Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WHKWFi9dGpxKfD2JvdzrUk4ZtMA.roa
File: WHKWFi9dGpxKfD2JvdzrUk4ZtMA.roa (raw, json)
Hash identifier: MtHGuY5lT7ssZp6SkvIFHlW8jg3JW53Xh3skFj2fdFk=
Subject key identifier: 58:72:96:16:2F:5D:1A:9C:4A:7C:3D:89:BD:DC:EB:52:4E:19:B4:C0
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018BD3A574C0A6D3979692A1A4E851347D11
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WHKWFi9dGpxKfD2JvdzrUk4ZtMA.roa
Signing time: Wed 15 Nov 2023 15:41:57 +0000
ROA not before: Wed 15 Nov 2023 15:41:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5483
IP address blocks: 195.228.112.0/24 maxlen: 24
195.228.135.0/24 maxlen: 24
195.228.152.0/24 maxlen: 24
195.228.156.0/24 maxlen: 24
195.228.155.0/24 maxlen: 24
62.201.64.0/18 maxlen: 18
195.228.76.0/24 maxlen: 24
195.228.75.0/24 maxlen: 24
91.120.128.0/18 maxlen: 18
46.107.0.0/16 maxlen: 16
46.107.14.0/24 maxlen: 24
46.107.15.0/24 maxlen: 24
195.228.85.0/24 maxlen: 24
188.6.0.0/16 maxlen: 16
195.228.87.0/24 maxlen: 24
195.228.86.0/24 maxlen: 24
195.228.224.0/23 maxlen: 23
195.228.240.0/24 maxlen: 24
195.228.245.0/24 maxlen: 24
195.228.244.0/24 maxlen: 24
195.228.253.0/24 maxlen: 24
195.228.250.0/24 maxlen: 24
195.228.251.0/24 maxlen: 24
195.228.248.0/24 maxlen: 24
195.228.249.0/24 maxlen: 24
195.228.247.0/24 maxlen: 24
195.228.255.0/24 maxlen: 24
195.228.254.0/24 maxlen: 24
91.120.57.0/24 maxlen: 24
195.228.4.0/24 maxlen: 24
195.228.0.0/16 maxlen: 16
91.120.64.0/18 maxlen: 18
134.255.0.0/17 maxlen: 17
195.228.24.0/24 maxlen: 24
195.228.34.0/24 maxlen: 24
195.228.45.0/24 maxlen: 24
91.120.0.0/16 maxlen: 16
91.120.16.0/22 maxlen: 22
91.120.27.0/24 maxlen: 24
5.187.128.0/17 maxlen: 17
86.59.128.0/17 maxlen: 17
31.46.0.0/16 maxlen: 16
31.46.19.0/24 maxlen: 24
78.92.0.0/16 maxlen: 16
212.51.110.0/24 maxlen: 24
46.139.0.0/16 maxlen: 16
212.51.125.0/24 maxlen: 24
185.65.8.0/22 maxlen: 22
149.200.0.0/17 maxlen: 17
194.38.96.0/24 maxlen: 24
194.38.96.0/19 maxlen: 19
194.38.104.0/24 maxlen: 24
217.65.96.0/19 maxlen: 19
217.65.96.0/23 maxlen: 23
5.38.128.0/17 maxlen: 17
212.51.64.0/18 maxlen: 18
212.51.79.0/24 maxlen: 24
212.51.91.0/24 maxlen: 24
195.70.32.0/19 maxlen: 19
84.2.226.0/23 maxlen: 24
84.2.230.0/24 maxlen: 24
84.2.231.0/24 maxlen: 24
84.2.228.0/24 maxlen: 24
84.2.227.0/24 maxlen: 24
213.178.96.0/19 maxlen: 19
188.36.248.0/24 maxlen: 24
37.76.0.0/17 maxlen: 17
84.1.236.0/24 maxlen: 24
93.89.160.0/20 maxlen: 20
84.2.24.0/24 maxlen: 24
194.176.224.0/19 maxlen: 19
84.1.226.0/24 maxlen: 24
84.2.79.0/24 maxlen: 24
188.36.0.0/16 maxlen: 16
195.56.0.0/24 maxlen: 24
84.2.35.0/24 maxlen: 24
195.56.0.0/16 maxlen: 16
84.2.39.0/24 maxlen: 24
84.2.42.0/23 maxlen: 24
