Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/q02_WSPo-RkcjdZkgQxL7MQ2o4g.roa
File: q02_WSPo-RkcjdZkgQxL7MQ2o4g.roa (raw, json)
Hash identifier: bjD2dCEDCtpP1LeR65FSjDM00FzMfDInPXo9Qggd3+Q=
Subject key identifier: AB:4D:BF:59:23:E8:F9:19:1C:8D:D6:64:81:0C:4B:EC:C4:36:A3:88
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 018E568E8751F3BE6003704EB1A61FEAF7F3
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/q02_WSPo-RkcjdZkgQxL7MQ2o4g.roa
Signing time: Tue 19 Mar 2024 11:52:45 +0000
ROA not before: Tue 19 Mar 2024 11:52:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41798
IP address blocks: 2.57.96.0/24 maxlen: 24
2.57.97.0/24 maxlen: 24
2.57.98.0/24 maxlen: 24
2.57.99.0/24 maxlen: 24
37.17.176.0/24 maxlen: 24
37.17.177.0/24 maxlen: 24
37.17.178.0/24 maxlen: 24
37.17.179.0/24 maxlen: 24
37.17.180.0/24 maxlen: 24
37.17.181.0/24 maxlen: 24
37.17.182.0/24 maxlen: 24
37.17.183.0/24 maxlen: 24
37.208.40.0/21 maxlen: 21
37.208.40.0/24 maxlen: 24
37.208.41.0/24 maxlen: 24
37.208.42.0/24 maxlen: 24
37.208.43.0/24 maxlen: 24
37.208.44.0/24 maxlen: 24
37.208.45.0/24 maxlen: 24
37.208.46.0/24 maxlen: 24
37.208.47.0/24 maxlen: 24
87.255.202.0/24 maxlen: 24
87.255.203.0/24 maxlen: 24
87.255.204.0/22 maxlen: 22
87.255.204.0/24 maxlen: 24
87.255.205.0/24 maxlen: 24
87.255.206.0/24 maxlen: 24
87.255.207.0/24 maxlen: 24
87.255.208.0/24 maxlen: 24
87.255.209.0/24 maxlen: 24
87.255.210.0/24 maxlen: 24
87.255.211.0/24 maxlen: 24
87.255.212.0/24 maxlen: 24
87.255.213.0/24 maxlen: 24
87.255.214.0/24 maxlen: 24
87.255.215.0/24 maxlen: 24
87.255.216.0/24 maxlen: 24
87.255.217.0/24 maxlen: 24
87.255.218.0/24 maxlen: 24
87.255.219.0/24 maxlen: 24
87.255.220.0/24 maxlen: 24
87.255.221.0/24 maxlen: 24
87.255.222.0/24 maxlen: 24
87.255.223.0/24 maxlen: 24
91.185.0.0/19 maxlen: 19
91.185.0.0/24 maxlen: 24
91.185.1.0/24 maxlen: 24
91.185.2.0/24 maxlen: 24
91.185.3.0/24 maxlen: 24
91.185.4.0/24 maxlen: 24
91.185.5.0/24 maxlen: 24
91.185.6.0/24 maxlen: 24
91.185.7.0/24 maxlen: 24
91.185.8.0/24 maxlen: 24
91.185.9.0/24 maxlen: 24
91.185.10.0/24 maxlen: 24
91.185.11.0/24 maxlen: 24
91.185.12.0/24 maxlen: 24
91.185.13.0/24 maxlen: 24
91.185.14.0/24 maxlen: 24
91.185.15.0/24 maxlen: 24
91.185.16.0/24 maxlen: 24
91.185.17.0/24 maxlen: 24
91.185.18.0/24 maxlen: 24
91.185.19.0/24 maxlen: 24
91.185.20.0/24 maxlen: 24
91.185.21.0/24 maxlen: 24
91.185.22.0/24 maxlen: 24
91.185.23.0/24 maxlen: 24
91.185.24.0/24 maxlen: 24
91.185.25.0/24 maxlen: 24
91.185.26.0/24 maxlen: 24
91.185.27.0/24 maxlen: 24
91.185.28.0/24 maxlen: 24
91.185.29.0/24 maxlen: 24
