Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/w1h1ua8-wyOfx_b8OmWPpP4wq1g.roa
File: w1h1ua8-wyOfx_b8OmWPpP4wq1g.roa (raw, json)
Hash identifier: UTYWvtz0/o1R3D3tKxSOyoGLHsUtHoAo4qAlqwQ2JdA=
Subject key identifier: C3:58:75:B9:AF:3E:C3:23:9F:C7:F6:FC:3A:65:8F:A4:FE:30:AB:58
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0192D2C7B7885CE49B96088DC01CD19FD750
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/w1h1ua8-wyOfx_b8OmWPpP4wq1g.roa
Signing time: Mon 28 Oct 2024 10:59:16 +0000
ROA not before: Mon 28 Oct 2024 10:59:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50670
IP address blocks: 109.237.192.0/20 maxlen: 24
109.237.192.0/24 maxlen: 24
109.237.193.0/24 maxlen: 24
109.237.194.0/24 maxlen: 24
109.237.195.0/24 maxlen: 24
109.237.196.0/24 maxlen: 24
109.237.197.0/24 maxlen: 24
109.237.198.0/24 maxlen: 24
109.237.199.0/24 maxlen: 24
109.237.200.0/24 maxlen: 24
109.237.201.0/24 maxlen: 24
109.237.202.0/24 maxlen: 24
109.237.203.0/24 maxlen: 24
109.237.204.0/24 maxlen: 24
109.237.205.0/24 maxlen: 24
109.237.206.0/24 maxlen: 24
109.237.207.0/24 maxlen: 24
176.241.64.0/21 maxlen: 24
176.241.64.0/24 maxlen: 24
176.241.66.0/24 maxlen: 24
176.241.67.0/24 maxlen: 24
176.241.68.0/24 maxlen: 24
176.241.69.0/24 maxlen: 24
176.241.70.0/24 maxlen: 24
178.20.184.0/21 maxlen: 24
178.20.184.0/24 maxlen: 24
178.20.185.0/24 maxlen: 24
178.20.186.0/24 maxlen: 24
178.20.187.0/24 maxlen: 24
178.20.188.0/24 maxlen: 24
178.20.189.0/24 maxlen: 24
178.20.190.0/24 maxlen: 24
178.20.191.0/24 maxlen: 24
185.51.212.0/22 maxlen: 22
185.51.212.0/24 maxlen: 24
185.51.213.0/24 maxlen: 24
185.51.214.0/24 maxlen: 24
185.51.215.0/24 maxlen: 24
185.193.176.0/22 maxlen: 22
185.193.176.0/24 maxlen: 24
185.193.177.0/24 maxlen: 24
185.193.178.0/24 maxlen: 24
185.193.179.0/24 maxlen: 24
2a01:1d0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 29 Oct 2024 11:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d2:c7:b7:88:5c:e4:9b:96:08:8d:c0:1c:d1:9f:d7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 28 10:59:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c35875b9af3ec3239fc7f6fc3a658fa4fe30ab58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:21:f3:00:a2:31:98:0b:6e:70:b9:16:fe:d0:
cf:96:ec:1c:09:b4:8d:99:f0:0b:08:0c:28:48:e4:
5b:d0:e2:ee:3f:2e:c1:6d:b4:58:b0:2d:80:4d:21:
b9:8b:1d:52:ab:b6:ec:17:c9:15:f3:3a:21:8c:7d:
34:40:3e:3e:ac:00:9c:9d:59:15:73:ca:67:c1:5f:
b8:f9:e6:2b:4c:a5:a5:56:2d:ca:16:1e:ab:20:ad:
e7:44:bf:6f:50:df:43:f4:e6:f7:31:96:26:87:7c:
aa:7c:d4:29:5d:08:eb:bf:2a:b2:24:d6:fb:d3:c7:
1d:2f:63:a8:69:4f:72:04:5d:fa:46:59:07:6e:e3:
6b:8e:07:68:c8:a7:bd:2b:03:47:95:f1:a1:77:fc:
00:66:46:65:ef:c5:72:fd:08:5c:c1:12:e8:03:a2:
9e:20:ad:78:6f:3f:fc:f8:a6:38:2c:0c:24:0a:78:
de:37:64:2d:dd:35:14:81:20:88:77:d1:c0:df:3a:
bb:9c:b5:ce:85:4c:58:8e:8c:c2:78:35:bd:4d:2a:
72:b7:35:fb:0a:8a:bb:8f:a3:2a:8e:0e:a8:e0:bf:
db:db:ea:e0:d6:af:ca:db:39:8c:0b:d8:97:ef:1b:
96:92:28:f1:3b:45:dd:b6:77:6a:fd:73:b4:94:bb:
16:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:58:75:B9:AF:3E:C3:23:9F:C7:F6:FC:3A:65:8F:A4:FE:30:AB:58
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/w1h1ua8-wyOfx_b8OmWPpP4wq1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.192.0/20
176.241.64.0/21
178.20.184.0/21
185.51.212.0/22
185.193.176.0/22
IPv6:
2a01:1d0::/32
Signature Algorithm: sha256WithRSAEncryption
c5:76:e2:78:28:ab:99:f3:76:bc:ff:72:9a:89:0a:c8:24:7b:
d7:6c:d9:58:0f:64:40:12:b5:5e:96:cd:59:8b:16:eb:cc:1d:
6b:f7:60:50:eb:ed:64:dc:a2:ae:f1:75:e9:61:87:fd:7a:25:
42:69:0a:9e:69:7f:09:ab:19:32:0b:0d:bc:f5:1d:54:c3:43:
a7:55:6f:08:6c:00:a7:b9:38:79:5c:9b:01:06:a7:d4:5d:f4:
25:d8:fb:0b:cc:48:59:0c:9e:16:bc:57:77:9f:5b:4e:5c:96:
74:88:97:99:79:ce:68:7b:6d:54:54:ad:1e:60:4b:66:8c:90:
91:fd:87:2e:70:35:91:bd:5f:9e:f9:32:83:27:be:7b:39:63:
64:8a:19:9a:44:23:a8:ef:90:06:99:4d:cb:a3:e5:bf:c1:e2:
79:37:5b:68:33:f5:bb:90:7b:60:59:25:6d:c8:d1:20:3d:94:
fa:f5:d2:ca:2f:4c:d2:a5:b5:6b:41:eb:39:00:09:b6:c2:45:
2e:c9:6a:f5:4a:59:5c:23:28:a2:c8:e7:72:32:7d:d3:0f:dd:
5d:6f:7d:50:23:f6:f6:f9:bc:0a:10:c6:0d:be:c6:b0:0c:cc:
42:3e:37:38:99:6e:44:21:f1:a6:ca:9a:1e:99:77:62:cb:e3:
65:5c:2f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 13:02:35 2024 by rpki-client on console-fra.rpki-client.org