Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/STtXYv83CnmOh10eaSfomOwhi7U.roa
File: STtXYv83CnmOh10eaSfomOwhi7U.roa (raw, json)
Hash identifier: 0A5nei3fd2Ig+Rwci6VnpAjMjNnklFKbEbOAKuh7aMA=
Subject key identifier: 49:3B:57:62:FF:37:0A:79:8E:87:5D:1E:69:27:E8:98:EC:21:8B:B5
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 0190E67AC7F19DA30DFD6FA646232F89B29F
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/STtXYv83CnmOh10eaSfomOwhi7U.roa
Signing time: Wed 24 Jul 2024 20:42:04 +0000
ROA not before: Wed 24 Jul 2024 20:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 92.40.0.0/20 maxlen: 20
92.40.16.0/20 maxlen: 20
92.40.32.0/20 maxlen: 20
92.40.48.0/20 maxlen: 20
92.40.64.0/20 maxlen: 20
92.40.80.0/20 maxlen: 20
92.40.96.0/20 maxlen: 20
92.40.112.0/20 maxlen: 20
92.40.128.0/19 maxlen: 19
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.176.0/23 maxlen: 23
92.40.178.0/23 maxlen: 23
92.40.180.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
92.40.184.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.188.0/23 maxlen: 23
92.40.190.0/23 maxlen: 23
92.40.192.0/23 maxlen: 23
92.40.194.0/23 maxlen: 23
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.200.0/23 maxlen: 23
92.40.202.0/23 maxlen: 23
92.40.204.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
92.40.212.0/23 maxlen: 23
92.40.214.0/23 maxlen: 23
92.40.216.0/23 maxlen: 23
92.40.218.0/23 maxlen: 23
92.41.0.0/20 maxlen: 20
92.41.16.0/20 maxlen: 20
92.41.32.0/20 maxlen: 20
92.41.48.0/20 maxlen: 20
92.41.64.0/20 maxlen: 20
92.41.80.0/22 maxlen: 22
92.41.84.0/22 maxlen: 22
92.41.88.0/22 maxlen: 22
92.41.92.0/22 maxlen: 22
92.41.96.0/19 maxlen: 19
92.41.128.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
92.41.160.0/21 maxlen: 21
92.41.176.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
92.41.251.0/24 maxlen: 24
94.196.0.0/18 maxlen: 18
94.196.64.0/20 maxlen: 20
94.196.80.0/20 maxlen: 20
94.196.96.0/20 maxlen: 20
94.196.112.0/20 maxlen: 20
94.196.128.0/20 maxlen: 20
94.196.144.0/20 maxlen: 20
94.196.160.0/19 maxlen: 19
94.196.192.0/20 maxlen: 20
94.196.208.0/20 maxlen: 20
94.196.224.0/19 maxlen: 19
94.197.0.0/19 maxlen: 19
94.197.32.0/20 maxlen: 20
94.197.48.0/20 maxlen: 20
94.197.64.0/19 maxlen: 19
94.197.96.0/21 maxlen: 21
94.197.104.0/21 maxlen: 21
94.197.112.0/21 maxlen: 21
94.197.128.0/21 maxlen: 21
94.197.136.0/21 maxlen: 21
94.197.144.0/21 maxlen: 21
94.197.152.0/21 maxlen: 21
94.197.160.0/21 maxlen: 21
94.197.168.0/21 maxlen: 21
94.197.176.0/21 maxlen: 21
94.197.184.0/21 maxlen: 21
94.197.192.0/18 maxlen: 18
188.28.0.0/20 maxlen: 20
188.28.16.0/20 maxlen: 20
188.28.32.0/20 maxlen: 20
188.28.48.0/20 maxlen: 20
188.28.64.0/20 maxlen: 20
188.28.80.0/20 maxlen: 20
188.28.96.0/20 maxlen: 20
188.28.112.0/20 maxlen: 20
188.28.128.0/19 maxlen: 19
188.28.160.0/19 maxlen: 19
188.28.192.0/18 maxlen: 18
188.29.0.0/20 maxlen: 20
188.29.16.0/20 maxlen: 20
188.29.32.0/20 maxlen: 20
188.29.48.0/20 maxlen: 20
188.29.64.0/20 maxlen: 20
188.29.80.0/20 maxlen: 20
188.29.96.0/20 maxlen: 20
