Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/WtzJWZH6q1qjhym-H7lxRY8Il1c.roa
File: WtzJWZH6q1qjhym-H7lxRY8Il1c.roa (raw, json)
Hash identifier: NvjivKjm2q/+Gad9icjTaWV/xUFGWiQG6+gJj32CP+s=
Subject key identifier: 5A:DC:C9:59:91:FA:AB:5A:A3:87:29:BE:1F:B9:71:45:8F:08:97:57
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 0190DC4CCC6F3B72E26D675EBACC379748DE
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/WtzJWZH6q1qjhym-H7lxRY8Il1c.roa
Signing time: Mon 22 Jul 2024 21:15:38 +0000
ROA not before: Mon 22 Jul 2024 21:15:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 92.40.0.0/20 maxlen: 20
92.40.16.0/20 maxlen: 20
92.40.32.0/20 maxlen: 20
92.40.48.0/20 maxlen: 20
92.40.64.0/20 maxlen: 20
92.40.80.0/20 maxlen: 20
92.40.96.0/20 maxlen: 20
92.40.112.0/20 maxlen: 20
92.40.128.0/19 maxlen: 19
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.176.0/23 maxlen: 23
92.40.178.0/23 maxlen: 23
92.40.180.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
92.40.184.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.188.0/23 maxlen: 23
92.40.190.0/23 maxlen: 23
92.40.192.0/23 maxlen: 23
92.40.194.0/23 maxlen: 23
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.200.0/23 maxlen: 23
92.40.202.0/23 maxlen: 23
92.40.204.0/23 maxlen: 23
92.40.206.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
92.40.212.0/23 maxlen: 23
92.40.214.0/23 maxlen: 23
92.40.216.0/23 maxlen: 23
92.40.218.0/23 maxlen: 23
92.41.0.0/20 maxlen: 20
92.41.16.0/20 maxlen: 20
92.41.32.0/20 maxlen: 20
92.41.48.0/20 maxlen: 20
92.41.64.0/20 maxlen: 20
92.41.80.0/22 maxlen: 22
92.41.84.0/22 maxlen: 22
92.41.88.0/22 maxlen: 22
92.41.92.0/22 maxlen: 22
92.41.96.0/19 maxlen: 19
92.41.128.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
92.41.160.0/21 maxlen: 21
92.41.176.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
92.41.251.0/24 maxlen: 24
94.197.48.0/20 maxlen: 20
94.197.104.0/21 maxlen: 21
188.28.192.0/18 maxlen: 18
188.29.32.0/20 maxlen: 20
188.29.48.0/20 maxlen: 20
188.30.8.0/21 maxlen: 21
188.30.16.0/21 maxlen: 21
188.30.160.0/19 maxlen: 19
188.30.224.0/20 maxlen: 20
188.31.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 23 Jul 2024 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:dc:4c:cc:6f:3b:72:e2:6d:67:5e:ba:cc:37:97:48:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Jul 22 21:15:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5adcc95991faab5aa38729be1fb971458f089757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ad:ee:62:87:2b:17:a3:a8:c4:b7:e3:fa:62:
a7:03:4b:f8:bc:51:7b:7a:be:ef:b0:b2:e9:7c:aa:
9a:4d:23:e2:74:25:58:30:60:a1:a6:ff:da:94:24:
39:c3:51:68:fb:b3:17:a6:96:6d:ac:76:ad:4a:35:
67:3d:5a:45:99:11:d1:d1:93:4e:64:c9:1b:0a:fa:
76:ee:59:88:3b:fa:e7:10:cd:d7:cd:a8:e3:60:95:
d4:5d:a6:bb:6f:6f:e3:c4:f3:d2:55:e1:ff:d0:e2:
a8:ab:f8:04:f5:35:8e:9e:15:53:00:b2:9c:ad:27:
c8:99:c1:3a:23:f5:62:95:86:4f:45:a2:fa:65:3a:
4a:78:c2:a1:1f:d4:63:70:0a:6b:88:63:8c:6c:00:
52:68:81:2a:c6:8a:62:cf:12:47:a7:fb:24:05:3c:
81:36:7c:51:9e:c7:07:65:a7:11:86:b8:0c:d3:b7:
06:ca:65:ad:da:a9:a3:2c:62:22:84:93:78:c0:ac:
e6:75:ec:c5:de:80:ca:e0:f6:2c:01:42:17:7d:89:
7a:f1:26:aa:6e:dd:fa:02:3d:aa:67:b2:c3:ce:d8:
f8:c2:2d:ab:cf:5e:a2:b0:a7:60:1a:34:70:85:c9:
71:b5:19:5d:1d:1f:9e:0b:b8:63:55:d5:62:51:48:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DC:C9:59:91:FA:AB:5A:A3:87:29:BE:1F:B9:71:45:8F:08:97:57
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/WtzJWZH6q1qjhym-H7lxRY8Il1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.0.0-92.40.219.255
92.41.0.0-92.41.151.255
92.41.156.0-92.41.167.255
92.41.176.0/20
92.41.208.0-92.41.239.255
92.41.251.0/24
94.197.48.0/20
94.197.104.0/21
188.28.192.0/18
188.29.32.0/19
188.30.8.0-188.30.23.255
188.30.160.0/19
188.30.224.0/20
188.31.32.0/19
Signature Algorithm: sha256WithRSAEncryption
92:3a:c8:dc:96:48:9a:80:f5:04:8b:c2:b3:9f:5b:f7:de:11:
89:91:68:ac:2d:c9:ed:2c:5c:95:f0:0d:fb:4f:92:96:e1:a4:
9e:15:94:ef:33:c6:17:ec:de:d2:9e:60:26:2e:f0:90:b1:e7:
53:25:d7:a8:53:dc:af:87:1c:9d:66:00:c4:9b:9b:1d:a9:93:
2b:a6:2c:d0:62:65:00:c3:5e:29:cf:86:e0:be:db:7d:36:de:
97:3d:89:03:35:56:08:0e:84:92:5a:a2:b7:16:af:4f:ef:d9:
01:36:a3:d8:cf:82:c7:aa:fa:9f:56:88:9a:21:35:33:a7:ce:
81:30:d7:2e:02:43:47:b9:cf:a6:31:6b:94:af:0c:49:85:a0:
9d:78:30:a0:2c:f9:8b:8f:be:a6:6d:57:96:82:08:a5:c2:b6:
1c:e5:08:57:90:1c:47:01:14:a2:56:f4:0b:ac:f9:17:61:81:
29:8d:34:b7:51:0b:03:b3:d6:16:01:9f:f8:96:e1:e8:d7:d5:
67:2c:00:57:4e:68:61:98:eb:3b:f5:ef:cc:87:19:df:0e:fa:
71:d9:6f:32:36:bb:0f:77:c0:c7:34:95:7b:66:bf:06:6b:4a:
df:8a:f9:7e:1c:3e:84:ed:a0:5c:c3:39:84:5b:74:d1:f8:0c:
e2:44:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 00:27:29 2024 by rpki-client on console-fra.rpki-client.org