Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/WHPyl-eXYdb4saL2fKca7KBycms.roa
File: WHPyl-eXYdb4saL2fKca7KBycms.roa (raw, json)
Hash identifier: WodWGrZKVlRRoeoDCojOSC2auKU65Hjiu9EHEKS8KnQ=
Subject key identifier: 58:73:F2:97:E7:97:61:D6:F8:B1:A2:F6:7C:A7:1A:EC:A0:72:72:6B
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01867DD948A5CD6CA0A514711487531B1FCC
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/WHPyl-eXYdb4saL2fKca7KBycms.roa
Signing time: Thu 23 Feb 2023 10:37:17 +0000
ROA not before: Thu 23 Feb 2023 10:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206065
IP address blocks: 185.21.76.0/22 maxlen: 24
217.66.211.0/24 maxlen: 24
217.66.208.0/24 maxlen: 24
185.70.60.0/22 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.219.0/24 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 23
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 23
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
86.109.32.0/23 maxlen: 23
81.29.250.0/24 maxlen: 24
81.29.250.0/23 maxlen: 23
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
188.75.122.0/23 maxlen: 23
86.109.41.0/24 maxlen: 24
185.142.233.0/24 maxlen: 24
86.109.56.0/23 maxlen: 23
79.132.213.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.190.20.0/22 maxlen: 24
78.158.182.0/23 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
87.247.180.0/23 maxlen: 24
176.221.65.0/24 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.124.0/23 maxlen: 23
80.71.122.0/23 maxlen: 23
80.71.127.0/24 maxlen: 24
37.114.244.0/22 maxlen: 24
185.12.62.0/24 maxlen: 24
188.136.220.0/23 maxlen: 23
37.114.252.0/24 maxlen: 24
37.114.248.0/21 maxlen: 24
37.114.253.0/24 maxlen: 24
37.114.254.0/24 maxlen: 24
185.104.228.0/24 maxlen: 24
37.114.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Mar 2023 14:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:d9:48:a5:cd:6c:a0:a5:14:71:14:87:53:1b:1f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Feb 23 10:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5873f297e79761d6f8b1a2f67ca71aeca072726b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:93:da:61:a4:de:11:2f:04:fd:36:30:9f:
9b:c7:df:65:b1:f4:c9:3c:9a:1e:db:35:05:ed:f4:
bc:f2:e9:cc:13:da:83:2f:15:5a:69:df:01:ae:ad:
92:84:52:b7:29:92:6b:d0:f9:fb:44:b6:59:9c:0a:
25:24:ec:c0:f5:dc:2a:f8:a3:cf:5c:33:24:8d:e1:
50:d2:ad:c1:4b:bb:60:5f:22:af:ad:9e:6b:02:67:
56:83:db:63:60:2d:84:ff:85:03:d2:27:1d:7e:42:
6b:41:81:d7:c0:bf:47:0a:60:bb:c4:c9:41:db:9f:
f7:ed:bd:89:bc:e3:77:b3:58:4b:5d:8a:8a:f0:27:
d3:30:bd:ff:52:b7:48:ef:01:5f:50:b8:08:1f:6f:
77:b0:48:28:63:fd:cd:88:92:d3:f8:4e:b7:3e:c6:
85:79:34:25:36:d2:b7:d3:0b:79:e3:79:85:81:09:
1b:67:be:46:b1:28:70:d3:ec:3f:03:c2:2a:a0:80:
b5:3e:2d:0c:37:2d:63:fd:bc:31:34:27:73:6e:8e:
3c:d4:85:85:ec:fa:14:b5:a6:2e:23:d1:4b:5b:05:
c1:8f:16:75:e7:d1:2e:b5:c4:ac:52:c6:8e:1c:a6:
a4:8e:f4:d8:5d:08:a5:a5:a2:fa:19:a1:08:83:8a:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:73:F2:97:E7:97:61:D6:F8:B1:A2:F6:7C:A7:1A:EC:A0:72:72:6B
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/WHPyl-eXYdb4saL2fKca7KBycms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.244.0-37.114.255.255
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
78.158.182.0/23
79.132.213.0/24
79.132.217.0/24
79.132.219.0/24
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
86.109.32.0/23
86.109.41.0/24
86.109.56.0/23
87.247.180.0/23
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.70.60.0/22
185.104.228.0/24
185.142.233.0-185.142.235.255
185.190.20.0/22
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.107.0/24
188.75.110.0/23
188.75.122.0/23
188.136.220.0/23
217.66.208.0/24
217.66.211.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b1:1d:d4:84:75:b1:a8:ad:2c:c5:2e:b3:28:df:ef:36:a2:
20:a6:3b:a2:2e:de:09:c2:8e:ff:37:63:cd:66:10:74:83:f4:
d3:c9:65:b4:2d:95:fd:87:c6:46:aa:d7:e3:55:4d:5c:23:6f:
d4:78:68:0f:0e:c8:4f:fa:1a:31:d4:07:c9:6d:9b:c3:9c:ba:
3c:91:10:4e:1b:f6:69:24:d4:49:ce:9b:25:31:f7:5e:5a:4b:
99:9c:31:3e:60:9b:4f:25:65:b1:03:24:85:b9:6b:2a:f8:e5:
f0:86:00:88:93:8f:cf:7e:e3:3d:cc:53:bd:3c:dc:69:c6:46:
e2:e9:60:12:ac:40:9e:b9:83:a3:45:1b:d8:2b:ae:56:c6:b8:
70:67:a5:de:8e:a5:dd:92:6f:6f:21:c5:82:3e:4a:c3:07:1c:
bd:be:c3:ee:18:c5:11:d6:2e:cb:e6:3c:f5:b5:01:5a:e9:23:
cf:eb:3b:a8:cd:ee:14:89:55:f5:99:77:0f:10:07:cc:7a:01:
61:da:fb:52:f8:c7:58:38:63:6e:5d:43:a1:22:ed:8c:7e:e2:
d9:bb:dc:98:b7:fe:15:18:2a:a2:86:d6:78:12:5a:e4:34:06:
ee:2f:8f:9e:68:2c:8d:61:d2:b4:18:cc:dc:95:9c:af:04:85:
91:3e:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org