Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/w4SY5meFGCvogdmUJi6dOgH02OM.roa
File: w4SY5meFGCvogdmUJi6dOgH02OM.roa (raw, json)
Hash identifier: XwhunWB7YYTlhsHCAYN4z3VTeMacFufpg8zcbYTPx8k=
Subject key identifier: C3:84:98:E6:67:85:18:2B:E8:81:D9:94:26:2E:9D:3A:01:F4:D8:E3
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019329F915D96B2ADD6B458302456B4DD3E5
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/w4SY5meFGCvogdmUJi6dOgH02OM.roa
Signing time: Thu 14 Nov 2024 09:20:10 +0000
ROA not before: Thu 14 Nov 2024 09:20:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25490
IP address blocks: 62.183.0.0/17 maxlen: 17
62.183.0.0/19 maxlen: 19
62.183.32.0/20 maxlen: 20
62.183.48.0/23 maxlen: 23
62.183.50.0/24 maxlen: 24
62.183.52.0/22 maxlen: 22
62.183.56.0/22 maxlen: 22
62.183.60.0/22 maxlen: 22
62.183.64.0/21 maxlen: 21
62.183.64.0/24 maxlen: 24
62.183.72.0/22 maxlen: 22
62.183.88.0/22 maxlen: 22
62.183.96.0/22 maxlen: 22
83.239.0.0/18 maxlen: 18
83.239.0.0/20 maxlen: 20
83.239.16.0/20 maxlen: 20
83.239.32.0/19 maxlen: 19
83.239.32.0/21 maxlen: 21
83.239.40.0/22 maxlen: 22
83.239.48.0/20 maxlen: 20
83.239.64.0/19 maxlen: 19
83.239.96.0/20 maxlen: 20
83.239.200.0/21 maxlen: 24
83.239.224.0/20 maxlen: 20
83.239.240.0/22 maxlen: 22
83.239.244.0/22 maxlen: 22
85.172.0.0/19 maxlen: 19
85.172.32.0/19 maxlen: 19
85.172.64.0/21 maxlen: 21
85.172.72.0/22 maxlen: 22
85.172.79.0/24 maxlen: 24
85.172.82.0/23 maxlen: 23
85.172.84.0/22 maxlen: 22
85.172.96.0/20 maxlen: 20
85.172.96.0/21 maxlen: 21
85.172.104.0/22 maxlen: 22
85.172.160.0/21 maxlen: 21
85.173.4.0/22 maxlen: 22
85.173.144.0/20 maxlen: 20
85.174.128.0/18 maxlen: 18
85.174.143.0/24 maxlen: 24
85.174.224.0/20 maxlen: 20
85.174.240.0/20 maxlen: 20
85.175.0.0/16 maxlen: 23
85.175.0.0/19 maxlen: 19
85.175.32.0/21 maxlen: 21
85.175.46.0/24 maxlen: 24
85.175.62.0/23 maxlen: 23
85.175.65.0/24 maxlen: 24
85.175.66.0/23 maxlen: 23
85.175.71.0/24 maxlen: 24
85.175.72.0/22 maxlen: 22
85.175.82.0/23 maxlen: 23
85.175.91.0/24 maxlen: 24
85.175.96.0/22 maxlen: 22
85.175.100.0/23 maxlen: 23
85.175.152.0/23 maxlen: 23
85.175.170.0/23 maxlen: 23
85.175.192.0/20 maxlen: 20
85.175.216.0/22 maxlen: 22
85.175.226.0/23 maxlen: 23
85.175.236.0/24 maxlen: 24
94.233.144.0/21 maxlen: 21
94.233.160.0/20 maxlen: 20
109.172.72.0/24 maxlen: 24
178.34.0.0/17 maxlen: 17
