Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/am0dWrkhSF4YSghuCN3rbU80-Hw.roa
File: am0dWrkhSF4YSghuCN3rbU80-Hw.roa (raw, json)
Hash identifier: HuNQMQ2g6i5+yDIIwf+TDzto7NLA0M6mq3IbG/TZKzY=
Subject key identifier: 6A:6D:1D:5A:B9:21:48:5E:18:4A:08:6E:08:DD:EB:6D:4F:34:F8:7C
Certificate issuer: /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial: 018CC793414F58FF96C3E82E3D0C355A30C4
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/am0dWrkhSF4YSghuCN3rbU80-Hw.roa
Signing time: Tue 02 Jan 2024 00:29:25 +0000
ROA not before: Tue 02 Jan 2024 00:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9146
IP address blocks: 195.222.32.0/19 maxlen: 21
195.222.32.0/20 maxlen: 20
195.222.32.0/21 maxlen: 21
195.222.40.0/21 maxlen: 21
109.175.0.0/17 maxlen: 21
109.175.4.0/23 maxlen: 23
109.175.8.0/24 maxlen: 24
195.222.49.0/24 maxlen: 24
195.222.48.0/20 maxlen: 20
109.175.6.0/23 maxlen: 23
195.222.48.0/21 maxlen: 21
109.175.12.0/23 maxlen: 23
109.175.14.0/23 maxlen: 23
109.175.15.0/24 maxlen: 24
195.222.56.0/21 maxlen: 21
109.175.16.0/22 maxlen: 22
109.175.24.0/24 maxlen: 24
109.175.22.0/23 maxlen: 23
109.175.20.0/23 maxlen: 23
109.175.26.0/24 maxlen: 24
109.175.28.0/23 maxlen: 23
109.175.30.0/24 maxlen: 24
85.92.226.0/24 maxlen: 24
85.92.224.0/19 maxlen: 21
85.92.227.0/24 maxlen: 24
85.92.230.0/24 maxlen: 24
85.92.228.0/23 maxlen: 23
185.12.76.0/24 maxlen: 24
185.12.78.0/23 maxlen: 23
80.65.64.0/19 maxlen: 21
80.65.64.0/21 maxlen: 21
80.65.64.0/22 maxlen: 22
89.146.128.0/18 maxlen: 21
80.65.68.0/22 maxlen: 22
80.65.72.0/22 maxlen: 22
80.65.72.0/21 maxlen: 21
80.65.76.0/22 maxlen: 22
80.65.80.0/21 maxlen: 21
80.65.80.0/22 maxlen: 22
80.65.84.0/22 maxlen: 22
80.65.88.0/21 maxlen: 21
80.65.88.0/22 maxlen: 22
80.65.92.0/22 maxlen: 22
92.36.128.0/17 maxlen: 21
92.36.232.0/22 maxlen: 22
92.36.236.0/22 maxlen: 22
92.36.192.0/21 maxlen: 21
109.163.147.0/24 maxlen: 24
109.163.148.0/22 maxlen: 22
109.163.152.0/21 maxlen: 21
109.163.146.0/24 maxlen: 24
109.163.160.0/20 maxlen: 20
109.163.160.0/21 maxlen: 21
109.163.170.0/24 maxlen: 24
109.163.168.0/23 maxlen: 23
109.163.168.0/21 maxlen: 23
109.163.172.0/22 maxlen: 22
109.163.171.0/24 maxlen: 24
109.163.176.0/21 maxlen: 21
109.163.176.0/20 maxlen: 21
109.163.184.0/21 maxlen: 21
109.163.184.0/22 maxlen: 22
109.163.190.0/23 maxlen: 23
109.163.188.0/23 maxlen: 23
31.176.216.0/22 maxlen: 22
31.176.220.0/22 maxlen: 22
109.163.128.0/22 maxlen: 22
109.163.128.0/19 maxlen: 19
109.163.128.0/18 maxlen: 18
109.163.132.0/22 maxlen: 22
109.163.136.0/21 maxlen: 21
109.163.144.0/23 maxlen: 23
37.203.64.0/18 maxlen: 21
31.176.160.0/20 maxlen: 20
31.176.176.0/20 maxlen: 20
37.203.112.0/22 maxlen: 22
31.176.128.0/20 maxlen: 20
31.176.128.0/17 maxlen: 21
37.203.120.0/22 maxlen: 22
37.203.124.0/22 maxlen: 22
31.176.144.0/20 maxlen: 20
109.175.98.0/23 maxlen: 23
109.175.96.0/22 maxlen: 22
109.175.96.0/23 maxlen: 23
109.175.100.0/22 maxlen: 22
109.175.102.0/23 maxlen: 23
109.175.100.0/23 maxlen: 23
109.175.104.0/22 maxlen: 22
109.175.104.0/23 maxlen: 23
109.175.108.0/22 maxlen: 22
109.175.112.0/22 maxlen: 22
109.175.106.0/23 maxlen: 23
