Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/W_lPPjspDZIEEzYiFkUUpfaKftE.roa
File: W_lPPjspDZIEEzYiFkUUpfaKftE.roa (raw, json)
Hash identifier: vLz1se8/Ris4BWofMIVWBdRCbfc/XFb9G4Yj82gsAoQ=
Subject key identifier: 5B:F9:4F:3E:3B:29:0D:92:04:13:36:22:16:45:14:A5:F6:8A:7E:D1
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019593E716FC07FA81D2154018B017FABD9E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/W_lPPjspDZIEEzYiFkUUpfaKftE.roa
Signing time: Fri 14 Mar 2025 09:05:50 +0000
ROA not before: Fri 14 Mar 2025 09:05:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8434
IP address blocks: 192.36.37.0/24 maxlen: 24
192.71.97.0/24 maxlen: 24
192.71.158.0/24 maxlen: 24
192.121.21.0/24 maxlen: 24
192.121.172.0/24 maxlen: 24
192.121.192.0/24 maxlen: 24
192.165.65.0/24 maxlen: 24
192.165.86.0/24 maxlen: 24
192.176.161.0/24 maxlen: 24
193.180.61.0/24 maxlen: 24
193.181.0.0/24 maxlen: 24
193.181.187.0/24 maxlen: 24
193.183.3.0/24 maxlen: 24
193.183.68.0/23 maxlen: 23
193.183.79.0/24 maxlen: 24
193.183.92.0/24 maxlen: 24
193.183.93.0/24 maxlen: 24
193.183.104.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.234.68.0/23 maxlen: 23
193.234.220.0/23 maxlen: 23
193.234.237.0/24 maxlen: 24
193.235.142.0/23 maxlen: 24
194.14.129.0/24 maxlen: 24
194.14.212.0/24 maxlen: 24
194.68.56.0/23 maxlen: 23
194.68.99.0/24 maxlen: 24
194.68.126.0/24 maxlen: 24
194.68.194.0/23 maxlen: 23
194.71.27.0/24 maxlen: 24
194.71.83.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.71.168.0/24 maxlen: 24
194.103.50.0/24 maxlen: 24
194.132.108.0/23 maxlen: 24
194.132.174.0/24 maxlen: 24
194.132.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 07:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:93:e7:16:fc:07:fa:81:d2:15:40:18:b0:17:fa:bd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 14 09:05:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bf94f3e3b290d9204133622164514a5f68a7ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:ab:2c:54:4a:f1:b2:b3:2b:0d:89:95:ec:
79:42:52:46:4e:48:48:db:cc:87:b8:bb:36:f7:ca:
e5:62:19:5a:5b:d9:4d:ce:dd:7c:94:fc:2a:dc:c9:
5a:85:f2:12:0a:ca:d9:94:3a:4b:07:1b:e6:a5:f6:
95:df:13:99:33:b3:95:6b:f4:0d:e6:40:10:2f:9a:
6d:53:67:d9:9d:64:a4:4f:14:c9:be:c2:14:6b:0b:
5f:3f:0e:77:41:6a:73:0d:0a:fd:9d:97:25:9f:4f:
fe:27:f7:57:fd:9a:4a:d7:f4:e9:df:71:64:31:76:
fb:61:7a:6c:92:45:61:54:7e:3b:8a:c9:37:e9:98:
f3:a8:1f:69:b7:40:90:28:8d:78:fd:2e:1b:c2:d9:
15:90:e5:28:d7:23:21:d9:4a:fb:a4:c7:8e:ad:82:
00:64:b6:ed:72:af:c4:b2:ef:57:be:21:e0:c3:3d:
e2:0d:8a:d7:32:4c:52:44:c0:42:6e:47:36:94:fa:
18:90:62:7d:2b:44:6f:7a:41:51:15:fc:d4:f1:64:
2b:a0:b1:2a:69:03:26:d5:57:6e:1a:32:82:eb:54:
79:1f:cd:dc:e7:45:3a:6d:23:b0:9e:a8:2e:ec:4a:
ae:8c:95:91:0b:b0:1d:e4:d3:47:5f:ba:1f:f5:64:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:4F:3E:3B:29:0D:92:04:13:36:22:16:45:14:A5:F6:8A:7E:D1
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/W_lPPjspDZIEEzYiFkUUpfaKftE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.37.0/24
