Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/W_MwcpzLbK6ZyIOzaLbvBcXbamU.roa
File: W_MwcpzLbK6ZyIOzaLbvBcXbamU.roa (raw, json)
Hash identifier: m+seS3CmpPxXDMPgVgIooANc/uHhIPIydNE2LAMf95U=
Subject key identifier: 5B:F3:30:72:9C:CB:6C:AE:99:C8:83:B3:68:B6:EF:05:C5:DB:6A:65
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 019494114262D447D0AF4AAF9B62B79A28EF
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/W_MwcpzLbK6ZyIOzaLbvBcXbamU.roa
Signing time: Thu 23 Jan 2025 16:49:06 +0000
ROA not before: Thu 23 Jan 2025 16:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6134
IP address blocks: 45.128.146.0/24 maxlen: 24
45.128.147.0/24 maxlen: 24
45.131.179.0/24 maxlen: 24
45.132.238.0/24 maxlen: 24
45.132.239.0/24 maxlen: 24
45.133.238.0/24 maxlen: 24
45.133.239.0/24 maxlen: 24
45.134.82.0/24 maxlen: 24
45.134.83.0/24 maxlen: 24
45.135.118.0/24 maxlen: 24
45.135.119.0/24 maxlen: 24
45.137.10.0/24 maxlen: 24
45.137.11.0/24 maxlen: 24
45.140.90.0/24 maxlen: 24
45.140.91.0/24 maxlen: 24
91.238.203.0/24 maxlen: 24
91.238.207.0/24 maxlen: 24
185.106.177.0/24 maxlen: 24
185.106.178.0/24 maxlen: 24
185.106.179.0/24 maxlen: 24
193.200.149.0/24 maxlen: 24
193.200.152.0/24 maxlen: 24
193.227.103.0/24 maxlen: 24
193.227.109.0/24 maxlen: 24
193.227.114.0/24 maxlen: 24
2a06:5040:21::/48 maxlen: 48
2a06:5040:22::/48 maxlen: 48
2a06:5040:23::/48 maxlen: 48
2a06:5040:24::/48 maxlen: 48
2a06:5040:25::/48 maxlen: 48
2a06:5040:30::/45 maxlen: 45
Validation: Failed, certificate revoked on Thu 23 Jan 2025 17:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:11:42:62:d4:47:d0:af:4a:af:9b:62:b7:9a:28:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 23 16:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bf330729ccb6cae99c883b368b6ef05c5db6a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:30:52:cb:ef:44:9e:36:a3:5a:c1:6f:40:5a:
7f:71:c1:b0:95:b6:28:4c:e5:18:31:88:21:8e:d4:
18:5b:0d:84:93:78:e4:c9:be:78:5c:82:d1:6c:02:
6c:3d:b5:2a:7d:97:fa:ca:6c:04:3a:8f:90:66:34:
1c:82:21:53:b7:af:79:0d:af:62:8b:86:55:44:24:
0f:33:01:4f:81:7d:c1:95:bd:1d:af:e1:76:66:5d:
8c:b0:4f:7c:0b:25:b5:9c:2b:0d:95:cf:78:a8:aa:
e3:c4:51:1d:6b:e4:66:f0:d7:d9:d6:b5:46:ac:af:
c5:21:3c:f6:cf:58:db:77:71:dd:5f:72:2e:fd:f1:
f6:dd:4c:cf:19:83:ce:5c:0b:9e:d4:18:fa:d6:2f:
be:00:de:51:4d:fe:00:5a:f3:34:32:4c:34:b3:1a:
a5:86:5f:31:c6:de:8a:ea:42:fd:e6:32:4a:55:89:
3e:f4:66:c0:0c:eb:7f:82:45:0e:e9:39:68:05:6e:
a3:00:41:91:93:eb:1f:a5:e5:3a:89:f8:8d:39:ef:
bb:4e:eb:43:ae:a9:cc:09:ee:92:32:e5:28:c6:2b:
e9:ce:97:26:eb:3d:48:29:5f:74:e3:a6:c0:35:cc:
2e:d9:a3:30:f4:51:8b:b0:de:82:0b:3e:ab:5f:f8:
56:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F3:30:72:9C:CB:6C:AE:99:C8:83:B3:68:B6:EF:05:C5:DB:6A:65
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/W_MwcpzLbK6ZyIOzaLbvBcXbamU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.146.0/23
45.131.179.0/24
45.132.238.0/23
45.133.238.0/23
45.134.82.0/23
45.135.118.0/23
45.137.10.0/23
45.140.90.0/23
91.238.203.0/24
91.238.207.0/24
185.106.177.0-185.106.179.255
193.200.149.0/24
193.200.152.0/24
193.227.103.0/24
193.227.109.0/24
193.227.114.0/24
IPv6:
2a06:5040:21::-2a06:5040:25:ffff:ffff:ffff:ffff:ffff
2a06:5040:30::/45
Signature Algorithm: sha256WithRSAEncryption
96:a4:cc:00:73:05:76:0b:a4:f4:bd:d6:1d:0d:98:1a:7f:a5:
08:8b:d4:e9:61:c8:29:8d:0c:5f:c3:2d:37:99:e1:47:1e:10:
3f:57:89:cf:fe:0e:0d:f3:b7:f2:5b:54:46:34:f4:a4:12:13:
70:40:b0:b4:82:91:5a:ea:d8:30:e4:a0:b6:e2:28:a8:ab:1c:
79:d0:9f:c0:a6:39:73:3c:ff:f8:02:ad:76:30:40:6a:1e:60:
73:4c:ab:67:0a:96:e8:27:eb:71:18:64:9c:50:63:15:a2:07:
19:e2:c7:60:dd:ea:28:2f:25:53:10:5c:1d:d4:6a:1b:11:7c:
11:33:30:d3:91:35:7b:35:6b:92:4e:38:84:11:1a:51:6a:12:
48:3f:fe:07:25:06:c0:8e:a4:c9:33:3d:c6:93:30:c3:5e:8e:
7a:e2:bd:b5:60:16:55:2f:90:c4:7e:e9:5b:fc:62:46:8b:57:
e9:3a:43:ab:5a:94:df:22:4a:7a:73:c3:7d:47:8e:7f:75:e3:
8e:3d:3c:a2:75:fc:0e:3c:28:16:e8:b3:19:a5:73:5d:44:b8:
c7:f3:63:69:a9:c2:d7:c1:1b:0d:93:8b:f9:c4:b4:8e:21:63:
f4:af:89:24:34:0d:09:73:16:55:e4:f2:40:8f:ed:7d:e9:88:
7b:bd:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:49:07 2025 by rpki-client