Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/WE73ppCogzfSt0Le8zTl9BgnZas.roa
File: WE73ppCogzfSt0Le8zTl9BgnZas.roa (raw, json)
Hash identifier: JCqEpC3p8KS+affEp8I2+kAm10sTv/XyE1/vLE5Qe2g=
Subject key identifier: 58:4E:F7:A6:90:A8:83:37:D2:B7:42:DE:F3:34:E5:F4:18:27:65:AB
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 018F0C51A6DE3EF09D06246F7C0F55728BCF
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/WE73ppCogzfSt0Le8zTl9BgnZas.roa
Signing time: Tue 23 Apr 2024 18:57:08 +0000
ROA not before: Tue 23 Apr 2024 18:57:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34758
IP address blocks: 31.6.80.0/20 maxlen: 20
31.6.80.0/24 maxlen: 24
31.6.81.0/24 maxlen: 24
31.6.82.0/24 maxlen: 24
31.6.83.0/24 maxlen: 24
31.6.84.0/24 maxlen: 24
31.6.85.0/24 maxlen: 24
31.6.86.0/24 maxlen: 24
31.6.87.0/24 maxlen: 24
31.6.88.0/24 maxlen: 24
31.6.89.0/24 maxlen: 24
31.6.90.0/24 maxlen: 24
31.6.91.0/24 maxlen: 24
31.6.92.0/24 maxlen: 24
31.6.93.0/24 maxlen: 24
31.6.94.0/24 maxlen: 24
31.6.95.0/24 maxlen: 24
45.13.88.0/22 maxlen: 22
45.13.88.0/24 maxlen: 24
45.13.89.0/24 maxlen: 24
45.13.90.0/24 maxlen: 24
45.13.91.0/24 maxlen: 24
45.93.36.0/22 maxlen: 22
45.93.36.0/24 maxlen: 24
45.93.37.0/24 maxlen: 24
45.93.38.0/24 maxlen: 24
45.93.39.0/24 maxlen: 24
92.246.96.0/21 maxlen: 21
92.246.96.0/24 maxlen: 24
92.246.97.0/24 maxlen: 24
92.246.98.0/24 maxlen: 24
92.246.99.0/24 maxlen: 24
92.246.100.0/24 maxlen: 24
92.246.101.0/24 maxlen: 24
92.246.102.0/24 maxlen: 24
92.246.103.0/24 maxlen: 24
92.246.112.0/20 maxlen: 20
92.246.112.0/24 maxlen: 24
92.246.113.0/24 maxlen: 24
92.246.114.0/24 maxlen: 24
92.246.115.0/24 maxlen: 24
92.246.116.0/24 maxlen: 24
92.246.117.0/24 maxlen: 24
92.246.118.0/24 maxlen: 24
92.246.119.0/24 maxlen: 24
92.246.120.0/24 maxlen: 24
92.246.121.0/24 maxlen: 24
92.246.122.0/24 maxlen: 24
92.246.123.0/24 maxlen: 24
92.246.124.0/24 maxlen: 24
92.246.125.0/24 maxlen: 24
92.246.126.0/24 maxlen: 24
92.246.127.0/24 maxlen: 24
93.93.16.0/21 maxlen: 21
93.93.16.0/24 maxlen: 24
93.93.17.0/24 maxlen: 24
93.93.18.0/24 maxlen: 24
93.93.19.0/24 maxlen: 24
93.93.20.0/24 maxlen: 24
93.93.21.0/24 maxlen: 24
93.93.22.0/24 maxlen: 24
93.93.23.0/24 maxlen: 24
109.234.136.0/21 maxlen: 21
109.234.136.0/24 maxlen: 24
109.234.137.0/24 maxlen: 24
109.234.138.0/24 maxlen: 24
109.234.139.0/24 maxlen: 24
109.234.140.0/24 maxlen: 24
109.234.141.0/24 maxlen: 24
109.234.142.0/24 maxlen: 24
109.234.143.0/24 maxlen: 24
146.255.160.0/21 maxlen: 21
146.255.160.0/24 maxlen: 24
146.255.161.0/24 maxlen: 24
146.255.162.0/24 maxlen: 24
146.255.163.0/24 maxlen: 24
146.255.164.0/24 maxlen: 24
146.255.165.0/24 maxlen: 24
146.255.166.0/24 maxlen: 24
146.255.167.0/24 maxlen: 24
159.255.156.0/22 maxlen: 22
159.255.156.0/24 maxlen: 24
159.255.157.0/24 maxlen: 24
159.255.158.0/24 maxlen: 24
159.255.159.0/24 maxlen: 24
185.23.84.0/22 maxlen: 22
185.23.84.0/24 maxlen: 24
185.23.85.0/24 maxlen: 24
185.23.86.0/24 maxlen: 24
185.23.87.0/24 maxlen: 24
185.103.80.0/22 maxlen: 22
185.103.80.0/24 maxlen: 24
185.103.81.0/24 maxlen: 24
185.103.82.0/24 maxlen: 24
185.103.83.0/24 maxlen: 24
185.126.140.0/22 maxlen: 22
185.126.140.0/24 maxlen: 24
185.126.141.0/24 maxlen: 24
185.126.142.0/24 maxlen: 24
185.126.143.0/24 maxlen: 24
185.158.28.0/22 maxlen: 22
185.158.29.0/24 maxlen: 24
185.158.30.0/24 maxlen: 24
