Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/wOw4uHn7WO3WZ1vdfvu_FfYgI-w.roa
File: wOw4uHn7WO3WZ1vdfvu_FfYgI-w.roa (raw, json)
Hash identifier: 4HKW+cwNivFvB9kgJIkmUAfs3wY3h0PVNRnMh40zjcc=
Subject key identifier: C0:EC:38:B8:79:FB:58:ED:D6:67:5B:DD:7E:FB:BF:15:F6:20:23:EC
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 01856F42D9F5BD8B06ECA7B1C88E5CDB0C2F
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/wOw4uHn7WO3WZ1vdfvu_FfYgI-w.roa
Signing time: Sun 01 Jan 2023 21:35:29 +0000
ROA not before: Sun 01 Jan 2023 21:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2119
IP address blocks: 195.134.32.0/19 maxlen: 19
77.16.0.0/14 maxlen: 14
80.212.0.0/15 maxlen: 15
134.47.0.0/16 maxlen: 16
2.148.0.0/14 maxlen: 14
193.212.0.0/14 maxlen: 14
84.202.0.0/16 maxlen: 16
87.252.64.0/19 maxlen: 19
130.67.0.0/16 maxlen: 16
62.16.128.0/17 maxlen: 17
46.66.0.0/15 maxlen: 15
82.116.64.0/19 maxlen: 19
148.123.0.0/16 maxlen: 16
82.164.0.0/16 maxlen: 16
85.164.0.0/14 maxlen: 14
193.160.192.0/22 maxlen: 22
193.160.196.0/22 maxlen: 22
84.53.0.0/18 maxlen: 18
193.160.200.0/22 maxlen: 22
194.248.0.0/16 maxlen: 16
148.120.0.0/15 maxlen: 15
212.251.128.0/17 maxlen: 17
46.9.0.0/16 maxlen: 16
62.92.0.0/16 maxlen: 16
46.156.0.0/15 maxlen: 15
31.45.0.0/17 maxlen: 17
62.128.224.0/19 maxlen: 19
176.75.0.0/16 maxlen: 16
144.193.0.0/16 maxlen: 16
194.143.0.0/17 maxlen: 17
62.102.160.0/19 maxlen: 19
37.200.0.0/18 maxlen: 18
185.4.172.0/22 maxlen: 22
146.172.0.0/16 maxlen: 16
83.108.0.0/15 maxlen: 15
95.34.0.0/16 maxlen: 16
217.148.144.0/20 maxlen: 20
62.249.160.0/19 maxlen: 19
217.199.32.0/19 maxlen: 19
37.253.0.0/16 maxlen: 16
109.189.0.0/16 maxlen: 16
148.118.0.0/15 maxlen: 15
88.88.0.0/13 maxlen: 13
212.17.128.0/19 maxlen: 19
148.122.0.0/16 maxlen: 16
212.4.32.0/19 maxlen: 19
213.142.64.0/19 maxlen: 19
62.209.64.0/18 maxlen: 18
109.179.0.0/16 maxlen: 16
78.158.224.0/19 maxlen: 19
2a02:a38::/32 maxlen: 32
2a02:2120::/30 maxlen: 30
2001:4600::/24 maxlen: 24
2001:67c:19e4::/48 maxlen: 48
2a02:2640::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d9:f5:bd:8b:06:ec:a7:b1:c8:8e:5c:db:0c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Jan 1 21:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0ec38b879fb58edd6675bdd7efbbf15f62023ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3f:d0:74:03:b7:ec:40:5f:96:95:23:aa:58:
26:48:ac:44:59:7a:90:13:02:27:f7:93:d4:f2:09:
c2:94:d6:6e:e3:6e:02:1c:b0:a7:eb:37:10:16:93:
da:82:a8:41:46:2b:5c:ab:c4:8e:a2:7d:3d:f7:7b:
84:11:9f:ed:e7:4d:95:40:3c:42:0f:40:57:3e:f7:
2f:07:74:1f:a9:0f:91:c2:95:ea:01:a2:61:81:06:
7f:e9:71:a1:27:fb:be:cb:5e:95:ce:dd:1c:bb:f6:
d9:73:1e:42:92:d4:a4:66:48:44:e0:ae:ef:67:43:
08:73:6d:2a:5f:1e:62:9c:c3:44:a6:78:e0:fa:da:
22:df:47:44:de:52:6e:a5:25:35:b7:04:ea:2a:f4:
15:7c:31:de:47:db:62:ef:29:f1:b8:5d:a4:8d:0d:
89:b9:04:38:01:79:9f:cf:83:08:0a:f0:a9:e0:2a:
fd:c1:60:3d:0b:ea:65:9c:1a:66:c3:f2:93:b4:80:
1b:db:6e:40:c3:5c:aa:9a:a8:52:35:07:27:1f:f2:
06:3b:98:62:e8:a7:4a:90:aa:43:88:0c:a0:f4:e1:
be:30:c6:6e:af:b8:ef:25:e1:5e:39:de:fb:e2:44:
ef:98:cf:4d:b7:47:bc:d9:20:2d:3c:82:aa:0c:a0:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EC:38:B8:79:FB:58:ED:D6:67:5B:DD:7E:FB:BF:15:F6:20:23:EC
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/wOw4uHn7WO3WZ1vdfvu_FfYgI-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.148.0.0/14
31.45.0.0/17
37.200.0.0/18
37.253.0.0/16
46.9.0.0/16
46.66.0.0/15
46.156.0.0/15
62.16.128.0/17
62.92.0.0/16
62.102.160.0/19
62.128.224.0/19
62.209.64.0/18
62.249.160.0/19
77.16.0.0/14
78.158.224.0/19
80.212.0.0/15
82.116.64.0/19
82.164.0.0/16
83.108.0.0/15
84.53.0.0/18
84.202.0.0/16
85.164.0.0/14
87.252.64.0/19
88.88.0.0/13
95.34.0.0/16
109.179.0.0/16
109.189.0.0/16
130.67.0.0/16
134.47.0.0/16
144.193.0.0/16
146.172.0.0/16
148.118.0.0-148.123.255.255
176.75.0.0/16
185.4.172.0/22
193.160.192.0-193.160.203.255
193.212.0.0/14
194.143.0.0/17
194.248.0.0/16
195.134.32.0/19
212.4.32.0/19
212.17.128.0/19
212.251.128.0/17
213.142.64.0/19
217.148.144.0/20
217.199.32.0/19
IPv6:
2001:67c:19e4::/48
2001:4600::/24
2a02:a38::/32
2a02:2120::/30
2a02:2640::/32
Signature Algorithm: sha256WithRSAEncryption
9b:89:a5:76:4f:33:29:03:26:b8:1e:a6:e6:72:b1:47:cf:6e:
69:70:22:cb:80:af:5e:77:51:9c:09:a2:d8:bd:0c:4c:43:0c:
e8:ca:2e:40:0f:5e:ee:dd:30:c2:19:13:82:ed:42:10:27:53:
e0:7a:84:22:65:dd:bb:b9:bc:11:39:30:51:3c:5b:8a:05:89:
10:c8:68:8a:b5:82:f5:59:29:99:c8:d1:d3:d2:dd:e2:d3:23:
84:89:55:ac:fe:c6:49:7a:bf:48:4e:f5:7f:ed:89:51:c6:df:
57:54:c3:a8:be:3d:ec:45:a1:f8:4c:cc:c4:6f:71:ea:aa:ba:
1f:46:7d:4a:99:23:56:30:84:78:3b:c0:3c:13:10:3c:7a:4a:
