Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/WPbS7wC7fp5ct98A238JZuGE3Mw.roa
File: WPbS7wC7fp5ct98A238JZuGE3Mw.roa (raw, json)
Hash identifier: trCvicEQjJXTUp5MmKHNeuio/QnGFEFw5fL034TORvE=
Subject key identifier: 58:F6:D2:EF:00:BB:7E:9E:5C:B7:DF:00:DB:7F:09:66:E1:84:DC:CC
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018C3E582B2DE19EBEB49581596B5FEDD144
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/WPbS7wC7fp5ct98A238JZuGE3Mw.roa
Signing time: Wed 06 Dec 2023 08:56:54 +0000
ROA not before: Wed 06 Dec 2023 08:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42910
IP address blocks: 188.132.135.0/24 maxlen: 32
188.132.134.0/24 maxlen: 24
188.132.142.0/24 maxlen: 24
188.132.147.0/24 maxlen: 32
188.132.148.0/24 maxlen: 24
188.132.158.0/24 maxlen: 32
188.132.157.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.214.0/24 maxlen: 24
188.132.217.0/24 maxlen: 32
188.132.218.0/24 maxlen: 24
188.132.226.0/24 maxlen: 32
188.132.225.0/24 maxlen: 24
188.132.227.0/24 maxlen: 32
188.132.231.0/24 maxlen: 24
188.132.228.0/24 maxlen: 32
188.132.230.0/24 maxlen: 32
77.92.130.0/24 maxlen: 24
77.92.129.0/24 maxlen: 24
77.92.128.0/24 maxlen: 24
77.92.132.0/24 maxlen: 24
188.132.239.0/24 maxlen: 24
77.92.131.0/24 maxlen: 24
188.132.234.0/24 maxlen: 32
77.92.133.0/24 maxlen: 32
188.132.241.0/24 maxlen: 24
77.92.137.0/24 maxlen: 24
77.92.136.0/24 maxlen: 24
188.132.243.0/24 maxlen: 24
188.132.244.0/24 maxlen: 32
77.92.135.0/24 maxlen: 24
77.92.134.0/24 maxlen: 24
77.92.139.0/24 maxlen: 24
77.92.138.0/24 maxlen: 24
188.132.246.0/24 maxlen: 24
188.132.245.0/24 maxlen: 24
188.132.251.0/24 maxlen: 24
188.132.250.0/24 maxlen: 24
77.92.141.0/24 maxlen: 24
188.132.253.0/24 maxlen: 24
188.132.252.0/24 maxlen: 24
77.92.140.0/24 maxlen: 32
77.92.149.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
188.132.255.0/24 maxlen: 24
188.132.254.0/24 maxlen: 24
77.92.158.0/24 maxlen: 24
77.92.156.0/24 maxlen: 24
77.92.155.0/24 maxlen: 32
77.92.159.0/24 maxlen: 24
77.92.157.0/24 maxlen: 32
188.132.172.0/24 maxlen: 24
188.132.175.0/24 maxlen: 24
188.132.176.0/24 maxlen: 32
188.132.177.0/24 maxlen: 24
188.132.180.0/24 maxlen: 24
188.132.194.0/24 maxlen: 24
188.132.204.0/24 maxlen: 32
188.132.205.0/24 maxlen: 32
188.132.211.0/24 maxlen: 32
188.132.208.0/24 maxlen: 32
188.132.213.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
212.68.57.0/24 maxlen: 32
212.68.56.0/24 maxlen: 32
212.68.61.0/24 maxlen: 32
31.210.33.0/24 maxlen: 24
31.210.32.0/24 maxlen: 24
31.210.35.0/24 maxlen: 24
31.210.44.0/24 maxlen: 24
31.210.40.0/24 maxlen: 32
31.210.47.0/24 maxlen: 24
31.210.46.0/24 maxlen: 24
31.210.45.0/24 maxlen: 32
31.210.58.0/24 maxlen: 24
31.210.57.0/24 maxlen: 24
31.210.56.0/24 maxlen: 24
31.210.60.0/24 maxlen: 24
31.210.59.0/24 maxlen: 24
31.210.61.0/24 maxlen: 32
78.135.108.0/24 maxlen: 32
78.135.113.0/24 maxlen: 32
78.135.116.0/24 maxlen: 24
78.135.115.0/24 maxlen: 24
78.135.114.0/24 maxlen: 32
212.68.33.0/24 maxlen: 32
212.68.41.0/24 maxlen: 32
212.68.40.0/24 maxlen: 32
212.68.43.0/24 maxlen: 32
212.68.44.0/24 maxlen: 24
212.68.42.0/24 maxlen: 32
212.68.45.0/24 maxlen: 32
212.68.46.0/24 maxlen: 32
