Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/EQoPEa6asY6Mbp8b8Xxk61gxWCg.roa
File: EQoPEa6asY6Mbp8b8Xxk61gxWCg.roa (raw, json)
Hash identifier: 2FjPHtIFjxkS/wZQtsjapfz1QPE3YTke9uVDavmr2JU=
Subject key identifier: 11:0A:0F:11:AE:9A:B1:8E:8C:6E:9F:1B:F1:7C:64:EB:58:31:58:28
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 018D5FBECD5172C76633CA0E306298E875AC
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/EQoPEa6asY6Mbp8b8Xxk61gxWCg.roa
Signing time: Wed 31 Jan 2024 13:39:16 +0000
ROA not before: Wed 31 Jan 2024 13:39:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
62.101.128.0/20 maxlen: 20
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.21.0/24 maxlen: 24
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
109.92.0.0/15 maxlen: 15
109.122.77.0/24 maxlen: 24
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
185.190.152.0/22 maxlen: 22
195.178.32.0/19 maxlen: 19
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a06:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 20 Feb 2024 12:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:be:cd:51:72:c7:66:33:ca:0e:30:62:98:e8:75:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jan 31 13:39:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=110a0f11ae9ab18e8c6e9f1bf17c64eb58315828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:15:ff:5c:eb:f8:16:02:69:3f:ce:50:41:ed:
a8:ee:90:41:cd:65:ff:07:ab:0b:6a:2d:80:8c:49:
c5:66:ba:38:41:80:10:b9:7f:26:41:9d:0e:38:73:
42:a8:d3:03:ad:32:26:ab:19:7e:52:54:8c:18:5d:
e1:11:fa:6a:55:48:7f:ae:d0:53:36:60:d1:11:b0:
7b:bb:2d:7f:69:fa:8a:3b:7b:d8:cf:68:31:d0:cf:
c9:09:d5:eb:90:61:ca:3c:3a:c5:d9:20:25:8d:7e:
61:55:b2:e0:d2:ae:bc:90:1f:22:a4:3c:32:39:6c:
64:49:29:d7:38:f2:7c:8e:17:51:6d:c2:a9:51:14:
ef:09:1c:79:f2:78:b3:7e:20:87:da:a4:b5:ad:de:
1b:3c:85:b1:dc:05:10:7f:fa:07:b0:29:ec:90:bd:
79:e2:e4:21:f3:be:63:fa:b4:7a:4a:fe:f7:c9:47:
5d:90:cc:14:58:24:ae:41:a9:65:fb:55:5e:4d:69:
dc:ec:0d:65:81:33:c8:28:e8:4e:37:b7:92:89:c4:
3d:35:da:eb:3f:e9:87:be:d2:86:2c:47:5e:62:94:
09:71:ad:a8:08:7f:c5:bc:9d:b0:28:f4:12:ea:eb:
85:7e:00:09:e0:c9:33:85:6e:5b:08:ab:b5:bd:c3:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0A:0F:11:AE:9A:B1:8E:8C:6E:9F:1B:F1:7C:64:EB:58:31:58:28
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/EQoPEa6asY6Mbp8b8Xxk61gxWCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
62.101.128.0/20
77.46.128.0/17
79.101.0.0/16
91.150.64.0/18
93.86.0.0/15
109.92.0.0/15
109.122.77.0/24
178.220.0.0-178.223.223.255
185.190.152.0/22
195.178.32.0/19
212.200.0.0/16
IPv6:
2a00:e90::/32
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
64:76:08:66:02:1b:fb:18:fe:f9:c3:57:f5:3c:44:ea:2c:84:
9f:af:ee:55:d5:6b:aa:72:49:47:d8:ca:4f:17:30:5c:b0:b1:
68:b2:f3:67:d6:9d:c1:49:8b:a5:f4:1c:f5:5a:5e:bb:4d:09:
7b:8b:2e:77:0e:b8:d6:da:3c:c2:50:26:aa:84:2c:14:3b:20:
c7:79:a8:a7:e0:e8:68:1d:20:47:82:38:42:08:4a:91:44:c5:
80:3d:8f:62:6e:bd:aa:2a:85:69:28:a4:37:43:06:47:09:0e:
05:a5:7e:c6:34:94:8e:c6:8f:b7:da:fe:a9:7a:cb:21:ee:3e:
b9:6a:a1:32:a7:95:8a:a3:5d:ee:10:d0:df:1d:f9:26:08:67:
d5:b2:14:fe:0f:82:7b:f9:c5:c3:d1:1f:7b:16:64:80:45:29:
1e:81:b5:12:5f:ab:ea:cb:c6:94:4f:3f:e9:63:c5:40:68:fe:
4b:3e:e2:ed:1d:62:2d:76:ad:5a:2c:96:51:10:4f:70:29:12:
34:84:b8:0c:f5:7d:0b:38:3a:55:8f:58:ab:be:73:5f:39:37:
5c:2f:7d:df:0d:e4:24:3e:c0:2b:2d:b7:ec:80:b4:8f:f3:97:
2f:d4:9a:f5:6c:cf:84:74:59:e2:20:c7:ce:42:3a:2c:e5:60:
74:55:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:02 2024 by rpki-client on console-ams.rpki-client.org