84.2.51.0/24 maxlen: 24
84.2.50.0/24 maxlen: 24
84.2.52.0/24 maxlen: 24
84.2.54.0/24 maxlen: 24
145.236.230.0/24 maxlen: 24
188.156.0.0/15 maxlen: 15
185.55.12.0/22 maxlen: 22
194.149.36.0/24 maxlen: 24
194.149.32.0/19 maxlen: 19
217.116.32.0/20 maxlen: 20
84.1.102.0/24 maxlen: 24
145.236.0.0/16 maxlen: 16
217.20.128.0/20 maxlen: 20
80.249.160.0/20 maxlen: 24
80.249.164.0/24 maxlen: 24
87.101.112.0/20 maxlen: 20
80.249.171.0/24 maxlen: 24
80.249.172.0/24 maxlen: 24
80.249.170.0/24 maxlen: 24
80.249.168.0/24 maxlen: 24
80.249.167.0/24 maxlen: 24
46.107.224.0/24 maxlen: 24
84.0.0.0/14 maxlen: 14
81.182.0.0/15 maxlen: 15
79.122.0.0/17 maxlen: 17
194.149.0.0/19 maxlen: 19
80.249.173.0/24 maxlen: 24
80.249.174.0/24 maxlen: 24
194.88.32.0/19 maxlen: 19
94.27.128.0/17 maxlen: 17
145.236.90.0/24 maxlen: 24
2001:4c48::/29 maxlen: 29
2a00:10d0::/32 maxlen: 32
2a02:738::/32 maxlen: 32
2001:4c48::/46 maxlen: 48
2001:4c48::/32 maxlen: 32
2001:4c48::/30 maxlen: 30
2001:4c4c::/30 maxlen: 30
2a00:1110::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:a5:74:c0:a6:d3:97:96:92:a1:a4:e8:51:34:7d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Nov 15 15:41:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=587296162f5d1a9c4a7c3d89bddceb524e19b4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:3c:7b:73:fc:3a:11:2d:a6:ad:c9:8e:70:
4a:0b:3e:e5:02:de:87:e9:31:31:b5:9f:12:ae:3e:
c8:89:ea:e2:d3:04:1c:4a:e1:1c:70:ca:70:7a:88:
4d:0d:d9:d7:44:46:ba:ab:01:79:4b:18:30:0d:32:
16:bc:fd:bb:de:01:9d:68:7b:29:90:27:ed:a9:4f:
b2:a6:59:d2:43:5b:7c:0d:a0:20:9a:71:0b:39:e9:
3e:04:6f:14:1f:75:46:0b:fa:6f:48:c9:b3:f6:ba:
4e:48:69:ee:77:2a:b0:88:63:94:75:77:9e:c7:8a:
76:0b:d6:82:9e:94:d3:ac:2c:bd:1f:dd:3b:82:7d:
27:19:9d:67:4a:34:96:0a:25:aa:73:31:d1:2f:79:
c8:cc:60:16:6f:15:68:92:4d:23:66:44:89:de:60:
3d:08:a0:72:93:ed:34:5c:8c:1c:db:b0:46:8b:5b:
b8:60:73:62:7b:79:af:9c:0c:84:b0:3d:02:23:c1:
f5:59:c6:4e:67:7d:ff:77:06:52:06:86:18:2b:f8:
86:7c:1e:8c:a1:7f:c8:29:52:57:51:18:4a:d7:45:
97:17:2e:59:47:b6:42:f8:a2:e7:7d:bd:43:10:e7:
1c:14:9a:c8:85:01:ec:a9:75:0e:e6:d3:a9:5c:0c:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:72:96:16:2F:5D:1A:9C:4A:7C:3D:89:BD:DC:EB:52:4E:19:B4:C0
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WHKWFi9dGpxKfD2JvdzrUk4ZtMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.38.128.0/17
5.187.128.0/17
31.46.0.0/16
37.76.0.0/17
46.107.0.0/16
46.139.0.0/16
62.201.64.0/18
78.92.0.0/16
79.122.0.0/17
80.249.160.0/20
81.182.0.0/15
84.0.0.0/14
86.59.128.0/17
87.101.112.0/20
91.120.0.0/16
93.89.160.0/20
94.27.128.0/17
134.255.0.0/17
145.236.0.0/16
149.200.0.0/17
185.55.12.0/22
185.65.8.0/22
188.6.0.0/16
188.36.0.0/16
188.156.0.0/15
194.38.96.0/19
194.88.32.0/19