212.68.50.0/24 maxlen: 32
212.68.51.0/24 maxlen: 24
78.135.79.0/24 maxlen: 24
2a02:26b0:8001::/48 maxlen: 48
2a02:26b0::/32 maxlen: 32
2a02:26b0:8000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:58:2b:2d:e1:9e:be:b4:95:81:59:6b:5f:ed:d1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Dec 6 08:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58f6d2ef00bb7e9e5cb7df00db7f0966e184dccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:e4:75:3f:70:81:ca:b6:4e:9b:48:88:ed:
b5:20:14:d9:22:1e:7f:a6:35:ae:a3:76:59:c9:4e:
07:44:cf:e1:aa:63:60:79:74:d1:31:12:ba:18:f9:
63:a1:b1:ab:15:dc:20:60:08:d7:f7:4c:ba:e3:5f:
5d:7c:25:e3:13:3a:fc:3c:bc:b7:db:67:69:61:67:
bb:c8:c4:02:2f:85:72:6b:b9:1c:e0:f0:74:24:43:
ca:0c:f4:e9:81:63:3a:6d:c8:06:b7:a0:66:34:0e:
c2:5a:d2:b8:cb:c2:c3:da:65:47:55:2a:27:8a:49:
c5:e0:84:7f:d4:b7:b4:a2:55:ab:ee:88:c3:62:40:
0f:a6:8f:5f:4a:39:20:67:68:58:18:bf:97:9a:d2:
57:8c:bd:9d:ad:26:c8:8c:cd:fd:27:49:ea:1a:ac:
d4:85:90:bc:76:4b:b8:74:57:f2:50:1b:47:7b:0a:
17:ca:38:02:4a:f0:fc:66:b6:27:f3:b6:12:32:76:
3b:86:88:f1:d5:99:4c:96:c0:2c:52:69:9f:6b:0b:
1b:08:96:43:f1:c7:8c:96:db:80:45:eb:c4:ba:ab:
c7:03:5a:ed:ee:b0:49:87:f4:d9:a6:9f:df:45:cd:
00:57:49:b8:ce:3c:33:e2:89:df:08:9b:df:02:6b:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F6:D2:EF:00:BB:7E:9E:5C:B7:DF:00:DB:7F:09:66:E1:84:DC:CC
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/WPbS7wC7fp5ct98A238JZuGE3Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.32.0/23
31.210.35.0/24
31.210.40.0/24
31.210.44.0/22
31.210.56.0-31.210.61.255
77.92.128.0-77.92.141.255
77.92.148.0/23
77.92.155.0-77.92.159.255
78.135.79.0/24
78.135.108.0/24
78.135.113.0-78.135.116.255
188.132.134.0/23
188.132.142.0/24
188.132.147.0-188.132.148.255
188.132.157.0-188.132.158.255
188.132.172.0/24
188.132.175.0-188.132.177.255
188.132.180.0/24
188.132.194.0/24
188.132.204.0/23
188.132.208.0/24
188.132.211.0-188.132.215.255
188.132.217.0-188.132.218.255
188.132.225.0-188.132.228.255
188.132.230.0/23
188.132.234.0/24
188.132.239.0/24
188.132.241.0/24
188.132.243.0-188.132.246.255
188.132.250.0-188.132.255.255
212.68.33.0/24
212.68.40.0-212.68.46.255
212.68.50.0/23
212.68.56.0/23
212.68.61.0/24
IPv6:
2a02:26b0::/32
Signature Algorithm: sha256WithRSAEncryption
c6:e0:53:de:25:27:68:e2:49:d4:4d:82:4e:4f:6a:fa:df:68:
8f:4e:6b:df:b3:b8:8b:65:07:d8:f6:9f:66:77:56:ce:5a:5c:
db:31:26:91:26:9b:28:5d:49:7f:47:1e:92:c9:4d:9f:64:6d:
55:fa:14:73:bc:e9:fb:14:44:a8:c4:2a:5e:d9:32:44:6c:ea:
46:29:e4:2a:41:eb:55:f8:57:62:b7:33:6a:89:6a:a4:fa:ac:
29:1d:76:f3:f5:c8:67:0c:58:ce:92:dc:ab:1c:2f:56:f2:07:
5a:03:bf:db:a4:f6:d2:67:d5:60:42:c0:62:e9:b5:23:3e:11:
8e:1d:a3:80:fa:83:4f:47:2a:2b:0e:36:a6:34:f0:d4:5d:7a:
64:e3:be:17:84:d2:67:a0:95:07:66:c0:93:bf:eb:ba:ab:da:
88:7f:d9:b8:21:c8:3c:68:2a:a3:23:a1:54:08:7f:9b:20:da:
82:ff:84:b4:ea:d2:6a:69:df:ba:7f:92:56:6e:0a:4c:82:67:
a8:11:ca:f8:6d:e3:49:15:d5:f2:b6:ab:c7:6b:39:74:f8:ab:
5f:62:95:c3:e0:a7:ff:77:2d:79:fd:be:14:25:9d:ac:2d:1d:
9e:69:1d:8b:dc:30:7d:eb:08:67:30:43:fc:fa:a2:6a:a1:6a:
9b:c0:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 12:26:07 2023 by rpki-client on console-ams.rpki-client.org