Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/WOYhb3sSxiP9xBMqViSv0oLzz64.roa
File: WOYhb3sSxiP9xBMqViSv0oLzz64.roa (raw, json)
Hash identifier: odRq/WszNF2+5QkF5Q8BHRqtR8xMYPLwYHCW/tLfkZM=
Subject key identifier: 58:E6:21:6F:7B:12:C6:23:FD:C4:13:2A:56:24:AF:D2:82:F3:CF:AE
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 018794320F94C187E07094D10BC7967BFE2D
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/WOYhb3sSxiP9xBMqViSv0oLzz64.roa
Signing time: Tue 18 Apr 2023 11:48:41 +0000
ROA not before: Tue 18 Apr 2023 11:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49100
IP address blocks: 185.177.232.0/22 maxlen: 22
85.9.68.0/24 maxlen: 24
85.9.64.0/18 maxlen: 18
194.33.122.0/23 maxlen: 23
5.202.0.0/16 maxlen: 24
109.232.7.0/24 maxlen: 24
109.232.5.0/24 maxlen: 24
109.232.6.0/24 maxlen: 24
185.131.30.0/23 maxlen: 23
185.131.28.0/22 maxlen: 22
193.32.80.0/23 maxlen: 23
185.180.52.0/22 maxlen: 22
77.237.160.0/19 maxlen: 19
185.103.128.0/22 maxlen: 22
185.83.88.0/24 maxlen: 24
185.83.89.0/24 maxlen: 24
185.83.90.0/23 maxlen: 23
109.125.176.0/22 maxlen: 22
109.125.184.0/22 maxlen: 22
109.125.182.0/23 maxlen: 23
109.125.191.0/24 maxlen: 24
109.125.189.0/24 maxlen: 24
109.125.190.0/24 maxlen: 24
91.209.242.0/24 maxlen: 24
109.125.160.0/19 maxlen: 19
185.126.40.0/22 maxlen: 22
185.125.244.0/22 maxlen: 22
185.72.24.0/22 maxlen: 22
185.125.248.0/21 maxlen: 21
185.125.255.0/24 maxlen: 24
185.72.27.0/24 maxlen: 24
185.126.0.0/20 maxlen: 20
185.126.16.0/22 maxlen: 22
185.126.16.0/23 maxlen: 23
5.202.82.0/24 maxlen: 24
5.202.100.0/24 maxlen: 24
5.202.110.0/24 maxlen: 24
95.215.160.0/22 maxlen: 22
185.155.8.0/21 maxlen: 21
185.169.20.0/22 maxlen: 22
185.169.36.0/22 maxlen: 22
185.169.37.0/24 maxlen: 24
188.253.32.0/19 maxlen: 24
5.202.166.0/23 maxlen: 23
188.253.64.0/19 maxlen: 24
2a07:8f40::/29 maxlen: 29
2a0a:4e00::/29 maxlen: 29
2a07:8f00::/29 maxlen: 29
2001:4c88::/32 maxlen: 32
2a02:cd80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 28 Jun 2023 05:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:32:0f:94:c1:87:e0:70:94:d1:0b:c7:96:7b:fe:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Apr 18 11:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58e6216f7b12c623fdc4132a5624afd282f3cfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:f1:2a:75:c2:8a:1a:39:a8:4a:eb:b3:a5:
aa:50:ba:6a:ce:01:b3:2b:87:0e:1d:8c:8d:a0:5a:
81:ab:c9:7f:07:40:8f:d2:04:04:fa:bc:ed:2f:e5:
f4:46:49:04:f6:d3:9b:3e:b7:06:e6:35:ae:00:44:
4a:c5:57:36:e1:56:87:78:e7:16:77:95:d2:0b:33:
c1:00:da:56:04:9b:af:2d:7e:8a:c1:8b:3b:fe:98:
9a:34:9f:fe:6b:53:0d:77:8a:65:d5:f0:e2:60:9f:
95:cb:c9:50:8d:dc:f7:fb:00:ad:a8:77:bb:1c:a3:
6f:98:f6:8b:b8:7c:55:46:68:d4:35:1b:c3:60:0e:
d4:a1:8e:4e:d5:52:db:13:07:dc:c5:b1:12:df:36:
6d:12:3a:fc:f2:ea:9e:c6:23:bf:86:31:55:d6:39:
51:24:39:a8:29:d6:b1:e9:e7:d4:b3:46:f0:44:47:
bf:d7:d5:a4:ce:df:63:a0:df:52:3b:23:f1:ae:35:
66:35:0e:c1:15:c3:9f:1e:c0:ef:68:63:f3:2e:6b:
f9:cf:7b:fe:a4:e3:55:c0:96:6b:b8:82:4c:b4:3f:
c6:b8:f3:3b:b4:6d:3d:b2:3d:89:92:61:98:02:44:
9c:cb:fe:cc:bc:0a:5c:00:f5:c9:94:74:5d:e2:6e:
9f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E6:21:6F:7B:12:C6:23:FD:C4:13:2A:56:24:AF:D2:82:F3:CF:AE
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/WOYhb3sSxiP9xBMqViSv0oLzz64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.0.0/16
77.237.160.0/19
85.9.64.0/18
91.209.242.0/24
95.215.160.0/22
109.125.160.0/19
109.232.5.0-109.232.7.255
185.72.24.0/22
185.83.88.0/22
185.103.128.0/22
185.125.244.0-185.126.19.255
185.126.40.0/22
185.131.28.0/22
185.155.8.0/21
185.169.20.0/22
185.169.36.0/22
185.177.232.0/22
185.180.52.0/22
188.253.32.0-188.253.95.255
193.32.80.0/23
194.33.122.0/23
IPv6:
2001:4c88::/32
2a02:cd80::/29
2a07:8f00::/29
2a07:8f40::/29
2a0a:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
9b:f0:c1:28:6b:be:cf:f0:dc:3d:38:04:22:d1:0c:30:10:d8:
ac:3b:25:37:ae:d5:b8:bc:f4:df:2c:7b:bb:c8:ca:90:c7:cf:
0e:03:ea:4e:b7:cd:d0:ba:b4:ee:c7:b8:f5:0e:30:c2:f2:12:
0c:64:64:45:ce:3d:ad:61:c8:b5:c5:89:a4:d5:b4:d7:5a:df:
25:10:25:8b:06:b8:1c:7d:a0:84:30:b1:31:50:eb:ca:f8:79:
18:f1:b0:d2:1b:7a:7f:13:10:bb:1e:a0:cd:f2:cf:de:dd:0e:
88:cd:58:98:bd:80:c6:dd:77:7f:5b:f4:9a:c4:ab:9e:1d:76:
23:1a:11:74:35:ef:ec:52:b4:18:80:ed:15:62:37:4b:28:09:
bb:2e:28:38:71:33:13:2b:d0:03:c8:91:f0:97:3e:92:6c:21:
db:6e:87:a2:ae:a6:9f:88:73:b1:fd:9c:b7:74:a9:f0:03:35:
65:80:e5:3b:a2:5a:83:1e:b5:7f:6a:d0:8f:76:6b:9d:fc:e8:
1f:f3:a7:4b:c8:36:c1:35:1c:f0:01:82:32:c1:81:91:ce:d7:
3e:6b:76:18:c5:bf:a1:d1:10:d8:46:83:df:30:1a:af:82:87:
0f:44:2f:e4:f5:d2:ff:f2:34:15:d8:93:ba:95:64:4e:ce:40:
cf:8d:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:10 2024 by rpki-client on console-fra.rpki-client.org