Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Woxko4CGsaNvpGh7nK4yhnzAVgk.roa
File: Woxko4CGsaNvpGh7nK4yhnzAVgk.roa (raw, json)
Hash identifier: Iymu3UR+w6k4SPAOu4VSkK24JVPpDwS4LfRT4i/eT8g=
Subject key identifier: 5A:8C:64:A3:80:86:B1:A3:6F:A4:68:7B:9C:AE:32:86:7C:C0:56:09
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192E852A149AE318AA6E8705B7794E62C89
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Woxko4CGsaNvpGh7nK4yhnzAVgk.roa
Signing time: Fri 01 Nov 2024 15:23:02 +0000
ROA not before: Fri 01 Nov 2024 15:23:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
89.213.238.0/24 maxlen: 24
89.213.249.0/24 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 22:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e8:52:a1:49:ae:31:8a:a6:e8:70:5b:77:94:e6:2c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 1 15:23:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a8c64a38086b1a36fa4687b9cae32867cc05609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:0a:5f:67:9d:6d:6f:aa:f2:43:7a:13:2c:
67:67:db:5d:71:57:ff:7c:0e:a3:0f:83:fa:28:8f:
23:71:65:e5:63:e2:76:dc:2f:54:9e:99:41:7b:e6:
06:82:b6:9d:3e:d5:26:f6:40:77:e8:33:98:06:84:
c6:8c:26:d3:84:8b:5b:85:6d:22:5b:04:a1:3c:c9:
c4:38:3d:bb:e9:0c:1e:da:ac:06:98:93:da:b3:0a:
73:fd:b0:e1:01:41:f5:b6:fd:26:a4:86:08:fb:98:
74:92:82:47:05:74:2d:45:55:d9:b3:15:dd:cf:40:
3b:e8:3a:64:86:36:23:ab:c3:e6:d3:cc:1f:fa:fc:
f2:19:87:a2:74:e7:e1:18:99:27:ff:c1:0e:57:ba:
02:14:58:b9:e9:8a:9a:81:09:c2:7a:c1:24:be:4e:
81:fa:ec:26:e2:07:d2:98:1c:55:98:31:cb:1c:df:
d5:83:cd:3f:70:42:a3:cc:b5:ff:c6:ae:34:e3:03:
30:c4:55:35:9d:7e:db:9b:42:3c:ae:f4:2f:35:ca:
5f:19:67:c5:a6:ca:13:a3:16:e2:96:74:8a:b3:31:
72:4a:9d:34:bd:d1:7f:76:53:34:bb:12:77:9e:99:
ed:98:5f:57:ae:68:04:b0:3b:82:a1:09:bf:5b:b1:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8C:64:A3:80:86:B1:A3:6F:A4:68:7B:9C:AE:32:86:7C:C0:56:09
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Woxko4CGsaNvpGh7nK4yhnzAVgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
89.213.249.0/24
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
53:c5:49:68:0f:d5:b5:05:f4:6c:96:27:85:56:e2:ca:74:1a:
42:10:26:05:a4:ec:44:5f:4e:94:37:c6:08:a2:19:4e:ad:d6:
6f:8b:5a:91:dc:cd:90:10:02:92:f2:1d:17:58:3c:3a:10:6d:
a3:86:1c:25:ce:22:34:33:22:52:1c:1e:0f:54:87:0c:5f:9b:
12:61:0d:d7:21:41:83:41:ff:73:c3:6e:24:c4:5e:31:0e:fe:
82:77:cb:c8:9d:61:7c:a7:26:43:cc:6e:94:34:5f:5a:4b:61:
0e:b6:e5:77:34:8d:17:ef:8d:78:6e:fa:6b:1b:d7:01:e0:a3:
cf:15:d4:49:38:3b:56:b3:85:37:84:8c:a5:cc:7d:cf:47:c9:
4c:29:31:f6:be:0c:e0:29:18:8a:3b:dd:a0:b5:1d:f5:e0:c0:
31:b5:c2:94:71:bc:26:eb:51:99:8e:e3:70:b1:7a:db:d0:fc:
97:96:90:58:bc:6e:b6:33:a8:1b:38:fb:e8:92:57:02:dd:8a:
f7:c7:c9:4f:28:28:1c:aa:b9:ec:b2:24:d9:a4:08:18:b1:81:
b8:3f:0b:16:31:7b:cf:1c:aa:a0:df:b9:bf:6a:05:a0:83:1e:
ef:91:8a:71:d4:fc:69:91:21:58:44:99:e4:e3:b2:c7:55:f5:
91:7d:48:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:08:31 2025 by rpki-client