Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WGcpbCDTpR5Hi2gceJ4vi3eDMx4.roa
File: WGcpbCDTpR5Hi2gceJ4vi3eDMx4.roa (raw, json)
Hash identifier: 1Gh6AHbqWuEzMpmE3cM60a4cLnsgAqLvYnSD06HIW2U=
Subject key identifier: 58:67:29:6C:20:D3:A5:1E:47:8B:68:1C:78:9E:2F:8B:77:83:33:1E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01952882E9BCD983C6600332421A18235848
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WGcpbCDTpR5Hi2gceJ4vi3eDMx4.roa
Signing time: Fri 21 Feb 2025 12:37:02 +0000
ROA not before: Fri 21 Feb 2025 12:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.131.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.50.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.243.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.127.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.14.0/24 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.215.0/24 maxlen: 24
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:82:e9:bc:d9:83:c6:60:03:32:42:1a:18:23:58:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 21 12:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5867296c20d3a51e478b681c789e2f8b7783331e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:95:a9:a9:6a:23:70:74:1c:54:b9:51:ca:
9c:b3:73:76:d0:c3:e4:28:8c:5e:99:ec:54:ca:ba:
fe:ee:14:54:53:a9:fa:e9:70:c6:08:90:de:22:2e:
0d:f7:36:44:46:85:61:42:cb:86:f8:61:cc:58:2c:
67:2f:3a:93:ed:f1:ea:2c:3c:d5:d8:1f:aa:2a:ef:
f9:d5:b5:d2:73:c7:c6:d0:7f:16:6b:f6:b6:40:dd:
b4:ea:23:b6:de:af:51:ba:3b:17:90:be:62:33:09:
2c:22:7b:90:44:69:89:39:a5:49:1f:fd:0d:bf:15:
f0:f2:54:5b:0d:77:ba:32:a5:38:28:fe:80:f6:d0:
4a:71:d6:1a:8e:b8:e2:1e:a1:6a:0f:c0:b8:99:11:
b8:25:6c:c2:d8:11:86:c0:fb:fc:c8:eb:a4:87:f5:
ed:19:e2:33:15:7b:1b:1c:fd:8b:ea:2a:57:a9:97:
bc:20:15:d1:c5:72:36:7e:ad:c0:5c:94:d7:51:d2:
4d:54:f3:05:24:f4:50:01:a0:25:8f:ee:b2:4b:b4:
ea:0a:ff:92:56:e2:8c:63:25:b5:92:28:40:d1:97:
d8:6e:8f:0b:10:01:00:d4:1a:5d:5b:4a:41:df:a6:
c2:8c:fa:d1:07:73:81:c9:e0:2a:52:20:44:cc:4e:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:67:29:6C:20:D3:A5:1E:47:8B:68:1C:78:9E:2F:8B:77:83:33:1E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WGcpbCDTpR5Hi2gceJ4vi3eDMx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.131.0/24
82.152.176.0/23
82.153.50.0/24
82.153.136.0/22
82.153.243.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.127.0/24
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.14.0/24
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.215.0/24
213.218.248.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:f6:87:4a:25:b6:c4:de:90:45:7f:43:0e:c8:ff:7d:a9:09:
8a:00:3e:c6:23:e1:b1:ff:ec:0f:96:f2:6f:66:55:6c:8a:b6:
d4:0a:07:99:5a:36:40:3e:b4:17:21:9f:a8:48:f0:74:49:3c:
ad:3b:77:49:6b:0a:a4:5c:72:f3:ee:f9:58:45:29:85:8b:37:
2c:8d:47:69:53:5a:ab:eb:eb:76:d8:4c:96:9c:f2:d7:7a:91:
d9:d5:55:e4:59:da:93:c5:4d:f9:7e:68:17:fc:9a:46:e9:9c:
d9:ff:dd:b4:11:f4:c8:6d:d3:84:40:2f:a5:a9:a2:57:93:cd:
7d:2b:1e:f9:f5:da:53:ed:ac:89:bf:90:2c:36:0d:19:ae:30:
9d:84:dd:9a:a6:00:d0:55:fe:91:4a:96:ea:aa:23:61:18:dd:
eb:81:59:02:bd:68:de:46:0d:8c:5b:ba:16:c4:a7:cd:10:b1:
1d:9a:a7:f3:64:fe:32:b0:15:6e:87:3a:3c:b5:b9:09:cf:15:
30:42:47:3b:ed:8b:ad:d1:d8:be:e6:52:3c:64:d5:91:f7:56:
36:a1:0e:39:c5:e7:d1:23:ee:0d:af:80:9f:6f:80:5a:65:c7:
20:18:c6:9c:3a:ab:a8:40:c9:ba:da:78:c2:c8:94:a1:8e:c7:
20:9d:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:17:02 2025 by rpki-client