Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/1-SlIGxzu2xBDpnmv5nG2Nod9ONg.roa
File: 1-SlIGxzu2xBDpnmv5nG2Nod9ONg.roa (raw, json)
Hash identifier: 4L/Epc/EIAUla0V8ZO9PSM7mXOxPHKOfim5wiMCaNrA=
Subject key identifier: F9:29:48:1B:1C:EE:DB:10:43:A6:79:AF:E6:71:B6:36:87:7D:38:D8
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 018C034066B63BC9EBE501AEA76FE3CAAA0C
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/1-SlIGxzu2xBDpnmv5nG2Nod9ONg.roa
Signing time: Fri 24 Nov 2023 21:33:21 +0000
ROA not before: Fri 24 Nov 2023 21:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8400
IP address blocks: 178.220.0.0/15 maxlen: 15
109.92.0.0/15 maxlen: 15
93.87.0.0/16 maxlen: 16
178.223.128.0/18 maxlen: 18
93.87.38.0/24 maxlen: 24
109.122.77.0/24 maxlen: 24
77.46.128.0/17 maxlen: 17
212.200.52.0/24 maxlen: 24
79.101.0.0/16 maxlen: 16
212.200.0.0/21 maxlen: 21
212.200.0.0/17 maxlen: 17
93.87.39.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
93.87.50.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
93.87.58.0/24 maxlen: 24
178.222.0.0/16 maxlen: 16
178.223.192.0/19 maxlen: 19
212.200.51.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.45.0/24 maxlen: 24
185.190.152.0/22 maxlen: 22
212.200.192.0/19 maxlen: 19
91.150.64.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.66.0/24 maxlen: 24
79.101.21.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.132.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
93.86.0.0/16 maxlen: 16
93.86.0.0/15 maxlen: 15
178.223.0.0/17 maxlen: 17
91.150.91.0/24 maxlen: 24
212.200.224.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.225.0/24 maxlen: 24
212.200.232.0/21 maxlen: 21
212.200.228.0/22 maxlen: 22
212.200.240.0/20 maxlen: 20
2a06:63c0::/29 maxlen: 29
2a00:e90::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 11 Dec 2023 06:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:03:40:66:b6:3b:c9:eb:e5:01:ae:a7:6f:e3:ca:aa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Nov 24 21:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f929481b1ceedb1043a679afe671b636877d38d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:70:e7:bf:40:a8:44:55:61:d6:73:76:2a:3d:
30:06:54:76:08:37:7e:4e:ac:83:9f:b6:94:69:5e:
88:55:31:5c:15:c0:17:15:53:f9:ea:1a:1a:a6:27:
a8:4a:60:0f:95:fd:37:68:be:46:29:e6:24:bc:02:
fc:65:07:f2:b7:a1:7a:ed:14:82:89:0a:05:ac:10:
9e:28:06:d6:6b:0d:76:ce:ee:14:be:76:5f:1a:9d:
8f:d7:09:1b:87:87:b0:17:01:de:cc:5b:18:31:f6:
60:8c:25:87:26:a4:ba:39:5d:94:d9:8c:35:31:bb:
4e:b6:2e:fa:e1:4a:c0:0a:0c:3f:07:43:35:5a:8e:
62:b2:17:40:23:b5:bd:a6:81:8f:08:a6:aa:9c:9d:
60:c7:74:e1:a4:09:38:bf:93:99:9c:fb:d9:83:e8:
23:fc:46:9d:31:b1:73:ad:cf:12:8a:60:86:28:7d:
0d:bd:3e:e1:01:d5:8c:cf:99:54:dd:49:6a:4b:20:
4f:0e:d4:5a:d2:a2:da:f3:ef:6c:00:16:e9:1a:61:
d9:10:3e:bb:db:0e:8e:7a:2d:7a:48:a7:29:14:41:
19:86:1f:87:92:aa:a3:ba:a9:91:cb:01:e4:fa:3b:
bb:6b:e1:e4:de:08:39:e2:36:c5:5c:0c:e5:c1:0d:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:29:48:1B:1C:EE:DB:10:43:A6:79:AF:E6:71:B6:36:87:7D:38:D8
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/1-SlIGxzu2xBDpnmv5nG2Nod9ONg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.46.128.0/17
79.101.0.0/16
91.150.64.0/18
93.86.0.0/15
109.92.0.0/15
109.122.77.0/24
178.220.0.0-178.223.223.255
185.190.152.0/22
195.178.32.0/19
212.200.0.0/16
IPv6:
2a00:e90::/32
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
85:6b:fc:2f:a8:1d:8d:fe:75:d9:d7:b8:60:1b:f7:72:1b:e6:
4f:6f:70:32:30:b1:18:89:03:b0:fb:73:cb:b2:ba:75:e4:88:
bd:5b:16:ca:d9:6d:21:f2:47:8c:27:90:d6:2d:f2:02:8d:c5:
91:72:59:4e:97:2d:86:80:7d:1e:16:37:2a:03:33:c9:37:e5:
6f:a8:8d:b8:61:56:b3:40:36:14:90:21:31:b7:82:eb:3c:35:
ab:fd:79:a2:f9:d0:45:42:82:31:5f:34:78:c7:10:ed:fe:1d:
ad:79:93:e5:3e:6d:fa:61:67:a0:d7:7f:6a:45:60:a1:85:9e:
d3:dc:72:91:cd:50:0c:0e:d0:43:54:2a:26:93:be:25:be:2d:
5f:93:1d:ac:63:29:04:cf:54:1f:70:43:05:40:a6:5f:4b:04:
af:ca:e1:32:35:bb:3c:05:9b:44:21:8a:c0:54:31:66:d0:67:
94:28:cc:42:19:7d:ed:b6:8d:53:de:14:06:66:4c:cd:6e:01:
bb:40:b6:bb:41:32:f4:0c:29:d1:79:38:a1:70:7a:82:46:30:
eb:0c:f4:61:82:ce:8b:cd:79:3a:92:b6:02:d1:9e:35:b2:ea:
19:d7:c9:6a:8e:0a:a8:fc:ac:08:d2:6b:9f:e9:c3:1b:80:4a:
4c:a1:88:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:32 2024 by rpki-client on console-fra.rpki-client.org