6:
5b:7f:b6:3b:63:b4:1b:b8:d2:f9:33:a3:9f:bf:dc:
58:d8:6a:07:75:91:0d:49:59:4a:28:26:65:e5:64:
08:8f:ec:21:80:a7:37:6a:9f:0d:11:33:ce:77:14:
c4:f2:80:d7:93:58:97:ce:18:09:67:8f:da:5d:32:
d3:63:91:94:88:c4:0b:2e:24:1c:bb:26:56:d6:bb:
1b:07:37:77:e0:78:53:90:a2:bd:77:cd:9c:af:89:
0b:98:cc:e8:c6:9a:f1:39:64:66:de:29:2a:9b:b8:
ef:8b:4d:e7:aa:c6:fd:88:b2:03:2b:e1:4d:1c:58:
16:dd:9d:28:58:52:72:2a:27:16:2f:ea:49:75:c9:
dd:b1:b5:4f:23:f3:f4:7b:cf:46:9f:29:c3:f1:0a:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:90:41:E4:6E:CB:4C:59:88:69:40:CF:2F:C2:3D:F1:95:4D:65:04
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/wJBB5G7LTFmIaUDPL8I98ZVNZQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.136.112/29
5.10.136.208/30
5.10.141.8/30
5.10.141.136/30
5.154.128.0/23
5.154.144.0/22
5.154.154.0-5.154.159.255
79.139.0.0-79.139.14.255
87.120.16.0-87.120.27.255
95.130.192.0/24
95.130.194.0/24
95.130.199.0/24
145.14.66.0/24
145.14.68.0/24
145.14.70.0/24
145.14.73.0/24
145.14.76.0-145.14.78.255
145.14.80.0/24
145.14.83.0/24
145.14.85.0/24
145.14.87.0/24
145.14.89.0/24
145.14.91.0-145.14.93.255
IPv6:
2a04:f580:9030:100::/56
2a04:f580:9210::/48
2a04:f581:110a::/47
2a04:f581:8040::/48
2a04:f581:8070::/48
2a04:f581:8090::/48
2a04:f581:80b0::/48
2a04:f581:8140::/48
2a04:f581:8170::/48
2a04:f581:8190::/48
2a04:f581:81b0::/48
2a04:f581:8240::/48
2a04:f581:8270::/48
2a04:f581:8290::/48
2a04:f581:82b0::/48
2a04:f581:a00e:a001::-2a04:f581:a00e:a004:ffff:ffff:ffff:ffff
2a04:f581:a00f::/48
2a04:f581:a111::/48
2a04:f581:a123::/48
2a04:f581:a125::/48
Signature Algorithm: sha256WithRSAEncryption
84:e2:6d:40:b8:04:67:71:4a:a3:ae:08:4e:c1:9b:00:e5:e4:
1d:40:e9:c2:b6:5f:58:87:ed:a6:16:31:67:5c:28:53:dd:e0:
d5:14:7e:b7:5e:9d:92:0b:16:a4:ce:44:19:ed:6b:d1:69:d3:
69:7a:bf:5c:a8:fb:08:fe:77:55:10:b2:74:39:0b:71:36:43:
66:fb:55:aa:81:b9:64:b7:ed:fb:fd:9a:9e:fb:db:c5:3f:0f:
af:ea:62:e1:90:5e:64:9a:c9:69:b7:c0:a9:4b:54:12:17:79:
d0:68:43:b3:74:2f:9b:18:9b:9a:9c:9f:db:41:7f:b8:6a:18:
77:26:97:b6:ae:c7:71:4f:af:a1:cd:01:d3:2d:73:76:44:a5:
46:59:4c:9a:c0:4c:18:b3:55:53:b0:1f:1b:04:fb:71:7f:3b:
16:57:1f:32:d1:43:a9:9e:29:b3:60:ab:41:a6:18:d6:35:88:
71:fb:b6:16:1a:34:de:4e:f0:8b:4e:04:8e:c4:b6:49:4a:2c:
91:6d:0f:b2:99:b1:65:b1:ad:6e:f8:b1:1a:d7:5d:d8:97:6f:
2a:13:bc:3a:34:3d:8f:4f:50:c6:88:7b:fa:53:a4:dc:2b:9a:
3a:b1:0c:14:d1:1d:38:a5:60:09:c2:c3:61:8f:17:e2:5e:5d:
95:52:e3:e9
-----BEGIN CERTIFICATE-----
MIIGgjCCBWqgAwIBAgISAZFWV5oHWlwILvEq3tUWvesEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZjNlZjNlMGVhOTVhOTc1NTM3ZDVjMjVkOTNjYjc2YWY2
ODcyMzQwHhcNMjQwODE1MTQwMTA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDkwNDFlNDZlY2I0YzU5ODg2OTQwY2YyZmMyM2RmMTk1NGQ2NTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQSwHlb77/7HoJyW03aEv73T8cIO
7w4dopiK+xaM5whjrI4az4qEXdR+tYu4axyjXyeFGoHBatf609QfvZyJ5TBfkMaE
j/nS/tBGSm3dJ+f6ZSZ/RKghl4/uV4lIH6fgyn2+mFDgE+Zbf7Y7Y7QbuNL5M6Of
v9xY2GoHdZENSVlKKCZl5WQIj+whgKc3ap8NETPOdxTE8oDXk1iXzhgJZ4/aXTLT
Y5GUiMQLLiQcuyZW1rsbBzd34HhTkKK9d82cr4kLmMzoxprxOWRm3ikqm7jvi03n
qsb9iLIDK+FNHFgW3Z0oWFJyKicWL+pJdcndsbVPI/P0e89GnynD8QpA7wIDAQAB
o4IDjjCCA4owHQYDVR0OBBYEFMCQQeRuy0xZiGlAzy/CPfGVTWUEMB8GA1UdIwQY
MBaAFAHz7z4OqVqXVTfVwl2Ty3avaHI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEt
MzUzYjNhNjMzYWRhLzEvd0pCQjVHN0xURm1JYVVEUEw4STk4WlZOWlFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEtMzUzYjNhNjMzYWRh
LzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBogYIKwYBBQUHAQcBAf8EggGRMIIBjTCBvAQCAAEwgbUD
BQMFCohwAwUCBQqI0AMFAgUKjQgDBQIFCo2IAwQBBZqAAwQCBZqQMAwDBAEFmpoD
BAUFmoAwCwMDAE+LAwQAT4sOMAwDBARXeBADBAJXeBgDBABfgsADBABfgsIDBABf
gscDBACRDkIDBACRDkQDBACRDkYDBACRDkkwDAMEApEOTAMEAJEOTgMEAJEOUAME
AJEOUwMEAJEOVQMEAJEOVwMEAJEOWTAMAwQAkQ5bAwQBkQ5cMIHLBAIAAjCBxAMI
ACoE9YCQMAEDBwAqBPWAkhADBwEqBPWBEQoDBwAqBPWBgEADBwAqBPWBgHADBwAq
BPWBgJADBwAqBPWBgLADBwAqBPWBgUADBwAqBPWBgXADBwAqBPWBgZADBwAqBPWB
gbADBwAqBPWBgkADBwAqBPWBgnADBwAqBPWBgpADBwAqBPWBgrAwFgMJACoE9YGg
DqABAwkAKgT1gaAOoAQDBwAqBPWBoA8DBwAqBPWBoREDBwAqBPWBoSMDBwAqBPWB
oSUwDQYJKoZIhvcNAQELBQADggEBAITibUC4BGdxSqOuCE7BmwDl5B1A6cK2X1iH
7aYWMWdcKFPd4NUUfrdenZILFqTORBnta9Fp02l6v1yo+wj+d1UQsnQ5C3E2Q2b7
VaqBuWS37fv9mp7728U/D6/qYuGQXmSayWm3wKlLVBIXedBoQ7N0L5sYm5qcn9tB
f7hqGHcml7aux3FPr6HNAdMtc3ZEpUZZTJrATBizVVOwHxsE+3F/OxZXHzLRQ6me
KbNgq0GmGNY1iHH7thYaNN5O8ItOBI7EtklKLJFtD7KZsWWxrW74sRrXXdiXbyoT
vDo0PY9PUMaIe/pTpNwrmjqxDBTRHTilYAnCw2GPF+JeXZVS4+k=
-----END CERTIFICATE-----
Generated at Fri Sep 13 18:17:53 2024 by rpki-client on console-ams.rpki-client.org