Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wLZmJyN9DAJtBEn1TwcDAmDaVAw.roa
File: wLZmJyN9DAJtBEn1TwcDAmDaVAw.roa (raw, json)
Hash identifier: VRjLfVQ7Krmq1GPZKWkAYjM4g5FBf2CPN0xMTcsTQ9g=
Subject key identifier: C0:B6:66:27:23:7D:0C:02:6D:04:49:F5:4F:07:03:02:60:DA:54:0C
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0190FD9519B9093AA83B9DFA6D0FEF1B5EB4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wLZmJyN9DAJtBEn1TwcDAmDaVAw.roa
Signing time: Mon 29 Jul 2024 08:22:04 +0000
ROA not before: Mon 29 Jul 2024 08:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.204.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.228.0/22 maxlen: 22
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.186.0/24 maxlen: 24
193.124.187.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.190.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.193.0/24 maxlen: 24
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 01 Aug 2024 13:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:95:19:b9:09:3a:a8:3b:9d:fa:6d:0f:ef:1b:5e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 29 08:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0b66627237d0c026d0449f54f07030260da540c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:2f:4e:95:07:37:2d:78:cc:0b:bb:7d:d5:
f7:b1:98:41:5f:79:ed:50:07:d5:3d:9c:4e:91:a8:
91:4e:fe:34:0f:e3:44:a1:c7:01:a0:ac:60:ad:dd:
28:dc:3c:8f:dd:74:ae:bb:95:73:db:bf:1f:db:9f:
e7:34:32:97:68:a4:16:00:7e:28:00:5a:0f:6b:7c:
56:fa:bd:0c:d3:f4:e9:ff:63:61:e4:1f:70:8f:92:
c7:6f:a5:85:d9:37:fd:48:e2:36:88:ad:05:2e:ef:
98:be:84:a5:54:3b:4d:5e:95:35:ee:c7:9a:5c:ad:
f4:72:cc:0a:f3:ac:d8:a8:37:30:6a:40:09:e2:e9:
d6:33:02:42:e8:91:b0:d4:29:3a:9f:3b:35:01:f0:
3a:08:ed:a6:c9:b2:7e:c8:51:46:34:8f:dd:8d:64:
26:51:8f:a2:78:46:1f:9b:14:8b:29:da:ed:01:be:
e5:11:37:03:76:fe:07:f2:eb:6f:b9:a6:21:68:b8:
9e:93:8e:8e:43:1b:53:6f:0b:e4:d1:b0:65:f9:41:
92:33:17:2c:06:ce:4f:90:62:ad:66:72:19:d9:f6:
2e:c6:39:c9:66:e8:9c:3b:83:f2:0e:cd:ba:0f:b4:
98:24:cb:19:24:b6:14:90:03:38:86:d5:01:bb:6a:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B6:66:27:23:7D:0C:02:6D:04:49:F5:4F:07:03:02:60:DA:54:0C
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wLZmJyN9DAJtBEn1TwcDAmDaVAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
185.200.188.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
5d:ee:96:d7:54:7d:dc:57:1a:96:e0:be:48:df:80:73:55:a0:
6d:c9:13:18:6f:df:e7:4b:1b:82:8b:aa:57:fc:39:87:70:99:
43:61:dc:da:f4:24:a0:26:65:b0:cc:92:50:26:b2:67:99:86:
c9:39:47:ad:22:0f:22:68:84:55:a0:3f:c1:c5:93:bf:40:e1:
ec:a9:42:48:62:ff:84:20:b2:c2:4f:1a:5b:f5:a0:f5:5c:87:
ed:95:6a:7f:4a:d2:25:09:93:4d:4b:f6:69:e6:58:34:4c:6a:
34:48:ff:e1:b8:c3:50:05:74:df:92:ef:fb:a5:74:63:09:71:
e3:ac:a3:dd:d3:4f:76:54:b6:ba:97:cd:c9:14:8b:b0:aa:7d:
da:87:d8:01:0b:7f:00:51:f8:8c:c2:90:70:e0:90:c2:00:89:
7b:60:6c:53:aa:6d:76:ef:db:28:57:9c:4d:58:9a:9d:67:67:
35:07:d0:1a:34:92:d2:fe:8f:b6:a8:f2:6e:84:3d:07:19:a9:
c1:54:23:be:eb:87:4c:85:cc:4c:a2:46:f2:1c:d2:ee:8a:24:
c8:39:fe:b3:1f:76:93:08:53:12:2d:2b:9d:49:22:8a:1d:c9:
e4:67:f6:4d:8a:a1:59:4f:f4:3c:c7:4c:96:18:13:6a:14:dd:
51:2c:f7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 16:21:28 2024 by rpki-client on console-ams.rpki-client.org