Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/Wqq_Ksxgb35HoqIUGHFfyxTTICg.roa
File: Wqq_Ksxgb35HoqIUGHFfyxTTICg.roa (raw, json)
Hash identifier: MCZOmLm8da+/ceQuumrM7rLM4L0iCqJpVaL2AO+XS4w=
Subject key identifier: 5A:AA:BF:2A:CC:60:6F:7E:47:A2:A2:14:18:71:5F:CB:14:D3:20:28
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 0190DBFE10BF3E85F30F1E7C14260658F4CD
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/Wqq_Ksxgb35HoqIUGHFfyxTTICg.roa
Signing time: Mon 22 Jul 2024 19:49:39 +0000
ROA not before: Mon 22 Jul 2024 19:49:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 92.40.0.0/20 maxlen: 20
92.40.16.0/20 maxlen: 20
92.40.32.0/20 maxlen: 20
92.40.48.0/20 maxlen: 20
92.40.64.0/20 maxlen: 20
92.40.80.0/20 maxlen: 20
92.40.96.0/20 maxlen: 20
92.40.112.0/20 maxlen: 20
92.40.128.0/19 maxlen: 19
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.176.0/23 maxlen: 23
92.40.178.0/23 maxlen: 23
92.40.180.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
92.40.184.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.188.0/23 maxlen: 23
92.40.190.0/23 maxlen: 23
92.40.192.0/23 maxlen: 23
92.40.194.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.200.0/23 maxlen: 23
92.40.202.0/23 maxlen: 23
92.40.204.0/23 maxlen: 23
92.40.206.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
92.40.212.0/23 maxlen: 23
92.40.214.0/23 maxlen: 23
92.40.216.0/23 maxlen: 23
92.40.218.0/23 maxlen: 23
94.197.48.0/20 maxlen: 20
94.197.104.0/21 maxlen: 21
188.28.192.0/18 maxlen: 18
188.29.32.0/20 maxlen: 20
188.29.48.0/20 maxlen: 20
188.30.8.0/21 maxlen: 21
188.30.16.0/21 maxlen: 21
188.30.160.0/19 maxlen: 19
188.30.224.0/20 maxlen: 20
188.31.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 22 Jul 2024 21:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:db:fe:10:bf:3e:85:f3:0f:1e:7c:14:26:06:58:f4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Jul 22 19:49:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aaabf2acc606f7e47a2a21418715fcb14d32028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:67:54:a1:ba:99:e0:72:a8:1d:9a:74:b5:
3d:d3:0d:c0:95:70:b4:8f:48:d6:79:c5:15:e3:a2:
5a:63:10:c1:57:a8:d2:23:97:aa:8f:2a:ce:d4:a2:
af:a6:e5:b1:42:73:60:81:fb:a5:51:ec:9a:2b:f9:
59:bd:41:2f:e4:cf:91:fc:1f:7e:4a:e3:88:c0:fa:
6f:6d:68:74:80:f4:33:68:d1:92:2f:96:10:e5:2a:
ee:5b:fd:61:8f:7e:c7:50:94:5e:5d:87:57:ec:7a:
56:e4:01:a7:31:ee:4b:0d:f5:f7:1e:21:74:30:2e:
45:e5:28:0a:f5:12:c6:fd:14:f5:48:30:7d:ba:9c:
be:38:7d:05:2e:09:15:00:11:ff:e3:35:83:05:aa:
51:fc:30:01:68:2e:6e:0d:80:02:ab:8c:4f:a1:67:
cf:a6:a9:08:f5:fa:b1:15:2f:f4:a8:c4:4f:25:f5:
ba:76:da:4b:5d:c0:e0:c7:33:41:c8:42:0b:ca:1a:
32:5c:1c:05:e5:a7:91:81:f1:6e:ba:54:29:ca:b9:
53:4a:8c:01:14:74:ed:7f:23:5a:36:a2:cc:f4:ba:
4c:e4:fa:99:53:a5:44:fa:06:63:fb:ab:73:92:c8:
2f:20:57:7e:a5:d7:cc:cc:fb:68:89:b6:94:69:72:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AA:BF:2A:CC:60:6F:7E:47:A2:A2:14:18:71:5F:CB:14:D3:20:28
