Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/h5dB6QZFU_Z_T1jwd6FpEoEvhYU.roa
File: h5dB6QZFU_Z_T1jwd6FpEoEvhYU.roa (raw, json)
Hash identifier: 3BBOY/UMMTW2ZxVdFM/JYRAlRXOWk2lnaOw8yarz+ns=
Subject key identifier: 87:97:41:E9:06:45:53:F6:7F:4F:58:F0:77:A1:69:12:81:2F:85:85
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 0191EA176C5D2FA9FEE11F101A1EED52B13B
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/h5dB6QZFU_Z_T1jwd6FpEoEvhYU.roa
Signing time: Fri 13 Sep 2024 06:34:49 +0000
ROA not before: Fri 13 Sep 2024 06:34:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 83.166.205.0/24 maxlen: 24
83.166.208.0/24 maxlen: 24
83.166.216.0/24 maxlen: 24
84.247.78.0/24 maxlen: 24
84.247.111.0/24 maxlen: 24
84.247.112.0/24 maxlen: 24
84.247.113.0/24 maxlen: 24
84.247.114.0/24 maxlen: 24
84.247.115.0/24 maxlen: 24
84.247.117.0/24 maxlen: 24
84.247.118.0/24 maxlen: 24
84.247.119.0/24 maxlen: 24
84.247.121.0/24 maxlen: 24
89.149.14.0/24 maxlen: 24
89.149.15.0/24 maxlen: 24
89.149.16.0/24 maxlen: 24
89.149.17.0/24 maxlen: 24
89.149.18.0/24 maxlen: 24
89.149.22.0/24 maxlen: 24
89.149.26.0/24 maxlen: 24
89.149.37.0/24 maxlen: 24
89.149.38.0/24 maxlen: 24
89.149.39.0/24 maxlen: 24
89.149.40.0/24 maxlen: 24
89.149.41.0/24 maxlen: 24
89.149.42.0/24 maxlen: 24
89.149.43.0/24 maxlen: 24
89.149.44.0/24 maxlen: 24
89.149.45.0/24 maxlen: 24
89.149.46.0/24 maxlen: 24
89.149.47.0/24 maxlen: 24
89.149.48.0/24 maxlen: 24
89.149.52.0/24 maxlen: 24
89.149.53.0/24 maxlen: 24
89.149.56.0/24 maxlen: 24
89.149.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:17:6c:5d:2f:a9:fe:e1:1f:10:1a:1e:ed:52:b1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Sep 13 06:34:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=879741e9064553f67f4f58f077a16912812f8585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:b5:37:a9:e1:02:1b:ef:5b:f6:23:5b:b0:
31:31:9b:ec:b9:7f:05:d3:20:cf:a2:48:9b:4b:6c:
1b:60:a8:4d:93:bd:db:db:57:9e:55:15:fc:6a:dc:
fe:b3:51:11:bd:d8:e8:ac:53:4d:65:22:ae:c3:6c:
98:07:31:67:c4:48:94:67:f2:cd:d0:70:5c:79:dc:
f5:e1:94:93:88:47:9c:02:26:95:0d:24:85:c7:d3:
3c:ca:ab:c8:f0:71:41:61:c4:4e:3b:2f:cf:24:33:
32:11:c0:09:48:29:e0:5c:c2:9a:f7:cb:4e:02:a1:
e7:ce:f6:05:f9:e4:68:33:5b:78:55:53:9b:91:c6:
4a:1a:5f:e1:29:ea:d1:f7:a2:c4:c4:b6:6a:78:39:
de:f2:a2:37:aa:4d:ed:17:bd:4a:3d:f5:64:91:24:
1b:f4:57:72:a1:40:fd:b0:10:38:fb:09:f4:e8:0a:
23:4c:c3:01:ba:44:79:fb:53:e6:57:b5:bc:2a:35:
c9:26:b4:44:bd:21:88:21:99:b5:af:c5:8c:4d:73:
1b:a7:52:2d:f5:7f:41:4a:91:34:c0:ed:1b:7f:b4:
ef:76:90:13:aa:90:c4:96:4a:55:45:f1:cc:16:28:
cb:f0:be:4f:33:07:e7:3b:34:17:8a:60:fe:6f:af:
cc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:97:41:E9:06:45:53:F6:7F:4F:58:F0:77:A1:69:12:81:2F:85:85
