Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/WpVbBjAsuQo0qo6m_549_y3dvLY.roa
File: WpVbBjAsuQo0qo6m_549_y3dvLY.roa (raw, json)
Hash identifier: A+EiRr1PduaoE5y8LYQRTqyCmX8sT1u/8DbSg3gIgcg=
Subject key identifier: 5A:95:5B:06:30:2C:B9:0A:34:AA:8E:A6:FF:9E:3D:FF:2D:DD:BC:B6
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 018A35B612956E4CAF23BB8FB8DDB02E8DC6
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/WpVbBjAsuQo0qo6m_549_y3dvLY.roa
Signing time: Sun 27 Aug 2023 06:37:19 +0000
ROA not before: Sun 27 Aug 2023 06:37:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8895
IP address blocks: 212.26.37.0/24 maxlen: 24
212.26.36.0/24 maxlen: 24
212.26.38.0/24 maxlen: 25
212.26.41.0/24 maxlen: 24
212.26.40.0/24 maxlen: 24
212.26.39.0/24 maxlen: 25
212.26.44.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.46.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.51.0/24 maxlen: 24
212.26.50.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.52.0/24 maxlen: 24
212.26.58.0/24 maxlen: 24
212.26.56.0/24 maxlen: 24
212.26.60.0/24 maxlen: 24
212.26.64.0/24 maxlen: 24
212.26.63.0/24 maxlen: 24
212.26.65.0/24 maxlen: 24
212.26.68.0/23 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.74.0/24 maxlen: 25
212.26.78.0/24 maxlen: 24
212.26.72.0/24 maxlen: 24
212.26.0.0/17 maxlen: 17
212.26.6.0/23 maxlen: 24
212.26.8.0/24 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.20.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.138.250.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.82.0/24 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.96.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.97.0/24 maxlen: 24
212.138.104.0/24 maxlen: 25
212.138.108.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.127.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.130.0/24 maxlen: 24
212.138.41.0/24 maxlen: 25
212.138.43.0/24 maxlen: 24
212.138.42.0/24 maxlen: 25
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.190.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.155.0/24 maxlen: 25
212.138.153.0/24 maxlen: 24
212.138.157.0/24 maxlen: 24
212.138.166.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.162.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.172.0/24 maxlen: 24
212.138.170.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.177.0/24 maxlen: 24
212.138.183.0/24 maxlen: 25
212.138.181.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
212.138.0.0/16 maxlen: 16
91.229.52.0/22 maxlen: 22
2001:1490:1::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:110:8000::/49 maxlen: 49
2001:1490::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
2001:1490::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 27 Aug 2023 06:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:35:b6:12:95:6e:4c:af:23:bb:8f:b8:dd:b0:2e:8d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Aug 27 06:37:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a955b06302cb90a34aa8ea6ff9e3dff2dddbcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:55:c4:0a:e0:3b:ff:01:a2:c7:89:d2:ca:
90:7a:76:30:5c:18:5d:12:8d:5c:22:51:81:3b:9c:
d0:a9:f8:18:31:3a:8b:7a:d8:31:4a:9b:2a:84:33:
53:5c:99:6c:03:5e:5c:0f:0b:39:0a:e9:69:9b:df:
a9:dc:75:e9:76:f8:bf:1e:2f:5c:1f:35:62:ae:30:
98:c9:21:2c:08:85:66:62:b5:31:9b:a8:47:d3:b6:
f3:ab:3b:fe:f1:3b:91:17:5d:48:86:22:8b:7b:d2:
74:f9:0d:da:eb:fc:b0:0b:5d:55:66:c6:bc:1d:a2:
74:55:a7:80:0a:04:20:39:7f:1c:63:50:15:76:a2:
5e:a6:c8:05:12:37:c7:02:2f:c4:9a:25:dd:e9:85:
cb:14:b3:3a:d7:72:e4:7a:70:2c:85:5d:13:80:4b:
d0:14:f5:37:38:29:40:c6:aa:79:b1:e1:96:83:f5:
87:30:5d:d6:36:56:9e:aa:7a:97:5a:18:0c:e7:6e:
fa:9b:87:29:d5:26:82:e4:44:1b:08:8c:cf:4c:35:
ac:e8:2a:eb:99:81:22:58:d9:a6:8d:13:b2:f0:cf:
48:e9:88:18:a5:ee:b9:69:a4:c2:ef:19:ee:8c:1c:
1c:02:a5:a8:15:f5:f4:26:98:60:ef:a0:e5:ce:89:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:5B:06:30:2C:B9:0A:34:AA:8E:A6:FF:9E:3D:FF:2D:DD:BC:B6
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/WpVbBjAsuQo0qo6m_549_y3dvLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.52.0/22
212.26.0.0/17
212.138.0.0/16
IPv6:
2001:1490::/32
Signature Algorithm: sha256WithRSAEncryption
6d:6b:9d:a3:e8:c1:00:b4:41:ce:18:da:c0:fd:c6:6b:78:ef:
18:49:83:a3:84:b0:15:1d:13:7d:61:13:70:a2:ee:1e:87:4f:
ac:f5:3b:bf:d6:1c:7e:40:32:7b:15:8b:5d:50:4f:e9:58:6b:
2e:9a:11:eb:2c:56:6e:95:57:06:fd:33:fc:de:d7:cd:f2:f1:
90:35:12:ea:fb:c7:a3:1f:9a:98:37:7f:5b:a5:36:c9:cf:a7:
76:28:97:94:d1:f0:48:d2:ab:b4:50:82:eb:51:1f:ef:2c:89:
53:61:81:55:99:8a:ab:b3:a4:34:c7:13:a3:a9:61:f6:42:83:
39:41:29:1e:a0:57:c0:71:73:b9:8b:99:c8:7c:9c:98:ec:64:
7b:a0:e5:da:7e:39:4c:af:96:3e:9a:73:48:0b:d2:de:de:d5:
37:8a:64:a4:2f:03:6e:52:f8:d9:1b:64:bc:7b:5e:43:cb:93:
c6:c8:bd:d1:3a:29:cf:4b:65:73:70:7d:e7:21:96:8f:4a:28:
c3:7d:43:24:31:17:6f:21:a2:a0:3a:4b:e1:7a:80:7b:52:e8:
ee:88:de:6b:c6:6b:98:25:17:e8:33:a6:96:3d:5c:0f:4a:24:
fc:9a:37:99:47:a2:4f:f4:1c:3e:ac:3a:2c:46:81:71:f4:82:
98:cf:91:c1
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYo1thKVbkyvI7uPuN2wLo3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjMwODI3MDYzNzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTk1NWIwNjMwMmNiOTBhMzRhYThlYTZmZjllM2RmZjJkZGRiY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKVVxArgO/8BoseJ0sqQenYwXBhd
Eo1cIlGBO5zQqfgYMTqLetgxSpsqhDNTXJlsA15cDws5Culpm9+p3HXpdvi/Hi9c
HzVirjCYySEsCIVmYrUxm6hH07bzqzv+8TuRF11IhiKLe9J0+Q3a6/ywC11VZsa8
HaJ0VaeACgQgOX8cY1AVdqJepsgFEjfHAi/EmiXd6YXLFLM613LkenAshV0TgEvQ
FPU3OClAxqp5seGWg/WHMF3WNlaeqnqXWhgM5276m4cp1SaC5EQbCIzPTDWs6Crr
mYEiWNmmjROy8M9I6YgYpe65aaTC7xnujBwcAqWoFfX0Jphg76DlzokJAwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFqVWwYwLLkKNKqOpv+ePf8t3by2MB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvV3BWYkJqQXN1UW8wcW82bV81NDlfeTNkdkxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQCW+U0AwQH
1BoAAwMA1IowDQQCAAIwBwMFACABFJAwDQYJKoZIhvcNAQELBQADggEBAG1rnaPo
wQC0Qc4Y2sD9xmt47xhJg6OEsBUdE31hE3Ci7h6HT6z1O7/WHH5AMnsVi11QT+lY
ay6aEessVm6VVwb9M/ze183y8ZA1Eur7x6Mfmpg3f1ulNsnPp3Yol5TR8EjSq7RQ
gutRH+8siVNhgVWZiquzpDTHE6OpYfZCgzlBKR6gV8Bxc7mLmch8nJjsZHug5dp+
OUyvlj6ac0gL0t7e1TeKZKQvA25S+NkbZLx7XkPLk8bIvdE6Kc9LZXNwfechlo9K
KMN9QyQxF28hoqA6S+F6gHtS6O6I3mvGa5glF+gzppY9XA9KJPyaN5lHok/0HD6s
OixGgXH0gpjPkcE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:04 2024 by rpki-client on console-ams.rpki-client.org