91.185.30.0/24 maxlen: 24
91.185.31.0/24 maxlen: 24
91.246.80.0/20 maxlen: 20
91.246.80.0/24 maxlen: 24
91.246.81.0/24 maxlen: 24
91.246.82.0/24 maxlen: 24
91.246.83.0/24 maxlen: 24
91.246.84.0/24 maxlen: 24
91.246.85.0/24 maxlen: 24
91.246.86.0/24 maxlen: 24
91.246.87.0/24 maxlen: 24
91.246.88.0/24 maxlen: 24
91.246.89.0/24 maxlen: 24
91.246.90.0/24 maxlen: 24
91.246.91.0/24 maxlen: 24
91.246.92.0/24 maxlen: 24
91.246.93.0/24 maxlen: 24
91.246.94.0/24 maxlen: 24
91.246.95.0/24 maxlen: 24
91.246.96.0/21 maxlen: 21
91.246.96.0/24 maxlen: 24
91.246.97.0/24 maxlen: 24
91.246.98.0/24 maxlen: 24
91.246.99.0/24 maxlen: 24
91.246.100.0/24 maxlen: 24
91.246.101.0/24 maxlen: 24
91.246.102.0/24 maxlen: 24
91.246.103.0/24 maxlen: 24
94.141.224.0/20 maxlen: 20
94.141.224.0/24 maxlen: 24
94.141.225.0/24 maxlen: 24
94.141.226.0/24 maxlen: 24
94.141.227.0/24 maxlen: 24
94.141.228.0/24 maxlen: 24
94.141.229.0/24 maxlen: 24
94.141.230.0/24 maxlen: 24
94.141.231.0/24 maxlen: 24
94.141.232.0/24 maxlen: 24
94.141.233.0/24 maxlen: 24
94.141.234.0/24 maxlen: 24
94.141.235.0/24 maxlen: 24
94.141.236.0/24 maxlen: 24
94.141.237.0/24 maxlen: 24
94.141.238.0/24 maxlen: 24
94.141.239.0/24 maxlen: 24
94.141.240.0/22 maxlen: 22
94.141.240.0/24 maxlen: 24
94.141.241.0/24 maxlen: 24
94.141.242.0/24 maxlen: 24
94.141.243.0/24 maxlen: 24
94.141.248.0/22 maxlen: 22
94.141.248.0/24 maxlen: 24
94.141.249.0/24 maxlen: 24
94.141.250.0/24 maxlen: 24
94.141.251.0/24 maxlen: 24
176.98.224.0/20 maxlen: 20
176.98.224.0/24 maxlen: 24
176.98.225.0/24 maxlen: 24
176.98.226.0/24 maxlen: 24
176.98.227.0/24 maxlen: 24
176.98.228.0/24 maxlen: 24
176.98.229.0/24 maxlen: 24
176.98.230.0/24 maxlen: 24
176.98.231.0/24 maxlen: 24
176.98.232.0/24 maxlen: 24
176.98.233.0/24 maxlen: 24
176.98.234.0/24 maxlen: 24
176.98.235.0/24 maxlen: 24
176.98.236.0/24 maxlen: 24
176.98.237.0/24 maxlen: 24
176.98.238.0/24 maxlen: 24
176.98.239.0/24 maxlen: 24
176.98.240.0/22 maxlen: 22
176.98.240.0/24 maxlen: 24
176.98.241.0/24 maxlen: 24
176.98.242.0/24 maxlen: 24
176.98.243.0/24 maxlen: 24
178.22.168.0/21 maxlen: 21
178.22.168.0/24 maxlen: 24
178.22.169.0/24 maxlen: 24
178.22.170.0/24 maxlen: 24
178.22.171.0/24 maxlen: 24
178.22.172.0/24 maxlen: 24
178.22.173.0/24 maxlen: 24
178.22.174.0/24 maxlen: 24
178.22.175.0/24 maxlen: 24
193.104.253.0/24 maxlen: 24
2a00:ab40::/32 maxlen: 48
2a00:ab40:3000::/48 maxlen: 48
2a00:ab40:4000::/48 maxlen: 48
2a00:ab40:5000::/48 maxlen: 48
2a00:ab40:7200::/48 maxlen: 48
2a00:ab40:7201::/48 maxlen: 48
2a00:ab40:7300::/48 maxlen: 48
2a00:ab40:7301::/48 maxlen: 48
2a00:ab40:7400::/48 maxlen: 48