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/h5dB6QZFU_Z_T1jwd6FpEoEvhYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.166.205.0/24
83.166.208.0/24
83.166.216.0/24
84.247.78.0/24
84.247.111.0-84.247.115.255
84.247.117.0-84.247.119.255
84.247.121.0/24
89.149.14.0-89.149.18.255
89.149.22.0/24
89.149.26.0/24
89.149.37.0-89.149.48.255
89.149.52.0/23
89.149.56.0/24
89.149.62.0/24
Signature Algorithm: sha256WithRSAEncryption
92:00:25:2e:14:49:a7:28:a8:8f:32:98:77:de:bd:be:20:69:
24:87:83:9a:da:9c:d3:11:96:29:cd:48:34:4f:0d:41:68:f1:
b3:28:4c:f5:ec:92:31:52:0d:c4:52:35:b1:34:5c:3c:56:56:
f4:fa:1b:eb:2f:83:94:9c:89:a8:f3:51:66:b3:04:1a:d7:0b:
e2:3e:d4:c7:ed:a0:25:b9:1f:8f:1f:b6:79:2c:4a:8d:66:7f:
d7:d4:a4:4d:b9:2f:e4:e5:9f:f6:53:ab:4e:f1:78:79:17:0e:
4a:a5:83:02:6c:cf:68:2b:bd:c4:c9:82:ad:92:a1:16:d5:0a:
5f:ea:e3:c7:ee:a3:f6:17:6c:55:7e:ab:3e:f2:b1:61:16:21:
ab:e5:3e:b0:86:16:50:56:08:d0:c2:7c:db:1e:c7:f2:cc:d5:
89:72:af:37:67:bc:c5:52:8a:74:9b:a1:56:e1:16:65:96:20:
ba:35:1c:4e:38:95:0f:d0:e6:6a:7b:e8:d4:44:57:99:d4:e3:
fa:91:ef:cd:fe:e7:9d:d0:5a:d6:27:fc:d1:14:38:da:33:5d:
2f:76:51:d9:ef:55:13:50:62:c6:b6:b4:c1:62:4a:1d:9b:3c:
86:b1:3f:6a:47:be:b4:7d:25:9f:dd:70:d4:0e:ff:0c:e7:d6:
dd:46:ba:e4
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAZHqF2xdL6n+4R8QGh7tUrE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm
YzQ1ODIwHhcNMjQwOTEzMDYzNDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Nzk3NDFlOTA2NDU1M2Y2N2Y0ZjU4ZjA3N2ExNjkxMjgxMmY4NTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveq1N6nhAhvvW/YjW7AxMZvsuX8F
0yDPokibS2wbYKhNk73b21eeVRX8atz+s1ERvdjorFNNZSKuw2yYBzFnxEiUZ/LN
0HBcedz14ZSTiEecAiaVDSSFx9M8yqvI8HFBYcROOy/PJDMyEcAJSCngXMKa98tO
AqHnzvYF+eRoM1t4VVObkcZKGl/hKerR96LExLZqeDne8qI3qk3tF71KPfVkkSQb
9FdyoUD9sBA4+wn06AojTMMBukR5+1PmV7W8KjXJJrREvSGIIZm1r8WMTXMbp1It
9X9BSpE0wO0bf7TvdpATqpDElkpVRfHMFijL8L5PMwfnOzQXimD+b6/MFwIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFIeXQekGRVP2f09Y8HehaRKBL4WFMB8GA1UdIwQY
MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt
MjhhODQxZGEwYmZkLzEvaDVkQjZRWkZVX1pfVDFqd2Q2RnBFb0V2aFlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk
LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAFOmzQME
AFOm0AMEAFOm2AMEAFT3TjAMAwQAVPdvAwQCVPdwMAwDBABU93UDBANU93ADBABU
93kwDAMEAVmVDgMEAFmVEgMEAFmVFgMEAFmVGjAMAwQAWZUlAwQAWZUwAwQBWZU0
AwQAWZU4AwQAWZU+MA0GCSqGSIb3DQEBCwUAA4IBAQCSACUuFEmnKKiPMph33r2+
IGkkh4Oa2pzTEZYpzUg0Tw1BaPGzKEz17JIxUg3EUjWxNFw8Vlb0+hvrL4OUnImo
81FmswQa1wviPtTH7aAluR+PH7Z5LEqNZn/X1KRNuS/k5Z/2U6tO8Xh5Fw5KpYMC
bM9oK73EyYKtkqEW1Qpf6uPH7qP2F2xVfqs+8rFhFiGr5T6whhZQVgjQwnzbHsfy
zNWJcq83Z7zFUop0m6FW4RZlliC6NRxOOJUP0OZqe+jURFeZ1OP6ke/N/ued0FrW
J/zRFDjaM10vdlHZ71UTUGLGtrTBYkodmzyGsT9qR760fSWf3XDUDv8M59bdRrrk
-----END CERTIFICATE-----
Generated at Thu Sep 19 17:01:53 2024 by rpki-client on console-ams.rpki-client.org