109.175.116.0/22 maxlen: 22
109.175.120.0/22 maxlen: 22
109.175.124.0/22 maxlen: 22
109.175.40.0/22 maxlen: 22
109.175.44.0/23 maxlen: 23
109.175.46.0/23 maxlen: 23
2a02:27b0:5300::/40 maxlen: 40
2a02:27b0::/32 maxlen: 32
2a02:27b0:4100::/40 maxlen: 40
2a02:27b0:4b00::/40 maxlen: 40
2a02:27b0:4500::/40 maxlen: 40
2a02:27b0:4400::/40 maxlen: 40
2a02:27b0:4d00::/40 maxlen: 40
2a02:27b0:4a00::/40 maxlen: 40
2a02:27b0:5500::/40 maxlen: 40
2a02:27b0:4900::/40 maxlen: 40
2a02:27b0:4300::/40 maxlen: 40
2a02:27b0:4800::/40 maxlen: 40
2a02:27b0:4c00::/40 maxlen: 40
2a02:27b0:4200::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 26 Feb 2024 08:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:41:4f:58:ff:96:c3:e8:2e:3d:0c:35:5a:30:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Validity
Not Before: Jan 2 00:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a6d1d5ab921485e184a086e08ddeb6d4f34f87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:35:a8:7e:76:f2:43:9a:0e:d3:41:13:e5:e2:
7f:8b:03:dd:17:5a:23:de:ee:16:2d:83:43:3b:24:
ae:cf:9c:08:43:f0:b2:a6:cf:21:40:88:34:87:bf:
8b:fd:f6:4c:5c:6f:4a:51:2c:48:22:6e:5b:ae:bc:
ce:12:05:02:90:77:c0:0f:ec:a1:8b:b5:d1:95:b3:
f6:a8:69:a7:49:8d:fa:80:15:09:02:f9:9f:54:e2:
fc:3d:c1:b8:52:d0:98:f6:76:fc:20:99:83:ae:06:
44:d0:64:2c:b4:cb:5e:62:5e:08:26:8c:95:96:38:
fe:cd:b0:46:0f:95:4a:1e:8c:d1:04:64:49:32:91:
d7:0d:a9:20:a5:51:de:c5:0e:c4:f5:ac:f4:43:7f:
53:37:77:87:84:5c:0a:42:cb:b4:a7:90:85:de:f0:
f0:42:63:a8:d1:3b:6e:b5:d5:b0:89:27:e1:ca:cc:
b0:82:1f:f5:c2:0c:6d:dd:34:8e:5d:4d:bc:cb:39:
dc:cc:6d:6f:1a:c1:90:b5:51:a6:10:1d:98:26:f3:
23:25:e1:b8:2c:ca:0d:12:f7:66:76:8c:59:47:af:
7a:c6:cc:17:4e:63:c2:5a:ff:cc:92:98:25:55:8f:
da:00:33:0a:17:84:02:24:b1:4a:dd:e4:01:5a:86:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:1D:5A:B9:21:48:5E:18:4A:08:6E:08:DD:EB:6D:4F:34:F8:7C
X509v3 Authority Key Identifier:
keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/am0dWrkhSF4YSghuCN3rbU80-Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.176.128.0/17
37.203.64.0/18
80.65.64.0/19
85.92.224.0/19
89.146.128.0/18
92.36.128.0/17
109.163.128.0/18
109.175.0.0/17
185.12.76.0/24
185.12.78.0/23
195.222.32.0/19
IPv6:
2a02:27b0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:92:b6:c1:58:55:17:3e:67:48:36:f7:cc:da:2d:57:5f:1d:
db:b4:0a:9a:97:18:26:74:fd:04:d0:31:11:83:8d:47:0b:9a:
bf:be:d0:9b:8f:40:5f:a5:36:86:2a:1a:b5:ff:1a:65:f0:29:
40:4a:81:cb:9b:b8:70:62:f4:84:f9:63:2b:e3:f8:d0:87:3a:
97:86:1e:ee:23:e2:52:a9:57:1c:bb:bf:05:3e:96:a0:8f:20:
a8:82:3f:57:d6:1c:36:25:33:f0:5e:d0:7f:07:5a:cf:2c:c6:
c9:b7:bc:c2:38:71:2a:07:76:85:68:b1:55:a4:63:61:c9:06:
b9:39:e8:37:bf:ef:70:97:b6:ac:b9:35:c2:9e:70:1c:8f:04:
fe:41:b8:61:1f:52:b9:f9:25:39:b9:85:75:6f:11:cd:2a:c7:
9c:b1:2a:8c:ca:ab:53:fa:68:83:27:f0:4a:b2:ae:b9:36:01:
f4:8d:7e:19:d3:81:dc:2f:06:b9:d3:1c:ec:66:9a:72:cd:7c:
31:c9:a2:9a:07:79:ff:37:de:60:c5:f9:0f:66:42:e3:46:81:
e6:4c:8a:cc:d2:65:e3:f9:2a:af:de:26:b2:c1:52:2e:98:5d:
e4:1d:ba:05:63:f6:ab:3c:3b:d9:3d:84:7d:0a:1b:8f:de:b7:
9b:4a:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 11:26:09 2024 by rpki-client on console-ams.rpki-client.org