Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/WGEEbdBeB1hw71Jy_qdsco6g-P4.roa
File: WGEEbdBeB1hw71Jy_qdsco6g-P4.roa (raw, json)
Hash identifier: rnUNJBuj+yhySHle46kwHwMRq82o81Q3tx+vMod86Qg=
Subject key identifier: 58:61:04:6D:D0:5E:07:58:70:EF:52:72:FE:A7:6C:72:8E:A0:F8:FE
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 0193D396E8581F8B8A834185378FF64B8124
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/WGEEbdBeB1hw71Jy_qdsco6g-P4.roa
Signing time: Tue 17 Dec 2024 07:48:22 +0000
ROA not before: Tue 17 Dec 2024 07:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48452
IP address blocks: 94.26.0.0/22 maxlen: 22
94.26.0.0/24 maxlen: 24
94.26.1.0/24 maxlen: 24
94.26.3.0/24 maxlen: 24
94.26.32.0/21 maxlen: 21
94.26.32.0/24 maxlen: 24
94.26.33.0/24 maxlen: 24
94.26.34.0/24 maxlen: 24
94.26.35.0/24 maxlen: 24
94.26.36.0/24 maxlen: 24
94.26.37.0/24 maxlen: 24
94.26.39.0/24 maxlen: 24
94.26.41.0/24 maxlen: 24
94.26.42.0/24 maxlen: 24
94.26.43.0/24 maxlen: 24
94.26.48.0/20 maxlen: 20
94.26.48.0/24 maxlen: 24
94.26.49.0/24 maxlen: 24
94.26.50.0/24 maxlen: 24
94.26.51.0/24 maxlen: 24
94.26.52.0/24 maxlen: 24
94.26.53.0/24 maxlen: 24
94.26.54.0/24 maxlen: 24
94.26.55.0/24 maxlen: 24
94.26.56.0/24 maxlen: 24
94.26.57.0/24 maxlen: 24
94.26.58.0/24 maxlen: 24
94.26.59.0/24 maxlen: 24
94.26.60.0/24 maxlen: 24
94.26.61.0/24 maxlen: 24
94.26.62.0/24 maxlen: 24
94.26.63.0/24 maxlen: 24
94.26.68.0/24 maxlen: 24
94.26.69.0/24 maxlen: 24
94.26.70.0/24 maxlen: 24
94.26.71.0/24 maxlen: 24
94.26.80.0/22 maxlen: 22
94.26.81.0/24 maxlen: 24
94.26.82.0/24 maxlen: 24
94.26.83.0/24 maxlen: 24
94.26.88.0/24 maxlen: 24
94.26.91.0/24 maxlen: 24
94.26.92.0/24 maxlen: 24
94.26.104.0/22 maxlen: 24
94.26.105.0/24 maxlen: 24
94.26.106.0/24 maxlen: 24
94.26.107.0/24 maxlen: 24
2a00:6f40::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:96:e8:58:1f:8b:8a:83:41:85:37:8f:f6:4b:81:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Dec 17 07:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5861046dd05e075870ef5272fea76c728ea0f8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:2d:a1:e2:5f:37:8c:a7:0f:a5:66:87:3c:
54:80:b2:da:6e:c9:6c:88:25:4a:55:df:13:92:7c:
78:11:48:84:f0:76:82:c7:f1:fc:63:c8:71:c6:5e:
15:7a:b5:e8:65:52:35:34:f6:57:56:5c:97:d6:9e:
89:6f:84:1d:b4:17:b0:50:85:4b:42:8a:1f:de:91:
a1:18:d2:03:92:bd:6e:e0:f9:51:e6:22:ee:4c:76:
c3:55:28:ee:1c:ca:d4:5c:5b:63:38:35:5f:68:5e:
07:a1:cd:d1:d5:26:48:47:f1:6b:1c:11:f4:de:2b:
b9:63:e6:df:78:21:5d:6e:a0:ea:6f:b6:ce:85:84:
c7:35:3d:ce:fa:74:06:4a:79:ec:ae:3e:a3:2f:19:
83:1e:af:98:30:10:6e:85:0e:15:ea:76:bf:65:9c:
fb:3b:67:56:f6:8a:15:17:5c:4f:da:7e:f7:31:14:
6e:2b:3a:c0:0f:a4:ac:d7:17:cb:89:cd:41:c2:fe:
69:c7:35:2c:d9:6d:3c:b4:70:69:da:11:07:cf:9e:
7a:d0:3e:67:57:4e:e0:aa:77:ec:82:63:23:5e:50:
f5:bf:04:3a:58:88:e6:83:69:4f:a3:7f:86:c1:6f:
34:92:48:d0:b1:b8:87:ea:4b:f8:45:05:1d:78:6b:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:61:04:6D:D0:5E:07:58:70:EF:52:72:FE:A7:6C:72:8E:A0:F8:FE
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/WGEEbdBeB1hw71Jy_qdsco6g-P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.0.0/22
94.26.32.0/21
94.26.41.0-94.26.43.255
94.26.48.0/20
94.26.68.0/22
94.26.80.0/22
94.26.88.0/24
94.26.91.0-94.26.92.255
94.26.104.0/22
IPv6:
2a00:6f40::/32
Signature Algorithm: sha256WithRSAEncryption
3a:47:4a:8e:fc:8f:6a:54:12:4f:1a:ba:cf:2b:ab:73:0e:01:
08:05:8d:39:01:a6:23:03:c6:26:d6:ea:70:d8:0c:65:c6:88:
f6:81:0f:e4:e9:bf:80:d7:ba:5a:d1:c7:c7:17:a7:d3:5e:f2:
88:8a:51:c0:21:d7:8e:ff:b1:10:14:6e:e3:7f:2d:d3:82:ac:
6d:5c:da:b6:61:e9:40:7b:07:8b:da:f5:42:c7:a6:bf:33:d1:
2f:e9:e8:d1:08:ae:ae:14:9d:35:d1:6b:0f:22:7f:2d:20:47:
c1:56:67:7a:ba:56:83:a2:13:4a:e2:f0:10:12:3e:ea:1c:94:
e5:9e:cd:75:c0:05:6b:8c:46:e6:47:f1:bb:90:73:df:a9:b9:
41:82:f5:99:fb:e0:98:0b:36:91:60:3e:6f:54:ec:c2:5e:79:
d3:a5:c3:b2:cd:62:67:68:18:09:78:d0:40:11:c2:cf:b4:2c:
cc:bd:29:73:09:8c:38:b0:8d:8c:d4:57:7c:64:bc:7b:fa:16:
c0:5b:af:1a:26:24:74:98:4b:1e:77:36:80:c6:53:9e:46:e7:
78:b5:37:21:ab:ef:6c:42:87:8c:c6:87:09:be:aa:b6:36:ec:
78:15:06:ec:0f:f5:2b:62:8f:9b:b0:5c:71:c7:21:32:16:a2:
b9:b9:02:9d
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgISAZPTluhYH4uKg0GFN4/2S4EkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZjVhMTBlNGZkMjY1NWFkYmJiNDBlZGUxOGIyNjE1YWM1
NThlYTkwHhcNMjQxMjE3MDc0ODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODYxMDQ2ZGQwNWUwNzU4NzBlZjUyNzJmZWE3NmM3MjhlYTBmOGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SItoeJfN4ynD6VmhzxUgLLabsls
iCVKVd8Tknx4EUiE8HaCx/H8Y8hxxl4VerXoZVI1NPZXVlyX1p6Jb4QdtBewUIVL
Qoof3pGhGNIDkr1u4PlR5iLuTHbDVSjuHMrUXFtjODVfaF4Hoc3R1SZIR/FrHBH0
3iu5Y+bfeCFdbqDqb7bOhYTHNT3O+nQGSnnsrj6jLxmDHq+YMBBuhQ4V6na/ZZz7
O2dW9ooVF1xP2n73MRRuKzrAD6Ss1xfLic1Bwv5pxzUs2W08tHBp2hEHz5560D5n
V07gqnfsgmMjXlD1vwQ6WIjmg2lPo3+GwW80kkjQsbiH6kv4RQUdeGt9ywIDAQAB
o4ICWDCCAlQwHQYDVR0OBBYEFFhhBG3QXgdYcO9Scv6nbHKOoPj+MB8GA1UdIwQY
MBaAFEH1oQ5P0mVa27tA7eGLJhWsVY6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUt
ODc5MDIwNmYwZDc0LzEvV0dFRWJkQmVCMWh3NzFKeV9xZHNjbzZnLVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUtODc5MDIwNmYwZDc0
LzEvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBMBAIAATBGAwQCXhoAAwQD
XhogMAwDBABeGikDBAJeGigDBAReGjADBAJeGkQDBAJeGlADBABeGlgwDAMEAF4a
WwMEAF4aXAMEAl4aaDANBAIAAjAHAwUAKgBvQDANBgkqhkiG9w0BAQsFAAOCAQEA
OkdKjvyPalQSTxq6zyurcw4BCAWNOQGmIwPGJtbqcNgMZcaI9oEP5Om/gNe6WtHH
xxen017yiIpRwCHXjv+xEBRu438t04KsbVzatmHpQHsHi9r1QsemvzPRL+no0Qiu
rhSdNdFrDyJ/LSBHwVZnerpWg6ITSuLwEBI+6hyU5Z7NdcAFa4xG5kfxu5Bz36m5
QYL1mfvgmAs2kWA+b1Tswl5506XDss1iZ2gYCXjQQBHCz7QszL0pcwmMOLCNjNRX
fGS8e/oWwFuvGiYkdJhLHnc2gMZTnkbneLU3IavvbEKHjMaHCb6qtjbseBUG7A/1
K2KPm7BcccchMhaiubkCnQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:55:12 2025 by rpki-client