2a02:8040::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 15 Nov 2024 05:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:f9:15:d9:6b:2a:dd:6b:45:83:02:45:6b:4d:d3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Nov 14 09:20:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c38498e66785182be881d994262e9d3a01f4d8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:2c:c5:51:46:3c:50:e5:de:d6:af:2e:54:
bb:04:e1:29:77:d7:3f:4b:9a:ae:99:e8:29:8b:6e:
94:b6:45:f2:56:da:9b:40:6a:cb:25:f8:a1:0e:d0:
a9:81:4d:c7:20:e3:cf:59:47:02:ac:66:6b:8e:61:
c7:b7:f1:d6:04:16:2a:c1:fa:d3:37:99:4e:a6:e5:
8c:3c:29:87:bf:43:05:2f:b3:e3:01:f0:8c:c1:41:
2e:0a:48:7a:0f:7f:a4:3d:99:8a:f5:c5:81:db:4e:
9f:4e:b0:33:4b:48:dd:72:5a:95:cc:c3:18:24:35:
5d:95:46:77:13:92:fe:f3:b4:a3:f6:81:01:ac:2f:
6a:17:f4:59:a5:b6:7b:e9:85:28:dc:b5:a5:ee:d9:
99:58:57:7c:a3:44:d3:af:a2:4d:b2:87:c7:18:9b:
80:f4:83:f1:85:5b:c1:25:5e:03:3a:ce:4b:05:cb:
65:a4:0e:9e:1c:70:6c:8b:e6:bb:96:fa:00:4a:f6:
16:8a:0e:9c:3e:9b:d8:4a:8e:a4:e6:d4:0f:6d:5f:
46:2b:50:9c:da:9c:0e:9a:44:c5:d1:df:67:1a:6e:
86:04:1a:0b:0a:07:fa:b2:fd:71:d2:23:57:22:25:
0a:0c:3b:15:1d:9d:77:65:ba:8c:9e:dc:ab:8a:b4:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:84:98:E6:67:85:18:2B:E8:81:D9:94:26:2E:9D:3A:01:F4:D8:E3
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/w4SY5meFGCvogdmUJi6dOgH02OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.0.0/17
83.239.0.0-83.239.111.255
83.239.200.0/21
83.239.224.0-83.239.247.255
85.172.0.0-85.172.75.255
85.172.79.0/24
85.172.82.0-85.172.87.255
85.172.96.0/20
85.172.160.0/21
85.173.4.0/22
85.173.144.0/20
85.174.128.0/18
85.174.224.0-85.175.255.255
94.233.144.0/21
94.233.160.0/20
109.172.72.0/24
178.34.0.0/17
IPv6:
2a02:8040::/32
Signature Algorithm: sha256WithRSAEncryption
33:43:fb:94:6a:0e:ee:8f:ef:44:94:31:2a:f1:a3:89:91:9f:
2c:0f:17:ff:6c:24:52:c1:02:af:64:f7:b1:5d:f6:3f:e8:4b:
aa:92:e0:66:6e:90:bb:98:9b:00:5d:b6:4a:fd:46:7b:0c:86:
08:f5:17:8f:f5:f9:22:9d:9d:b9:61:ba:84:99:83:69:ea:86:
d5:85:d2:dc:56:59:8c:28:4e:61:7c:d2:36:b8:6a:20:6c:29:
c4:55:02:4e:6c:fb:aa:1b:11:34:58:42:69:b8:a5:0c:05:86:
1f:52:79:e9:a0:6c:04:c0:37:04:f9:bd:46:24:a9:e0:a6:60:
27:00:71:e4:e5:f7:56:59:0d:64:0b:07:bc:26:ed:e7:e2:20:
98:f6:75:4d:d6:f1:81:cf:40:cd:2c:21:6c:9c:22:7b:49:cf:
82:45:fb:ee:40:48:99:49:73:34:da:13:33:fb:9c:e2:2b:eb:
94:ae:09:3f:31:df:2f:5d:8c:0c:26:45:42:bc:a9:55:71:b7:
40:18:73:b8:d0:32:63:29:b6:df:69:ae:d6:a8:e3:7e:54:64:
72:16:a8:20:43:88:8e:9b:8a:9f:9a:b5:eb:d7:65:f1:1c:a0:
2d:68:56:71:cc:2a:c1:db:db:8c:b1:1c:7e:c4:29:96:77:53:
50:6c:fd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:10:35 2025 by rpki-client