Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/9jFMKpswDFL9CuMaSoy7YHbIzVY.roa
File: 9jFMKpswDFL9CuMaSoy7YHbIzVY.roa (raw, json)
Hash identifier: XkaQvrcBh6p0ew5Yu4MAbgSqtu8M4DAbE0UMDce09P8=
Subject key identifier: F6:31:4C:2A:9B:30:0C:52:FD:0A:E3:1A:4A:8C:BB:60:76:C8:CD:56
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019190A119E2A540107D69C0504ACFE4D3CA
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/9jFMKpswDFL9CuMaSoy7YHbIzVY.roa
Signing time: Mon 26 Aug 2024 21:39:22 +0000
ROA not before: Mon 26 Aug 2024 21:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
62.101.128.0/20 maxlen: 20
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
109.92.0.0/15 maxlen: 15
109.122.77.0/24 maxlen: 24
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
185.71.88.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
195.178.32.0/19 maxlen: 19
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a06:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 29 Aug 2024 08:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:90:a1:19:e2:a5:40:10:7d:69:c0:50:4a:cf:e4:d3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Aug 26 21:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6314c2a9b300c52fd0ae31a4a8cbb6076c8cd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:91:8b:c6:e1:10:1b:d6:6d:ef:e6:00:17:
83:cf:9c:af:bf:40:68:c3:9b:ad:6d:eb:bc:98:5c:
4c:7d:33:76:42:09:b6:9d:ee:91:3c:b5:2a:34:ab:
49:db:cd:cb:45:09:e3:92:6d:57:41:db:67:ae:0a:
ae:68:b5:08:dc:42:88:59:9c:74:73:d6:83:3b:27:
3a:30:48:06:c7:68:1f:5f:49:92:b5:a8:2f:fa:7e:
b6:d4:b5:d7:fb:2d:91:fc:ac:52:8b:55:f6:0a:45:
e2:df:8a:ab:5e:a8:16:a6:f0:d5:c9:2e:b1:2b:20:
64:ef:8b:4f:24:97:b6:b8:9e:5d:cf:42:cc:54:7e:
cc:d0:bf:6a:d9:d8:f9:2e:40:91:a4:3a:52:ae:e1:
fd:19:4f:7a:07:3e:0c:9f:84:a3:15:30:d9:2b:2f:
dd:37:f8:73:ba:e9:4b:7d:de:e5:eb:ba:7a:f3:c2:
55:e1:97:d1:29:83:40:d4:59:f6:41:9d:4c:0c:52:
06:40:62:b9:3b:ed:a7:ee:c7:56:e1:2e:9d:e3:24:
ff:c8:1d:4b:24:0f:9c:62:16:5b:86:ad:7e:11:2f:
0a:d7:7b:01:6b:29:68:9e:eb:f4:18:8f:38:0e:ee:
78:3b:5c:d7:86:ea:11:f2:42:1d:90:ac:0e:f3:de:
b7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:31:4C:2A:9B:30:0C:52:FD:0A:E3:1A:4A:8C:BB:60:76:C8:CD:56
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/9jFMKpswDFL9CuMaSoy7YHbIzVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
62.101.128.0/20
77.46.128.0/17
79.101.0.0/16
89.39.144.0/23
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.244.128.0/19
93.86.0.0/15
109.92.0.0/15
109.122.77.0/24
178.220.0.0-178.223.223.255
185.71.88.0/22
185.190.152.0/22
195.178.32.0/19
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:4c:e0:cf:07:fb:26:b6:8a:af:bb:5b:96:fb:fc:b3:21:81:
35:3d:89:68:ec:62:59:f0:82:cc:a6:ca:65:01:8c:13:fb:8a:
ba:9c:66:10:a2:b2:ac:47:8d:9c:e9:b0:af:0e:54:8f:4b:ad:
3a:cc:90:dc:88:84:93:5f:5d:5b:05:ca:ce:c7:91:4c:60:7b:
83:01:ad:1a:47:3c:33:d1:7b:a1:96:c7:69:b1:a5:66:d4:2a:
36:4d:00:6b:56:4d:41:06:02:fc:28:9c:78:8b:1b:8a:74:bc:
d5:11:44:1b:6e:7c:79:34:04:35:c2:a8:fb:b7:65:da:b0:71:
77:15:0f:bc:03:c5:19:d5:93:35:02:ee:0f:19:db:d8:7b:87:
a4:5b:66:09:2f:68:66:15:75:44:b1:69:8c:ea:83:79:d8:c1:
09:32:e9:3f:29:6d:cf:ef:51:19:b6:1f:04:7e:da:ff:8a:84:
a3:e9:18:f1:05:1c:8e:41:44:0e:ef:39:87:96:7e:69:0c:3f:
4a:24:77:1e:96:4b:8f:8c:c9:ea:9d:69:16:0a:79:e0:79:f0:
5e:14:44:65:b1:22:a1:63:20:d5:5a:82:4a:a7:dd:c3:67:73:
e0:46:a3:20:b6:b1:ba:e5:93:71:e5:b9:08:34:78:60:9b:55:
78:2b:23:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 10:00:51 2024 by rpki-client on console-fra.rpki-client.org