Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/_nnWECJHqjyApNdObSZkvqDLA-w.roa
File: _nnWECJHqjyApNdObSZkvqDLA-w.roa (raw, json)
Hash identifier: QDu5hxbyY1giiaDJzP5L3NkiU2mvluGXGJ+kNMz2pf4=
Subject key identifier: FE:79:D6:10:22:47:AA:3C:80:A4:D7:4E:6D:26:64:BE:A0:CB:03:EC
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 0192B8C515F38C860964CFBFD500B639C78B
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/_nnWECJHqjyApNdObSZkvqDLA-w.roa
Signing time: Wed 23 Oct 2024 09:46:16 +0000
ROA not before: Wed 23 Oct 2024 09:46:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43915
IP address blocks: 5.181.104.0/22 maxlen: 22
45.66.36.0/22 maxlen: 22
62.169.148.0/23 maxlen: 23
79.135.122.0/23 maxlen: 24
87.117.64.0/22 maxlen: 22
87.117.68.0/23 maxlen: 23
91.239.57.0/24 maxlen: 24
94.154.184.0/22 maxlen: 24
109.224.216.0/22 maxlen: 22
109.224.224.0/22 maxlen: 24
109.224.224.0/23 maxlen: 23
109.224.226.0/23 maxlen: 24
109.224.234.0/23 maxlen: 24
109.224.236.0/22 maxlen: 22
109.224.240.0/23 maxlen: 24
144.178.104.0/23 maxlen: 23
144.178.118.0/23 maxlen: 23
144.178.252.0/23 maxlen: 23
147.189.156.0/22 maxlen: 24
147.189.214.0/24 maxlen: 24
176.116.116.0/22 maxlen: 22
178.248.128.0/21 maxlen: 21
185.23.254.0/23 maxlen: 24
185.147.184.0/22 maxlen: 22
185.161.4.0/22 maxlen: 22
185.231.136.0/21 maxlen: 21
193.35.146.0/23 maxlen: 23
194.105.134.0/23 maxlen: 24
194.145.242.0/23 maxlen: 24
194.146.160.0/22 maxlen: 24
195.184.250.0/23 maxlen: 23
195.206.172.0/22 maxlen: 24
212.59.72.0/21 maxlen: 24
212.108.90.0/23 maxlen: 23
213.225.224.0/22 maxlen: 24
217.14.184.0/21 maxlen: 21
217.20.244.0/22 maxlen: 24
2a07:5940::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 25 Oct 2024 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:c5:15:f3:8c:86:09:64:cf:bf:d5:00:b6:39:c7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Oct 23 09:46:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe79d6102247aa3c80a4d74e6d2664bea0cb03ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3d:c6:ea:6e:f2:5f:25:d8:b3:18:6b:4b:5f:
4f:5a:00:48:ef:69:32:91:9a:91:24:2b:df:94:bc:
5f:ae:8a:01:07:06:8b:e4:64:47:81:7e:ac:77:f7:
0a:dc:ee:9f:ce:ad:9d:65:99:6a:8a:28:5e:0b:24:
f8:e1:a0:43:11:63:0b:6e:c7:97:4a:c2:9e:39:44:
ac:41:b4:bd:3b:f0:49:d5:ca:cb:39:8a:89:6f:83:
f6:d3:5f:9a:d0:43:f9:66:00:66:56:6e:e6:53:e3:
25:56:d0:60:7a:c2:98:a7:c9:fe:9a:f9:49:bf:7c:
7b:d9:22:23:d1:de:6f:80:4d:ad:17:0b:7a:b5:eb:
3b:53:2c:30:dc:eb:e4:e5:fc:16:f4:03:b6:8d:c0:
e8:0f:02:29:25:89:a7:f6:34:68:b9:ce:ab:ae:88:
a2:cc:bd:be:d9:a8:c8:26:f5:4f:03:23:28:5e:0f:
e5:75:64:c0:62:6a:9c:db:44:e6:de:b1:30:f6:82:
f9:7e:b8:1e:f3:5a:2e:1e:b8:5e:29:56:92:3b:67:
e8:79:5e:2b:9a:fc:88:78:14:d4:b3:a2:16:3e:d0:
22:fe:ad:e9:6e:b8:2a:de:91:59:62:c1:43:bc:0e:
f4:42:82:10:f7:77:25:15:63:f1:99:c8:2b:22:4d:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:79:D6:10:22:47:AA:3C:80:A4:D7:4E:6D:26:64:BE:A0:CB:03:EC
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/_nnWECJHqjyApNdObSZkvqDLA-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.104.0/22
45.66.36.0/22
62.169.148.0/23
