Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/WPLtgK1gEMlT7IY4p7q2G2fk-ZA.roa
File: WPLtgK1gEMlT7IY4p7q2G2fk-ZA.roa (raw, json)
Hash identifier: u43WQZqDSX2DOdhjzKMnb5C5YUcbeA6jOJaTPFGFGCE=
Subject key identifier: 58:F2:ED:80:AD:60:10:C9:53:EC:86:38:A7:BA:B6:1B:67:E4:F9:90
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 01877A20756465667CF2D12AFBD7796F868C
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/WPLtgK1gEMlT7IY4p7q2G2fk-ZA.roa
Signing time: Thu 13 Apr 2023 10:19:20 +0000
ROA not before: Thu 13 Apr 2023 10:19:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29256
IP address blocks: 31.9.128.0/20 maxlen: 20
193.124.10.0/23 maxlen: 23
193.124.12.0/23 maxlen: 23
82.100.128.0/19 maxlen: 19
31.9.144.0/20 maxlen: 20
193.124.28.0/23 maxlen: 23
193.124.26.0/23 maxlen: 23
193.124.38.0/23 maxlen: 23
31.9.160.0/19 maxlen: 19
91.144.0.0/20 maxlen: 20
31.9.80.0/20 maxlen: 20
91.144.16.0/20 maxlen: 20
31.9.96.0/19 maxlen: 19
91.144.32.0/20 maxlen: 20
82.137.240.0/24 maxlen: 24
82.137.242.0/24 maxlen: 24
94.47.0.0/19 maxlen: 19
82.137.244.0/23 maxlen: 23
82.137.243.0/24 maxlen: 24
82.137.246.0/23 maxlen: 23
82.137.248.0/24 maxlen: 24
82.137.249.0/24 maxlen: 24
82.137.251.0/24 maxlen: 24
82.137.250.0/24 maxlen: 24
82.137.253.0/24 maxlen: 24
82.137.252.0/24 maxlen: 24
82.137.255.0/24 maxlen: 24
82.137.254.0/24 maxlen: 24
94.47.32.0/19 maxlen: 19
193.124.52.0/23 maxlen: 23
193.124.62.0/23 maxlen: 23
82.137.192.0/20 maxlen: 20
31.9.192.0/19 maxlen: 19
193.124.68.0/23 maxlen: 23
193.124.86.0/23 maxlen: 23
82.137.208.0/20 maxlen: 20
80.70.120.0/21 maxlen: 21
82.137.224.0/20 maxlen: 20
31.9.224.0/19 maxlen: 19
188.133.96.0/19 maxlen: 19
185.109.212.0/22 maxlen: 22
188.133.16.0/20 maxlen: 20
185.99.100.0/22 maxlen: 22
188.133.32.0/19 maxlen: 19
188.133.64.0/19 maxlen: 19
31.9.48.0/22 maxlen: 22
31.9.56.0/21 maxlen: 21
31.9.64.0/20 maxlen: 20
5.155.224.0/19 maxlen: 19
188.133.0.0/20 maxlen: 20
185.92.88.0/22 maxlen: 22
94.47.96.0/19 maxlen: 19
5.0.64.0/18 maxlen: 18
5.155.64.0/19 maxlen: 19
94.47.128.0/20 maxlen: 20
94.47.144.0/20 maxlen: 20
5.0.0.0/19 maxlen: 19
5.155.0.0/19 maxlen: 19
46.40.128.0/18 maxlen: 18
94.47.64.0/19 maxlen: 19
5.0.32.0/19 maxlen: 19
5.155.32.0/19 maxlen: 19
5.0.160.0/19 maxlen: 19
5.155.160.0/19 maxlen: 19
178.253.96.0/23 maxlen: 23
178.253.98.0/24 maxlen: 24
178.253.103.0/24 maxlen: 24
178.253.104.0/22 maxlen: 22
178.253.100.0/23 maxlen: 23
5.0.192.0/18 maxlen: 18
178.253.102.0/24 maxlen: 24
178.253.108.0/23 maxlen: 23
178.253.110.0/23 maxlen: 23
5.155.192.0/19 maxlen: 19
5.155.96.0/19 maxlen: 19
94.47.160.0/19 maxlen: 19
5.0.128.0/19 maxlen: 19
5.155.128.0/19 maxlen: 19