192.71.97.0/24
192.71.158.0/24
192.121.21.0/24
192.121.172.0/24
192.121.192.0/24
192.165.65.0/24
192.165.86.0/24
192.176.161.0/24
193.180.61.0/24
193.181.0.0/24
193.181.187.0/24
193.183.3.0/24
193.183.68.0/23
193.183.79.0/24
193.183.92.0/23
193.183.104.0/24
193.183.118.0/24
193.234.68.0/23
193.234.220.0/23
193.234.237.0/24
193.235.142.0/23
194.14.129.0/24
194.14.212.0/24
194.68.56.0/23
194.68.99.0/24
194.68.126.0/24
194.68.194.0/23
194.71.27.0/24
194.71.83.0/24
194.71.140.0/23
194.71.168.0/24
194.103.50.0/24
194.132.108.0/23
194.132.174.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:3a:cf:20:4c:c7:64:0f:3d:5a:75:26:06:e0:5d:6e:10:b3:
1e:c1:48:6d:e9:a7:15:b0:c0:99:66:21:67:53:44:d4:cb:b5:
ae:66:d7:45:96:d0:4e:01:47:61:b0:fb:a7:14:28:44:25:de:
ce:78:6f:a0:33:75:e2:ca:ed:9e:0d:15:6b:05:1f:8a:fb:88:
08:e4:7a:57:a5:7c:de:0e:f6:50:8e:aa:e7:f9:93:26:e4:e2:
d5:5f:06:3a:19:99:fb:68:15:2b:be:b8:56:2a:05:30:73:a7:
b2:5b:fc:3b:92:37:02:ec:18:7b:e2:f2:fb:6d:cc:6b:fd:a4:
ae:34:a2:c6:99:7e:53:e8:cf:4c:55:81:54:c8:ea:fc:9a:2e:
d0:1f:01:bd:41:72:86:98:d3:61:1d:76:fb:69:2d:4c:32:76:
fd:26:e7:e6:5c:fa:7e:14:f2:47:fa:f0:08:cb:9e:88:8f:ab:
01:9a:a5:ce:24:bf:42:9d:18:d6:7a:b3:1e:32:20:21:01:69:
5e:42:11:68:6b:39:22:bb:a0:c0:4b:b7:73:b6:f0:62:2f:67:
c5:c7:6f:59:ca:a8:db:58:bb:44:06:d2:de:b7:3b:aa:b6:ab:
b9:3a:48:ef:64:d7:24:cb:32:ee:98:02:32:01:b5:cc:cd:af:
7e:b9:a3:a7
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgISAZWT5xb8B/qB0hVAGLAX+r2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMzE0MDkwNTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmY5NGYzZTNiMjkwZDkyMDQxMzM2MjIxNjQ1MTRhNWY2OGE3ZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/urLFRK8bKzKw2Jlex5QlJGTkhI
28yHuLs298rlYhlaW9lNzt18lPwq3MlahfISCsrZlDpLBxvmpfaV3xOZM7OVa/QN
5kAQL5ptU2fZnWSkTxTJvsIUawtfPw53QWpzDQr9nZcln0/+J/dX/ZpK1/Tp33Fk
MXb7YXpskkVhVH47isk36ZjzqB9pt0CQKI14/S4bwtkVkOUo1yMh2Ur7pMeOrYIA
ZLbtcq/Esu9XviHgwz3iDYrXMkxSRMBCbkc2lPoYkGJ9K0RvekFRFfzU8WQroLEq
aQMm1VduGjKC61R5H83c50U6bSOwnqgu7EqujJWRC7Ad5NNHX7of9WSfkwIDAQAB
o4IC2jCCAtYwHQYDVR0OBBYEFFv5Tz47KQ2SBBM2IhZFFKX2in7RMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvV19sUFBqc3BEWklFRXpZaUZrVVVwZmFLZnRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHvBggrBgEFBQcBBwEB/wSB3zCB3DCB2QQCAAEwgdIDBADA
JCUDBADAR2EDBADAR54DBADAeRUDBADAeawDBADAecADBADApUEDBADApVYDBADA
sKEDBADBtD0DBADBtQADBADBtbsDBADBtwMDBAHBt0QDBADBt08DBAHBt1wDBADB
t2gDBADBt3YDBAHB6kQDBAHB6twDBADB6u0DBAHB644DBADCDoEDBADCDtQDBAHC
RDgDBADCRGMDBADCRH4DBAHCRMIDBADCRxsDBADCR1MDBAHCR4wDBADCR6gDBADC
ZzIDBAHChGwDBAHChK4wDQYJKoZIhvcNAQELBQADggEBACs6zyBMx2QPPVp1Jgbg
XW4Qsx7BSG3ppxWwwJlmIWdTRNTLta5m10WW0E4BR2Gw+6cUKEQl3s54b6AzdeLK
7Z4NFWsFH4r7iAjkelelfN4O9lCOquf5kybk4tVfBjoZmftoFSu+uFYqBTBzp7Jb
/DuSNwLsGHvi8vttzGv9pK40osaZflPoz0xVgVTI6vyaLtAfAb1BcoaY02Eddvtp
LUwydv0m5+Zc+n4U8kf68AjLnoiPqwGapc4kv0KdGNZ6sx4yICEBaV5CEWhrOSK7
oMBLt3O28GIvZ8XHb1nKqNtYu0QG0t63O6q2q7k6SO9k1yTLMu6YAjIBtczNr365
o6c=
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:33:05 2025 by rpki-client