79.135.122.0/23
87.117.64.0-87.117.69.255
91.239.57.0/24
94.154.184.0/22
109.224.216.0/22
109.224.224.0/22
109.224.234.0-109.224.241.255
144.178.104.0/23
144.178.118.0/23
144.178.252.0/23
147.189.156.0/22
147.189.214.0/24
176.116.116.0/22
178.248.128.0/21
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
185.231.136.0/21
193.35.146.0/23
194.105.134.0/23
194.145.242.0/23
194.146.160.0/22
195.184.250.0/23
195.206.172.0/22
212.59.72.0/21
212.108.90.0/23
213.225.224.0/22
217.14.184.0/21
217.20.244.0/22
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
02:44:f7:9f:bd:bb:03:2a:06:c5:fb:e6:61:6f:7d:15:fa:5d:
01:4e:15:77:c9:9b:f9:ab:80:d8:ac:e4:79:47:4a:b0:87:64:
63:94:d7:a2:de:de:1e:34:13:e1:d0:16:e2:10:0a:2d:43:0d:
31:3a:23:e4:46:31:65:90:1c:e9:63:19:bb:cc:90:a4:84:c6:
30:ef:64:fc:07:51:fc:88:38:9e:5a:fc:fe:5b:ad:db:da:8e:
12:2e:f8:3a:aa:5f:54:70:cd:6c:a5:5c:31:7d:31:83:7f:cd:
32:6c:c5:fa:c1:7a:5c:82:42:c5:72:ce:75:a3:dd:58:bb:7e:
92:86:e0:5b:9c:f0:26:c6:11:51:c6:8f:86:37:5a:c5:73:df:
5b:8e:74:34:b8:5e:f8:ef:33:a3:ae:5e:0e:f5:a0:dd:a8:92:
54:5b:31:5d:a3:1c:ac:3f:e0:73:a2:c8:d6:f8:60:5e:3d:3c:
23:29:b8:6e:bb:27:12:22:eb:bb:e2:5b:d2:fd:5d:05:04:d4:
23:07:31:1d:ed:27:57:67:ba:14:91:4e:cc:57:87:08:e2:80:
1e:c4:3c:c8:dc:e7:57:50:e7:0a:58:46:3d:6a:b1:4d:a6:f9:
4d:31:d1:2e:ad:19:5f:38:ff:b6:c1:ea:08:c0:49:72:fb:5c:
33:ea:e4:a5
-----BEGIN CERTIFICATE-----
MIIF2zCCBMOgAwIBAgISAZK4xRXzjIYJZM+/1QC2OceLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl
OTcyNGUwHhcNMjQxMDIzMDk0NjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTc5ZDYxMDIyNDdhYTNjODBhNGQ3NGU2ZDI2NjRiZWEwY2IwM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD3G6m7yXyXYsxhrS19PWgBI72ky
kZqRJCvflLxfrooBBwaL5GRHgX6sd/cK3O6fzq2dZZlqiiheCyT44aBDEWMLbseX
SsKeOUSsQbS9O/BJ1crLOYqJb4P201+a0EP5ZgBmVm7mU+MlVtBgesKYp8n+mvlJ
v3x72SIj0d5vgE2tFwt6tes7Uyww3Ovk5fwW9AO2jcDoDwIpJYmn9jRouc6rroii
zL2+2ajIJvVPAyMoXg/ldWTAYmqc20Tm3rEw9oL5frge81ouHrheKVaSO2foeV4r
mvyIeBTUs6IWPtAi/q3pbrgq3pFZYsFDvA70QoIQ93clFWPxmcgrIk3gPQIDAQAB
o4IC5zCCAuMwHQYDVR0OBBYEFP551hAiR6o8gKTXTm0mZL6gywPsMB8GA1UdIwQY
MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt
N2Q0MjY2Y2Y4MjJhLzEvX25uV0VDSkhxanlBcE5kT2JTWmt2cURMQS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh
LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH8BggrBgEFBQcBBwEB/wSB7DCB6TCB1wQCAAEwgdADBAIF
tWgDBAItQiQDBAE+qZQDBAFPh3owDAMEBld1QAMEAVd1RAMEAFvvOQMEAl6auAME
Am3g2AMEAm3g4DAMAwQBbeDqAwQBbeDwAwQBkLJoAwQBkLJ2AwQBkLL8AwQCk72c
AwQAk73WAwQCsHR0AwQDsviAAwQBuRf+AwQCuZO4AwQCuaEEAwQDueeIAwQBwSOS
AwQBwmmGAwQBwpHyAwQCwpKgAwQBw7j6AwQCw86sAwQD1DtIAwQB1GxaAwQC1eHg
AwQD2Q64AwQC2RT0MA0EAgACMAcDBQAqB1lAMA0GCSqGSIb3DQEBCwUAA4IBAQAC
RPefvbsDKgbF++Zhb30V+l0BThV3yZv5q4DYrOR5R0qwh2RjlNei3t4eNBPh0Bbi
EAotQw0xOiPkRjFlkBzpYxm7zJCkhMYw72T8B1H8iDieWvz+W63b2o4SLvg6ql9U
cM1spVwxfTGDf80ybMX6wXpcgkLFcs51o91Yu36ShuBbnPAmxhFRxo+GN1rFc99b
jnQ0uF747zOjrl4O9aDdqJJUWzFdoxysP+BzosjW+GBePTwjKbhuuycSIuu74lvS
/V0FBNQjBzEd7SdXZ7oUkU7MV4cI4oAexDzI3OdXUOcKWEY9arFNpvlNMdEurRlf
OP+2weoIwEly+1wz6uSl
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:57 2025 by rpki-client