Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/1---sGrxXmOhMOyWsrZwghCa9fgM.roa
File: 1---sGrxXmOhMOyWsrZwghCa9fgM.roa (raw, json)
Hash identifier: X28xcCI2YhEmGd0GeMCkUPXitgytmPYiyMw29tvXhsM=
Subject key identifier: FB:EF:AC:1A:BC:57:98:E8:4C:3B:25:AC:AD:9C:20:84:26:BD:7E:03
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 01919D4493C2916FCB037C3EDE9B79435F1B
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/1---sGrxXmOhMOyWsrZwghCa9fgM.roa
Signing time: Thu 29 Aug 2024 08:33:22 +0000
ROA not before: Thu 29 Aug 2024 08:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
62.101.128.0/20 maxlen: 20
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.122.77.0/24 maxlen: 24
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
185.71.88.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
195.178.32.0/19 maxlen: 19
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a06:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 29 Aug 2024 09:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:44:93:c2:91:6f:cb:03:7c:3e:de:9b:79:43:5f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Aug 29 08:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbefac1abc5798e84c3b25acad9c208426bd7e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:c6:d5:c6:ae:6c:ed:5e:6e:cd:2a:3c:14:
5b:e1:d8:3e:85:33:31:8a:8e:5d:b7:f9:fe:a3:de:
26:4a:8f:e5:93:05:ba:d7:d0:1d:c5:da:c5:88:b9:
0d:42:5e:1e:d2:2a:1d:c1:a2:4d:2e:a9:f8:87:ef:
1d:9a:17:59:0a:7c:d1:be:98:00:2b:ed:e1:55:74:
5d:2a:d2:3e:b6:15:89:3f:ff:7a:7f:cb:12:83:bc:
8a:5c:5b:ab:44:6d:cf:4a:b1:17:2b:e0:12:e5:30:
d6:87:ea:4a:19:71:93:82:a9:ba:c6:b4:a9:d0:fe:
b6:50:d0:c1:23:7f:81:a7:56:dc:f5:8e:38:b6:93:
80:1e:6f:22:63:3e:c6:82:b2:48:a9:09:d1:15:eb:
2d:f2:f9:17:7a:33:a5:28:a3:58:88:89:17:e5:03:
cc:a1:15:cb:65:55:51:ad:d0:4e:0c:59:af:04:c6:
29:25:70:0b:dc:40:df:f5:d6:71:fb:7f:c0:3b:9c:
a5:3e:0c:35:4d:9f:2b:a6:a3:6b:3b:b0:53:0b:0a:
7a:a0:de:d4:2d:94:e0:0f:45:88:17:e9:52:55:90:
64:65:2f:9c:d7:1f:dc:06:0a:6f:19:f1:cb:01:79:
a8:da:8c:55:20:47:20:02:e2:7b:8d:48:d4:91:36:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EF:AC:1A:BC:57:98:E8:4C:3B:25:AC:AD:9C:20:84:26:BD:7E:03
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/1---sGrxXmOhMOyWsrZwghCa9fgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
62.101.128.0/20
77.46.128.0/17
79.101.0.0/16
89.39.144.0/23
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.244.128.0/19
93.86.0.0/15
109.72.48.0/20
109.92.0.0/15
109.122.77.0/24
178.220.0.0-178.223.223.255
185.71.88.0/22
185.190.152.0/22
195.178.32.0/19
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
42:70:f9:d2:75:cc:e8:24:29:d7:eb:31:4a:66:6d:ca:f9:60:
11:ff:5e:48:cc:4a:32:69:87:c2:70:dd:fe:12:b3:14:c3:b3:
51:a3:f2:12:84:86:d7:26:47:8a:1a:1d:89:85:b8:f0:6f:6b:
5d:08:51:b3:60:25:ab:a8:02:61:fd:ee:af:a9:bc:ef:08:3b:
fa:a0:e3:ba:e0:9c:3d:4a:cd:1d:87:4f:79:d6:4d:0b:20:d7:
8a:d2:e6:e3:1e:3e:ef:25:c0:e1:3a:b7:a2:15:d1:f5:8b:98:
7c:60:dc:6b:67:97:4b:5b:0c:95:99:e9:a8:e8:1d:33:45:31:
a0:cf:e4:5d:fe:96:53:e8:ff:25:a1:b4:66:bb:2e:23:db:80:
11:b6:4f:0c:ed:51:e5:55:fd:f9:6f:8b:d9:e5:80:f6:3b:6e:
8e:87:42:66:69:0c:08:dc:12:e2:f4:24:41:ad:e2:40:ef:4c:
bf:1e:16:cf:ac:e8:84:53:5d:72:66:9c:62:22:36:31:51:31:
43:ae:db:13:fb:a3:35:d4:44:23:fa:a5:73:74:5b:e5:c9:6f:
c9:96:c7:be:3b:9b:f4:47:99:7e:b0:a5:ff:3b:8b:01:7c:5c:
62:97:8c:63:98:e5:97:43:13:a5:2b:69:00:04:54:d0:f7:4f:
33:2a:3c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 11:52:38 2024 by rpki-client on console-fra.rpki-client.org