59:ed:b6:ed:7b:3f:60:28:ed:71:6e:7f:7f:b2:56:8a:c6:54:
d9:64:66:ab:82:e9:74:26:96:43:41:2d:41:6d:9f:e3:21:0b:
2b:d0:e1:18:64:ac:f8:13:64:6b:a6:b1:39:25:35:c8:8e:e7:
3a:15:19:ae:cd:ea:5d:b7:96:cb:2d:11:16:67:01:62:20:cb:
78:ca:2c:ec:a3:dc:ca:64:05:b1:81:ec:1b:2f:9a:0a:ed:52:
11:2b:57:b6:41:a5:9b:50:68:86:93:39:a5:af:37:ce:e3:91:
bf:42:f0:26
-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgISAYVvQtn1vYsG7KexyI5c2wwvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOTFkNTI2MjU2MWE5ZGQ3MTNkZmEzOTE2M2RlYzg0OWZl
ZTQ2MzYwHhcNMjMwMTAxMjEzNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGVjMzhiODc5ZmI1OGVkZDY2NzViZGQ3ZWZiYmYxNWY2MjAyM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij/QdAO37EBflpUjqlgmSKxEWXqQ
EwIn95PU8gnClNZu424CHLCn6zcQFpPagqhBRitcq8SOon0993uEEZ/t502VQDxC
D0BXPvcvB3QfqQ+RwpXqAaJhgQZ/6XGhJ/u+y16Vzt0cu/bZcx5CktSkZkhE4K7v
Z0MIc20qXx5inMNEpnjg+toi30dE3lJupSU1twTqKvQVfDHeR9ti7ynxuF2kjQ2J
uQQ4AXmfz4MICvCp4Cr9wWA9C+plnBpmw/KTtIAb225Aw1yqmqhSNQcnH/IGO5hi
6KdKkKpDiAyg9OG+MMZur7jvJeFeOd774kTvmM9Nt0e82SAtPIKqDKCfkwIDAQAB
o4IDPjCCAzowHQYDVR0OBBYEFMDsOLh5+1jt1mdb3X77vxX2ICPsMB8GA1UdIwQY
MBaAFKuR1SYlYandcT36ORY97ISf7kY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQt
Mjc1MjQyYWE2Nzc1LzEvd093NHVIbjdXTzNXWjF2ZGZ2dV9GZllnSS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQtMjc1MjQyYWE2Nzc1
LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBUgYIKwYBBQUHAQcBAf8EggFBMIIBPTCCAQ0EAgABMIIB
BQMDAgKUAwQHHy0AAwQGJcgAAwMAJf0DAwAuCQMDAS5CAwMBLpwDBAc+EIADAwA+
XAMEBT5moAMEBT6A4AMEBj7RQAMEBT75oAMDAk0QAwQFTp7gAwMBUNQDBAVSdEAD
AwBSpAMDAVNsAwQGVDUAAwMAVMoDAwJVpAMEBVf8QAMDA1hYAwMAXyIDAwBtswMD
AG29AwMAgkMDAwCGLwMDAJDBAwMAkqwwCgMDAZR2AwMClHgDAwCwSwMEArkErDAM
AwQGwaDAAwQCwaDIAwMCwdQDBAfCjwADAwDC+AMEBcOGIAMEBdQEIAMEBdQRgAME
B9T7gAMEBdWOQAMEBNmUkAMEBdnHIDAqBAIAAjAkAwcAIAEGfBnkAwQAIAFGAwUA
KgIKOAMFAioCISADBQAqAiZAMA0GCSqGSIb3DQEBCwUAA4IBAQCbiaV2TzMpAya4
HqbmcrFHz25pcCLLgK9ed1GcCaLYvQxMQwzoyi5AD17u3TDCGROC7UIQJ1PgeoQi
Zd27ubwROTBRPFuKBYkQyGiKtYL1WSmZyNHT0t3i0yOEiVWs/sZJer9ITvV/7YlR
xt9XVMOovj3sRaH4TMzEb3HqqrofRn1KmSNWMIR4O8A8ExA8ekpZ7bbtez9gKO1x
bn9/slaKxlTZZGargul0JpZDQS1BbZ/jIQsr0OEYZKz4E2RrprE5JTXIjuc6FRmu
zepdt5bLLREWZwFiIMt4yizso9zKZAWxgewbL5oK7VIRK1e2QaWbUGiGkzmlrzfO
45G/QvAm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:19 2024 by rpki-client on console-ams.rpki-client.org