Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/A8e9-EhnTrzQ9SNRJCsdcwOmqG4.roa
File: A8e9-EhnTrzQ9SNRJCsdcwOmqG4.roa (raw, json)
Hash identifier: d7CmUVxqi9WD1qhcNyxGn/wSCHdkx1sFiDK4Nx6flfs=
Subject key identifier: 03:C7:BD:F8:48:67:4E:BC:D0:F5:23:51:24:2B:1D:73:03:A6:A8:6E
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 018CC5001B0E34114F8D0DA69C9F1D7974F2
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/A8e9-EhnTrzQ9SNRJCsdcwOmqG4.roa
Signing time: Mon 01 Jan 2024 12:29:27 +0000
ROA not before: Mon 01 Jan 2024 12:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 178.220.0.0/15 maxlen: 15
109.92.0.0/15 maxlen: 15
93.87.0.0/16 maxlen: 16
178.223.128.0/18 maxlen: 18
93.87.38.0/24 maxlen: 24
109.122.77.0/24 maxlen: 24
77.46.128.0/17 maxlen: 17
212.200.52.0/24 maxlen: 24
5.154.225.0/24 maxlen: 24
79.101.0.0/16 maxlen: 16
212.200.0.0/21 maxlen: 21
212.200.0.0/17 maxlen: 17
93.87.39.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
93.87.50.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
93.87.58.0/24 maxlen: 24
178.222.0.0/16 maxlen: 16
178.223.192.0/19 maxlen: 19
212.200.51.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.45.0/24 maxlen: 24
185.190.152.0/22 maxlen: 22
212.200.192.0/19 maxlen: 19
91.150.64.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.66.0/24 maxlen: 24
79.101.21.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.132.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
93.86.0.0/16 maxlen: 16
93.86.0.0/15 maxlen: 15
178.223.0.0/17 maxlen: 17
91.150.91.0/24 maxlen: 24
212.200.224.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.225.0/24 maxlen: 24
212.200.232.0/21 maxlen: 21
212.200.228.0/22 maxlen: 22
212.200.240.0/20 maxlen: 20
2a06:63c0::/29 maxlen: 29
2a00:e90::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 Jan 2024 13:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1b:0e:34:11:4f:8d:0d:a6:9c:9f:1d:79:74:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03c7bdf848674ebcd0f52351242b1d7303a6a86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:af:65:d5:2b:2a:b3:da:8a:0e:b5:cc:9a:
d5:93:e7:56:d0:8c:f1:93:25:5c:26:1c:25:dd:07:
34:5a:63:d5:51:de:59:5e:8e:1c:1c:ad:a0:78:a5:
85:69:f5:f3:20:5d:54:cd:e2:39:63:b8:fc:b3:60:
e6:2b:9a:c9:10:e2:5b:75:5a:14:57:be:77:93:48:
2a:50:ed:98:08:e5:50:d8:67:eb:86:39:8c:4c:03:
8d:30:20:f3:8d:04:b3:eb:e9:4c:42:6e:49:9f:83:
c3:a4:a2:a5:98:4a:fb:fc:2c:3c:fd:ed:b0:47:a2:
81:64:54:f6:b5:09:46:6e:c0:eb:fd:89:43:4f:ac:
6d:8c:15:95:a3:b6:59:0b:fc:1f:a3:68:da:82:e5:
b1:95:db:03:d1:17:09:ad:46:a9:af:97:eb:0f:a3:
b1:55:d0:45:95:dd:ab:8f:f6:2e:f8:ea:be:ac:37:
01:17:fa:a8:58:43:2e:51:78:14:75:e1:25:e6:84:
d2:ac:9d:4a:6c:d3:18:e8:73:21:1c:13:ca:12:a9:
e7:c9:40:19:93:08:0a:f8:4f:5d:fd:44:c7:dd:4b:
8d:f4:02:3f:f1:a1:ce:ca:6b:4c:ed:9e:1c:5b:b9:
07:a3:79:26:2c:95:c3:77:5e:ac:eb:8a:2a:0d:52:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C7:BD:F8:48:67:4E:BC:D0:F5:23:51:24:2B:1D:73:03:A6:A8:6E
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/A8e9-EhnTrzQ9SNRJCsdcwOmqG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
77.46.128.0/17
79.101.0.0/16
91.150.64.0/18
93.86.0.0/15
109.92.0.0/15
109.122.77.0/24
178.220.0.0-178.223.223.255
185.190.152.0/22
195.178.32.0/19
212.200.0.0/16
IPv6:
2a00:e90::/32
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
13:ee:d3:3e:de:b5:ed:db:85:a8:6d:1f:3b:b5:d5:e9:64:ea:
30:91:09:33:ee:ff:80:8c:85:cc:3d:7f:b4:b1:71:c6:c8:89:
f0:8e:ed:6e:18:39:fb:f4:aa:a9:00:bc:b3:ad:d6:17:33:d1:
3d:aa:17:6f:8d:e9:68:47:82:88:d8:ea:60:b5:3e:cd:9b:7e:
a2:75:18:70:02:78:47:02:e9:84:3d:dd:6c:70:45:b1:c5:dd:
b5:e0:92:b0:f0:fa:18:f2:fd:8a:ab:fd:5c:d7:6b:69:8d:04:
d4:1d:25:ac:f3:65:d7:60:12:7b:1b:f6:ec:1a:37:ff:90:71:
49:10:41:70:94:8e:66:c5:98:61:0c:d6:6d:69:50:9f:02:cb:
bc:02:2d:f0:84:f7:60:72:fe:4c:02:65:42:98:9e:71:d3:43:
2d:8c:5b:0e:e1:2b:fe:09:cd:8e:2f:63:38:34:ca:33:07:39:
8c:8d:aa:e9:07:df:5d:b6:bf:cd:a0:c7:91:f9:9c:0a:00:fc:
7c:0a:02:cc:5d:44:4b:66:0a:fe:86:f7:9e:a8:f3:d0:2c:7e:
9d:7a:f3:9b:73:bc:89:33:2b:93:a2:57:65:bd:bb:62:e4:f0:
52:b1:63:30:a8:17:e2:e4:90:79:b7:b2:79:51:e4:0a:a3:dd:
ec:ae:dd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:02 2024 by rpki-client on console-ams.rpki-client.org