185.158.31.0/24 maxlen: 24
185.171.36.0/22 maxlen: 22
185.171.36.0/24 maxlen: 24
185.171.37.0/24 maxlen: 24
185.171.38.0/24 maxlen: 24
185.171.39.0/24 maxlen: 24
193.238.136.0/22 maxlen: 22
193.238.136.0/24 maxlen: 24
193.238.137.0/24 maxlen: 24
193.238.138.0/24 maxlen: 24
193.238.139.0/24 maxlen: 24
195.225.224.0/22 maxlen: 22
195.225.224.0/24 maxlen: 24
195.225.225.0/24 maxlen: 24
195.225.226.0/24 maxlen: 24
195.225.227.0/24 maxlen: 24
217.72.32.0/21 maxlen: 21
217.72.32.0/24 maxlen: 24
217.72.33.0/24 maxlen: 24
217.72.34.0/24 maxlen: 24
217.72.35.0/24 maxlen: 24
217.72.36.0/24 maxlen: 24
217.72.37.0/24 maxlen: 24
217.72.38.0/24 maxlen: 24
217.72.39.0/24 maxlen: 24
2a04:2080::/29 maxlen: 48
2a06:c2c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 08 May 2024 11:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0c:51:a6:de:3e:f0:9d:06:24:6f:7c:0f:55:72:8b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Apr 23 18:57:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=584ef7a690a88337d2b742def334e5f4182765ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:5e:f8:7e:93:ef:4a:6f:32:9c:a2:c4:74:
d6:0f:34:10:fc:7e:36:6a:3d:48:60:eb:36:a2:a3:
88:09:8f:71:f0:81:96:c5:e3:a8:6f:4f:3a:f4:93:
f4:11:37:86:47:14:b9:20:54:c6:07:94:e6:96:4f:
56:e9:be:3d:25:a5:9a:7d:4c:fd:81:d7:34:22:bd:
83:ae:39:21:fd:98:3e:c8:9b:24:99:60:e8:f7:c2:
1b:ee:c2:ed:e0:0f:00:28:53:38:4f:ce:ca:54:78:
b8:92:1e:37:98:e3:e5:0b:b0:f8:f3:bb:88:71:c2:
a6:5e:2b:85:ca:09:e2:a9:fd:d9:d8:a7:09:23:a5:
4f:bb:fd:2b:68:77:f7:89:77:82:5b:04:9b:24:1b:
17:d3:3d:f5:de:ad:ef:03:30:2b:3c:af:c9:a7:68:
7d:35:17:72:f4:bf:13:04:2a:07:bd:9d:6e:26:9a:
6f:8d:d7:90:fd:8e:0e:89:8f:f2:9c:c4:9d:af:f2:
db:2f:c5:d9:3b:51:29:e2:68:84:b7:e3:de:7d:ad:
0f:52:ef:be:84:33:c0:cb:55:dc:60:11:86:6c:69:
05:2d:0b:85:93:a9:2a:6c:c5:53:01:4e:be:d0:b9:
5a:65:b1:2f:83:61:91:14:25:83:4c:79:8e:61:05:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4E:F7:A6:90:A8:83:37:D2:B7:42:DE:F3:34:E5:F4:18:27:65:AB
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/WE73ppCogzfSt0Le8zTl9BgnZas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.80.0/20
45.13.88.0/22
45.93.36.0/22
92.246.96.0/21
92.246.112.0/20
93.93.16.0/21
109.234.136.0/21
146.255.160.0/21
159.255.156.0/22
185.23.84.0/22
185.103.80.0/22
185.126.140.0/22
185.158.28.0/22
185.171.36.0/22
193.238.136.0/22
195.225.224.0/22
217.72.32.0/21
IPv6:
2a04:2080::/29
2a06:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:2e:76:00:d9:d2:76:a8:33:1c:61:07:2d:8e:99:58:d2:c2:
e2:ff:62:71:be:dc:a8:b5:6e:ac:8a:ea:f5:39:bc:5c:dd:1c:
db:3f:56:9a:81:bd:4a:55:c6:07:0a:5b:27:37:46:04:c4:f7:
29:63:17:3c:61:3e:dc:32:8e:50:ad:dd:88:9d:e1:22:bd:8a:
fd:45:79:90:63:43:bb:f3:5a:26:1c:68:13:85:78:29:3f:d1:
b2:e6:9b:ed:2b:ae:2f:03:f0:8d:65:f6:ea:dc:20:8a:54:e1:
c2:c5:fb:6e:e7:be:a5:df:74:11:2b:f1:41:1a:a5:d6:c1:8c:
b0:e6:38:41:e9:06:79:d1:f6:c7:98:d5:e3:18:11:7f:2b:41:
87:69:2b:14:c6:aa:7b:41:6b:73:35:a9:8f:ab:4c:ba:9e:17:
8d:8c:17:b2:51:1c:15:43:87:f2:64:23:b2:ca:54:bd:b5:94:
7d:48:96:2b:df:31:d6:ea:8a:3e:01:ae:b9:27:12:a2:97:7f:
9b:82:f7:c3:59:55:32:08:b4:e4:f2:27:fc:4c:27:cd:71:d4:
2c:33:a7:02:a8:e9:dc:fd:79:65:dc:09:ce:74:b3:51:31:ec:
a1:de:c6:ad:27:b5:52:07:1a:bf:c2:e1:51:4f:40:07:af:98:
43:80:b3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:06 2024 by rpki-client on console-fra.rpki-client.org