94.47.192.0/18 maxlen: 18
178.253.64.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:20:75:64:65:66:7c:f2:d1:2a:fb:d7:79:6f:86:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Apr 13 10:19:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58f2ed80ad6010c953ec8638a7bab61b67e4f990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:43:71:8a:18:20:5d:c3:05:0c:7a:ee:69:
bc:b7:cb:d9:05:28:8b:a8:cd:83:aa:08:ff:73:8b:
b5:12:cc:98:34:7f:25:70:52:85:74:0e:c3:38:fc:
c6:c7:8a:0a:c9:44:97:6c:8f:81:30:20:3a:5b:38:
05:82:40:c9:07:d3:bd:3a:06:93:f2:23:33:19:9f:
bd:fb:25:a2:1c:52:fa:59:78:ff:51:5d:cb:de:c3:
ea:ca:5b:38:7c:b4:90:f0:fe:97:76:23:8d:85:95:
7f:30:35:3e:8b:7e:53:d2:2d:39:0a:e1:39:e1:f5:
e5:96:c0:d2:b9:5d:9b:b5:84:e0:98:1f:c3:41:68:
76:bd:44:a8:dc:fd:31:8e:96:62:e5:44:d5:cc:ff:
7c:64:cb:6e:e7:b7:8e:48:30:5b:af:e7:16:df:6b:
1b:d0:a5:c0:e7:c9:ab:a0:71:45:26:5c:5b:a3:5f:
75:fc:54:7b:96:17:4d:f0:d1:c9:9e:68:d9:7c:d8:
1e:f4:95:98:f5:a4:c0:51:e0:54:47:fa:da:d2:95:
13:c3:1f:3f:6b:76:84:47:83:9e:56:75:b9:de:2f:
a3:18:1b:67:79:e3:e1:ec:48:18:ba:d4:82:c2:39:
17:9b:c6:d1:73:37:83:e8:0c:0f:9a:eb:02:24:7e:
d5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F2:ED:80:AD:60:10:C9:53:EC:86:38:A7:BA:B6:1B:67:E4:F9:90
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/WPLtgK1gEMlT7IY4p7q2G2fk-ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.48.0/22
31.9.56.0-31.9.255.255
46.40.128.0/18
80.70.120.0/21
82.100.128.0/19
82.137.192.0-82.137.240.255
82.137.242.0-82.137.255.255
91.144.0.0-91.144.47.255
94.47.0.0/16
178.253.64.0-178.253.98.255
178.253.100.0-178.253.111.255
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.26.0-193.124.29.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.86.0/23
Signature Algorithm: sha256WithRSAEncryption
27:91:da:8f:7c:c0:ba:da:87:d7:2a:22:db:bd:b1:f3:c1:b4:
60:11:30:f4:7b:e0:a0:23:ee:67:c5:f0:d8:e1:06:75:42:ff:
b3:3b:30:2c:c3:ca:d7:91:32:db:dd:44:0d:10:73:1b:39:ee:
b5:8d:05:15:4d:ff:5a:04:ad:7e:2f:f0:19:59:e8:4e:1b:d0:
19:ae:b8:59:54:a3:56:00:36:3b:28:56:26:44:b5:9d:7c:fb:
81:74:19:f9:e2:1a:ea:3c:28:61:bf:51:44:ed:d2:d5:0f:cf:
b5:52:ea:8a:c7:c4:91:57:be:e3:bb:f1:1c:4c:5d:f0:33:24:
5c:7b:a6:31:a9:e9:fd:02:cc:c9:ed:e7:48:f1:6a:0e:53:3e:
85:d9:4c:09:4b:98:b9:4f:35:ef:aa:66:bc:55:0a:b0:3d:7e:
0a:ab:dc:45:01:b3:e4:09:03:89:63:5c:c2:4e:2e:01:74:d1:
41:e5:d8:e2:7f:15:ed:b5:cd:46:21:c8:7b:6b:a4:a6:82:7b:
78:eb:ef:b7:cb:26:48:52:c5:5d:e4:fc:40:78:4a:de:3e:44:
ca:69:b2:0e:19:64:16:17:26:07:0e:9e:f9:7d:23:32:69:9d:
94:3b:af:a6:61:63:a8:57:ec:84:f9:55:44:66:1f:d6:53:54:
41:8d:02:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:26 2024 by rpki-client on console-ams.rpki-client.org