Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wrdT7yVPnt224ICJB1vS3rIIezo.roa
File: wrdT7yVPnt224ICJB1vS3rIIezo.roa (raw, json)
Hash identifier: 8Oy/OWcIV4S5S6kBeMO1n2npGUvg/tbmJkZjRiBsfe0=
Subject key identifier: C2:B7:53:EF:25:4F:9E:DD:B6:E0:80:89:07:5B:D2:DE:B2:08:7B:3A
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0188B694795AE8FAD0F8571B7A8A46CCAA1F
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wrdT7yVPnt224ICJB1vS3rIIezo.roa
Signing time: Tue 13 Jun 2023 21:06:03 +0000
ROA not before: Tue 13 Jun 2023 21:06:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
45.89.67.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
185.105.119.0/24 maxlen: 24
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.205.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.200.0/23 maxlen: 23
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9300:d0::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Jun 2023 10:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:94:79:5a:e8:fa:d0:f8:57:1b:7a:8a:46:cc:aa:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 13 21:06:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2b753ef254f9eddb6e08089075bd2deb2087b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:73:b7:fa:42:92:d1:83:aa:65:a8:ad:22:
d7:fb:17:82:48:e9:80:9d:57:ca:a9:27:54:c2:84:
6d:27:be:5b:03:1f:b0:cb:34:c9:b0:ee:d8:0d:41:
d1:13:c6:1c:f4:20:e4:77:1a:31:43:6c:89:f0:bd:
ae:c6:23:5a:94:27:6a:50:17:e5:7c:c0:43:c1:4c:
d8:c0:10:bd:e7:3a:80:60:e5:f6:47:aa:41:24:36:
e2:c4:80:7f:74:90:87:bc:c7:58:5a:89:4b:5b:d8:
0e:c2:37:43:1c:e1:35:69:8d:43:d7:e4:6d:0a:f3:
c6:86:57:16:7d:3f:85:1d:cb:bd:59:d1:83:c0:fa:
15:c7:ac:aa:7f:64:e7:37:03:22:5c:51:b6:a3:0e:
dd:19:7d:55:38:bc:79:27:99:0d:98:f1:b7:b3:99:
ea:c3:5e:41:3a:99:fa:48:04:ed:a5:bb:3f:62:06:
2e:db:f5:0d:82:dd:0c:ac:3a:58:d5:92:c9:9f:19:
4b:a2:c7:09:79:e3:01:06:f9:a0:6f:d1:6b:1c:76:
b0:3e:7e:70:ea:d8:bc:57:4b:ed:f5:a9:4d:47:b8:
66:1e:4c:af:26:60:af:ed:a0:b1:90:48:b7:bc:bd:
ca:81:d7:6d:9c:f8:75:31:1c:4d:d2:ab:1c:87:68:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B7:53:EF:25:4F:9E:DD:B6:E0:80:89:07:5B:D2:DE:B2:08:7B:3A
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wrdT7yVPnt224ICJB1vS3rIIezo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.105.119.0/24
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.109.85.0/24
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
37:f1:40:cc:1b:44:5c:18:b0:e0:08:39:fa:44:7a:da:df:df:
0d:b5:f8:b6:c9:0b:7e:97:ce:1b:a2:7b:fc:9a:c9:bc:57:a0:
41:8c:a5:18:d2:df:09:55:2b:1f:66:05:74:c8:06:4e:3e:af:
38:e5:b4:5e:8e:49:14:84:b0:4f:0b:00:4a:9d:89:cb:9b:5f:
29:e1:a2:f0:f4:e5:7a:83:d0:89:d1:d5:54:75:0f:e3:84:75:
c0:7e:ad:e9:80:2b:f1:64:64:f6:9c:71:00:eb:25:8d:39:cc:
fe:a1:28:d1:e9:89:64:70:26:83:c2:98:6b:33:96:37:74:90:
f3:07:7f:3e:06:cc:e4:e1:bb:b6:3f:11:95:52:00:55:5a:75:
c3:15:c5:52:92:c1:96:2b:05:f2:dd:31:95:3c:a9:b4:c3:fb:
9a:0b:ae:36:79:ac:13:21:59:60:b3:d3:fc:01:22:c9:f9:06:
a4:da:a2:00:c3:f3:60:89:62:81:b7:6b:c8:0b:a4:33:f4:b4:
9f:da:88:3d:91:dc:20:76:bb:88:06:4b:7f:8f:10:c3:21:39:
8f:d0:85:3a:6b:35:75:3c:b9:f0:80:51:1d:db:f3:56:a5:7e:
5c:f4:b2:ed:ca:2d:c4:72:ea:9c:d9:df:58:db:4a:e1:27:e9:
38:07:d0:c4
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgISAYi2lHla6PrQ+FcbeopGzKofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwNjEzMjEwNjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmI3NTNlZjI1NGY5ZWRkYjZlMDgwODkwNzViZDJkZWIyMDg3YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJhzt/pCktGDqmWorSLX+xeCSOmA
nVfKqSdUwoRtJ75bAx+wyzTJsO7YDUHRE8Yc9CDkdxoxQ2yJ8L2uxiNalCdqUBfl
fMBDwUzYwBC95zqAYOX2R6pBJDbixIB/dJCHvMdYWolLW9gOwjdDHOE1aY1D1+Rt
CvPGhlcWfT+FHcu9WdGDwPoVx6yqf2TnNwMiXFG2ow7dGX1VOLx5J5kNmPG3s5nq
w15BOpn6SATtpbs/YgYu2/UNgt0MrDpY1ZLJnxlLoscJeeMBBvmgb9FrHHawPn5w
6ti8V0vt9alNR7hmHkyvJmCv7aCxkEi3vL3KgddtnPh1MRxN0qsch2jVzQIDAQAB
o4ICrTCCAqkwHQYDVR0OBBYEFMK3U+8lT57dtuCAiQdb0t6yCHs6MB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvd3JkVDd5VlBudDIyNElDSkIxdlMzcklJZXpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHCBggrBgEFBQcBBwEB/wSBsjCBrzBmBAIAATBgAwQBLVlC
AwQCLYCwAwQAW9lQAwQDXo6IAwQCuQX4AwQCuTrMAwQCuVcwAwQBuWl0AwQAuWl3
AwQCuXWYAwQCuX3YAwQCuX3kAwQAwW1VAwQEwXywAwQFwkPAAwQAwy/6MEUEAgAC
MD8DBwAqCpMAAAADBwAqCpMAAAIwEgMHBCoKkwAA0AMHACoKkwAA0jAQAwUAKgqT
AQMHACoKkwEAAgMFACoKkwIwDQYJKoZIhvcNAQELBQADggEBADfxQMwbRFwYsOAI
OfpEetrf3w21+LbJC36Xzhuie/yaybxXoEGMpRjS3wlVKx9mBXTIBk4+rzjltF6O
SRSEsE8LAEqdicubXynhovD05XqD0InR1VR1D+OEdcB+remAK/FkZPaccQDrJY05
zP6hKNHpiWRwJoPCmGszljd0kPMHfz4GzOThu7Y/EZVSAFVadcMVxVKSwZYrBfLd
MZU8qbTD+5oLrjZ5rBMhWWCz0/wBIsn5BqTaogDD82CJYoG3a8gLpDP0tJ/aiD2R
3CB2u4gGS3+PEMMhOY/QhTprNXU8ufCAUR3b81alflz0su3KLcRy6pzZ31jbSuEn
6TgH0MQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org