194.149.0.0/18
194.176.224.0/19
195.56.0.0/16
195.70.32.0/19
195.228.0.0/16
212.51.64.0/18
213.178.96.0/19
217.20.128.0/20
217.65.96.0/19
217.116.32.0/20
IPv6:
2001:4c48::/29
2a00:10d0::/32
2a00:1110::/29
2a02:738::/32
Signature Algorithm: sha256WithRSAEncryption
30:d8:c1:35:28:4d:a3:46:c9:55:9a:fb:5a:33:6b:96:76:e3:
c4:01:7e:e8:76:c1:f7:ab:4a:06:68:46:9d:dd:d2:9d:ce:c0:
39:df:99:d6:27:76:99:cb:71:8c:3c:65:ee:fd:d9:73:20:88:
d4:23:1e:02:04:88:8d:5f:9c:d9:c1:9f:a5:8e:67:a5:35:30:
91:4b:4c:36:dc:18:57:63:23:3c:60:c0:db:22:85:cf:ab:5a:
94:95:c8:13:56:05:a6:17:4a:91:de:4a:ce:8f:9d:ea:0b:46:
43:cf:6d:ec:3b:e1:9b:ed:82:c4:5b:87:ae:72:64:38:62:07:
86:e4:6e:66:27:4c:42:b7:c0:51:1a:f1:01:76:8d:43:0c:9f:
a8:66:5c:c4:72:95:67:4c:93:af:39:f5:ec:2b:08:51:a8:c7:
41:14:53:c1:41:26:70:b3:a9:81:5d:9b:b4:2a:0a:b1:d5:42:
3c:49:cd:a2:78:67:59:a4:27:59:29:ef:c3:b9:55:49:67:bd:
45:a5:f1:78:39:b0:73:04:0a:70:1b:e2:d9:50:b8:dc:65:62:
77:36:fc:5e:84:e3:9a:7d:63:36:f6:26:6c:ca:5c:87:21:49:
37:9b:52:e0:91:a4:ce:7c:35:94:a9:37:a9:8f:ed:d8:5a:86:
8c:e8:7d:ab
-----BEGIN CERTIFICATE-----
MIIF8zCCBNugAwIBAgISAYvTpXTAptOXlpKhpOhRNH0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjMxMTE1MTU0MTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODcyOTYxNjJmNWQxYTljNGE3YzNkODliZGRjZWI1MjRlMTliNGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyE8e3P8OhEtpq3JjnBKCz7lAt6H
6TExtZ8Srj7Iieri0wQcSuEccMpweohNDdnXREa6qwF5SxgwDTIWvP273gGdaHsp
kCftqU+yplnSQ1t8DaAgmnELOek+BG8UH3VGC/pvSMmz9rpOSGnudyqwiGOUdXee
x4p2C9aCnpTTrCy9H907gn0nGZ1nSjSWCiWqczHRL3nIzGAWbxVokk0jZkSJ3mA9
CKByk+00XIwc27BGi1u4YHNie3mvnAyEsD0CI8H1WcZOZ33/dwZSBoYYK/iGfB6M
oX/IKVJXURhK10WXFy5ZR7ZC+KLnfb1DEOccFJrIhQHsqXUO5tOpXAwrUwIDAQAB
o4IC/zCCAvswHQYDVR0OBBYEFFhylhYvXRqcSnw9ib3c61JOGbTAMB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvV0hLV0ZpOWRHcHhLZkQySnZkenJVazRadE1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBEwYIKwYBBQUHAQcBAf8EggECMIH/MIHYBAIAATCB0QME
BwUmgAMEBwW7gAMDAB8uAwQHJUwAAwMALmsDAwAuiwMEBj7JQAMDAE5cAwQHT3oA
AwQEUPmgAwMBUbYDAwJUAAMEB1Y7gAMEBFdlcAMDAFt4AwQEXVmgAwQHXhuAAwQH
hv8AAwMAkewDBAeVyAADBAK5NwwDBAK5QQgDAwC8BgMDALwkAwMBvJwDBAXCJmAD
BAXCWCADBAbClQADBAXCsOADAwDDOAMEBcNGIAMDAMPkAwQG1DNAAwQF1bJgAwQE
2RSAAwQF2UFgAwQE2XQgMCIEAgACMBwDBQMgAUxIAwUAKgAQ0AMFAyoAERADBQAq
Agc4MA0GCSqGSIb3DQEBCwUAA4IBAQAw2ME1KE2jRslVmvtaM2uWduPEAX7odsH3
q0oGaEad3dKdzsA535nWJ3aZy3GMPGXu/dlzIIjUIx4CBIiNX5zZwZ+ljmelNTCR
S0w23BhXYyM8YMDbIoXPq1qUlcgTVgWmF0qR3krOj53qC0ZDz23sO+Gb7YLEW4eu
cmQ4YgeG5G5mJ0xCt8BRGvEBdo1DDJ+oZlzEcpVnTJOvOfXsKwhRqMdBFFPBQSZw
s6mBXZu0Kgqx1UI8Sc2ieGdZpCdZKe/DuVVJZ71FpfF4ObBzBApwG+LZULjcZWJ3
NvxehOOafWM29iZsylyHIUk3m1LgkaTOfDWUqTepj+3YWoaM6H2r
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org