2a00:ab40:7401::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 May 2024 20:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:8e:87:51:f3:be:60:03:70:4e:b1:a6:1f:ea:f7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Mar 19 11:52:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab4dbf5923e8f9191c8dd664810c4becc436a388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:1f:47:06:bc:d8:d8:01:aa:ad:f7:6e:c9:
5f:e5:e6:8e:56:76:be:6d:2b:40:0f:9b:50:82:22:
f8:31:f3:47:82:db:6b:22:f9:60:3f:42:ab:66:12:
cb:24:0c:1e:d7:7a:c5:5f:66:d0:fb:21:90:e9:36:
ba:a0:ee:c5:af:f0:af:60:1c:79:5e:36:1f:14:1f:
1b:1d:cf:10:ce:94:21:3a:1d:7e:24:ce:3a:97:16:
d0:2e:b7:f0:03:a8:58:f1:63:91:2f:5d:0d:cf:52:
55:7b:52:41:c4:40:7d:36:5d:69:45:60:63:83:7f:
0f:e0:0b:f0:b9:0b:a4:b6:38:d4:7d:76:51:44:fe:
05:14:61:b7:72:23:47:87:83:54:b7:0d:5e:3f:5e:
10:4f:f2:8d:b1:1a:5c:8c:29:fc:1b:59:30:d4:b2:
b3:6b:78:a8:c6:af:f7:fa:17:f9:ca:ff:1c:76:0d:
0b:2b:87:b9:85:ab:ed:d8:67:4a:e3:b1:12:74:18:
95:44:03:90:c9:08:ba:47:0e:76:80:bf:c9:db:bc:
42:f8:2c:6c:24:45:78:87:5f:67:89:2c:9d:4b:be:
f9:b4:13:33:bb:30:44:2a:7c:30:5a:f9:98:e3:4b:
ae:f9:b7:8c:61:60:76:7d:75:b5:13:36:9e:aa:27:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4D:BF:59:23:E8:F9:19:1C:8D:D6:64:81:0C:4B:EC:C4:36:A3:88
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/q02_WSPo-RkcjdZkgQxL7MQ2o4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.96.0/22
37.17.176.0/21
37.208.40.0/21
87.255.202.0-87.255.223.255
91.185.0.0/19
91.246.80.0-91.246.103.255
94.141.224.0-94.141.243.255
94.141.248.0/22
176.98.224.0-176.98.243.255
178.22.168.0/21
193.104.253.0/24
IPv6:
2a00:ab40::/32
Signature Algorithm: sha256WithRSAEncryption
15:b5:d6:aa:4a:7a:39:70:4d:a0:ac:a7:08:4f:72:c3:23:2d:
b2:32:c2:6d:67:9a:15:37:80:66:74:ba:d9:57:cc:e7:1b:f1:
a1:f5:cb:a6:13:5f:3a:c1:ea:b7:84:44:bf:43:f2:10:89:00:
8e:76:02:07:52:f0:af:7d:a6:6f:3b:0a:18:2d:8c:d6:7e:2d:
f4:13:fe:d6:ed:f3:be:ed:61:2a:25:79:8b:29:cc:31:29:ea:
42:e7:7d:20:3d:05:01:fa:a6:9d:6f:b0:7d:b4:04:82:55:f2:
1a:76:2d:06:b7:c3:6e:e7:33:c0:6d:d4:3e:aa:5a:4a:f5:b2:
5b:c9:c0:bb:c6:0d:c7:32:36:57:ee:0a:89:7c:03:2d:35:a0:
59:2d:2d:27:7e:f4:a4:75:d2:52:df:4a:13:f8:04:78:3f:9e:
af:7e:57:2c:cd:1d:81:56:fa:66:2f:10:b3:12:cb:5e:cb:7b:
b4:7b:59:49:2e:2a:4e:f8:fb:fc:08:03:85:fe:ed:6a:71:05:
f7:0f:5f:d9:58:08:25:3e:c8:10:3c:e9:e2:b9:d2:97:f7:d6:
e7:8e:bd:46:ca:9d:60:ac:dc:d7:d7:6c:fb:c9:de:73:73:15:
01:ba:e1:28:a1:8b:21:8a:9e:fb:ef:83:43:c1:20:99:98:3e:
c3:70:0c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:38 2024 by rpki-client on console-fra.rpki-client.org