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/Wqq_Ksxgb35HoqIUGHFfyxTTICg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.0.0-92.40.195.255
92.40.198.0-92.40.219.255
94.197.48.0/20
94.197.104.0/21
188.28.192.0/18
188.29.32.0/19
188.30.8.0-188.30.23.255
188.30.160.0/19
188.30.224.0/20
188.31.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:70:13:9a:df:3a:fb:fd:0c:27:00:00:c1:7f:22:42:53:4c:
80:cc:09:f5:76:f3:ca:be:59:92:a4:52:1f:13:08:8e:74:d2:
f2:3a:08:2f:c7:af:f0:c5:06:2a:d8:45:61:ac:cb:3e:1e:83:
16:79:e1:a8:b8:68:e1:5b:a7:04:95:39:84:a7:3f:1d:71:e0:
9d:e5:44:7c:3f:f6:5f:fe:9b:ec:1a:c2:4d:b4:64:90:60:1e:
05:64:7b:f1:0e:a4:33:97:e4:5b:c2:1b:b9:bc:fd:09:23:1c:
6d:b5:d1:92:12:3a:c8:e4:4b:1f:17:ab:4a:72:60:d9:01:95:
23:fc:5c:ea:bc:ff:7e:09:25:e2:ce:1d:0f:92:0e:03:eb:34:
01:12:8e:1a:0c:82:27:98:58:50:43:9b:25:38:62:7c:53:2c:
09:17:59:03:be:7e:2d:6e:27:fc:79:69:8e:29:f7:43:06:91:
b8:95:93:d5:45:e5:75:2b:72:53:28:cc:9c:d4:d3:c2:77:13:
da:55:13:4e:2b:e0:ab:76:ce:57:5e:1c:62:69:20:ce:26:e2:
9f:12:81:07:b6:73:29:19:b3:7a:9b:31:58:ae:d6:32:9a:10:
41:3c:37:a2:51:69:11:d8:18:36:30:82:c8:0f:69:2c:6c:5b:
08:5c:be:c3
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAZDb/hC/PoXzDx58FCYGWPTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTEzNTljOTk4OWI5NjNlOTU5NGMxOTI5YzgyMDM2N2Rl
MzIyZGQwHhcNMjQwNzIyMTk0OTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWFhYmYyYWNjNjA2ZjdlNDdhMmEyMTQxODcxNWZjYjE0ZDMyMDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFdnVKG6meByqB2adLU90w3AlXC0
j0jWecUV46JaYxDBV6jSI5eqjyrO1KKvpuWxQnNggfulUeyaK/lZvUEv5M+R/B9+
SuOIwPpvbWh0gPQzaNGSL5YQ5SruW/1hj37HUJReXYdX7HpW5AGnMe5LDfX3HiF0
MC5F5SgK9RLG/RT1SDB9upy+OH0FLgkVABH/4zWDBapR/DABaC5uDYACq4xPoWfP
pqkI9fqxFS/0qMRPJfW6dtpLXcDgxzNByEILyhoyXBwF5aeRgfFuulQpyrlTSowB
FHTtfyNaNqLM9LpM5PqZU6VE+gZj+6tzksgvIFd+pdfMzPtoibaUaXJUlQIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFFqqvyrMYG9+R6KiFBhxX8sU0yAoMB8GA1UdIwQY
MBaAFOtRNZyZiblj6VlMGSnIIDZ94yLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAt
NTlmYzczZDYwMzIyLzEvV3FxX0tzeGdiMzVIb3FJVUdIRmZ5eFRUSUNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAtNTlmYzczZDYwMzIy
LzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBZBAIAATBTMAsDAwNcKAME
AlwowDAMAwQBXCjGAwQCXCjYAwQEXsUwAwQDXsVoAwQGvBzAAwQFvB0gMAwDBAO8
HggDBAO8HhADBAW8HqADBAS8HuADBAW8HyAwDQYJKoZIhvcNAQELBQADggEBAF9w
E5rfOvv9DCcAAMF/IkJTTIDMCfV288q+WZKkUh8TCI500vI6CC/Hr/DFBirYRWGs
yz4egxZ54ai4aOFbpwSVOYSnPx1x4J3lRHw/9l/+m+wawk20ZJBgHgVke/EOpDOX
5FvCG7m8/QkjHG210ZISOsjkSx8Xq0pyYNkBlSP8XOq8/34JJeLOHQ+SDgPrNAES
jhoMgieYWFBDmyU4YnxTLAkXWQO+fi1uJ/x5aY4p90MGkbiVk9VF5XUrclMozJzU
08J3E9pVE04r4Kt2zldeHGJpIM4m4p8SgQe2cykZs3qbMViu1jKaEEE8N6JRaRHY
GDYwgsgPaSxsWwhcvsM=
-----END CERTIFICATE-----
Generated at Mon Jul 22 23:41:15 2024 by rpki-client on console-ams.rpki-client.org