188.29.112.0/20 maxlen: 20
188.29.128.0/19 maxlen: 19
188.29.160.0/22 maxlen: 22
188.29.184.0/21 maxlen: 21
188.29.192.0/20 maxlen: 20
188.29.208.0/20 maxlen: 20
188.29.224.0/20 maxlen: 20
188.29.240.0/21 maxlen: 21
188.29.248.0/22 maxlen: 22
188.30.8.0/21 maxlen: 21
188.30.16.0/21 maxlen: 21
188.30.160.0/19 maxlen: 19
188.30.224.0/20 maxlen: 20
188.31.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 31 Jul 2024 20:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e6:7a:c7:f1:9d:a3:0d:fd:6f:a6:46:23:2f:89:b2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Jul 24 20:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=493b5762ff370a798e875d1e6927e898ec218bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:fc:c9:b6:d4:d5:75:ff:ed:4d:65:4e:d4:
fb:02:e3:17:6a:05:50:80:e0:35:7d:53:b4:98:46:
db:50:8b:e2:fa:70:d8:d5:b0:1b:a7:64:97:2e:8a:
01:be:88:2d:97:f1:f9:31:7d:b7:a7:d9:30:16:e9:
d1:ce:93:30:2a:1c:8d:66:cc:4c:e8:15:f7:e7:49:
f0:1f:9a:e7:1c:d6:24:7f:ae:12:b7:f0:ce:1b:4d:
6c:a3:61:fe:3f:8c:cd:0b:6a:d7:11:7d:72:13:47:
d2:6c:c4:f7:8a:96:fc:89:fc:53:7a:f4:d5:ad:f7:
5f:b3:de:b8:68:7b:a6:8a:d7:5a:fb:45:51:3b:f2:
28:3b:8d:2b:b8:dd:63:b4:58:75:31:35:31:43:10:
49:d3:d1:73:ae:dd:21:6f:91:52:bc:f5:fa:12:66:
70:d6:df:66:89:a1:d5:e7:46:7c:98:b2:ba:17:0b:
b1:88:5d:6d:41:b0:69:2f:81:43:78:ec:34:ef:c4:
32:c9:09:b9:97:9d:33:e0:7d:90:47:c0:4a:bf:76:
47:40:41:cc:01:a7:de:ab:c7:59:f7:6f:59:40:72:
68:04:b0:67:2d:40:6c:97:3f:b6:c0:f9:60:f3:e9:
aa:a7:7f:53:04:7d:31:19:0b:c5:89:c4:2c:6f:16:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3B:57:62:FF:37:0A:79:8E:87:5D:1E:69:27:E8:98:EC:21:8B:B5
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/STtXYv83CnmOh10eaSfomOwhi7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.0.0-92.40.205.255
92.40.208.0-92.40.219.255
92.41.0.0-92.41.151.255
92.41.156.0-92.41.167.255
92.41.176.0/20
92.41.208.0-92.41.239.255
92.41.251.0/24
94.196.0.0-94.197.119.255
94.197.128.0/17
188.28.0.0-188.29.163.255
188.29.184.0-188.29.251.255
188.30.8.0-188.30.23.255
188.30.160.0/19
188.30.224.0/20
188.31.32.0/19
Signature Algorithm: sha256WithRSAEncryption
33:4e:ce:49:00:68:d3:23:72:be:37:3f:b4:97:e0:11:36:0b:
69:34:ef:ee:20:89:74:4b:7a:d0:16:a2:28:83:38:39:62:6d:
d2:1b:e4:00:98:c2:50:8b:91:53:89:97:94:94:44:ec:14:86:
cc:bf:e2:0d:d0:4f:39:d2:31:67:4b:dc:fa:47:81:37:92:68:
b7:37:de:e7:8c:72:4d:ee:60:4c:30:da:37:76:59:4a:af:53:
9b:19:71:2e:97:82:c3:df:9f:be:0e:88:59:32:9a:3a:8c:2e:
2f:24:e7:ad:b2:8d:f6:69:c0:6c:c0:85:5a:27:b3:bd:65:ef:
91:9d:fd:79:96:d9:80:b0:df:f6:ae:30:69:57:8b:10:bd:00:
a5:43:48:7b:8d:26:be:b3:5b:51:42:c4:89:62:69:03:51:18:
1a:67:a4:5a:41:02:ec:ba:c0:39:65:5d:5b:93:65:e2:07:b6:
91:eb:30:20:80:76:db:a4:34:80:74:21:f4:d4:a8:42:50:f5:
8a:7b:66:d4:fb:06:48:f7:ed:ce:4b:fd:54:1f:c7:9b:db:2a:
40:4c:73:ec:02:9f:0d:e3:57:bb:78:22:03:6f:22:7c:df:5d:
8a:ab:a2:c3:02:30:24:c0:a5:28:cd:38:14:9c:52:66:0e:b5:
83:80:a1:69
-----BEGIN CERTIFICATE-----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==
Generated at Wed Jul 31 22:46:35 2024 by rpki-client on console-fra.rpki-client.org