Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/F2j02ONvLKQ-LR8htWXPsEuO-G8.roa
File: F2j02ONvLKQ-LR8htWXPsEuO-G8.roa (raw, json)
Hash identifier: Ct4hIcFSWoQHbTrrlD7/njF2PsCKvdWhfTzDgIULIoY=
Subject key identifier: 17:68:F4:D8:E3:6F:2C:A4:3E:2D:1F:21:B5:65:CF:B0:4B:8E:F8:6F
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 018B04BEC7A448119EC0B8AE096A26958C01
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/F2j02ONvLKQ-LR8htWXPsEuO-G8.roa
Signing time: Fri 06 Oct 2023 11:28:13 +0000
ROA not before: Fri 06 Oct 2023 11:28:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8400
IP address blocks: 109.92.0.0/15 maxlen: 15
178.220.0.0/15 maxlen: 15
178.223.128.0/18 maxlen: 18
93.87.38.0/24 maxlen: 24
77.46.128.0/17 maxlen: 17
212.200.52.0/24 maxlen: 24
79.101.0.0/16 maxlen: 16
212.200.0.0/21 maxlen: 21
212.200.0.0/17 maxlen: 17
93.87.39.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
93.87.50.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
93.87.58.0/24 maxlen: 24
178.222.0.0/16 maxlen: 16
178.223.192.0/19 maxlen: 19
212.200.51.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.45.0/24 maxlen: 24
185.190.152.0/22 maxlen: 22
212.200.192.0/19 maxlen: 19
91.150.64.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.66.0/24 maxlen: 24
79.101.21.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.132.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
93.86.0.0/15 maxlen: 15
178.223.0.0/17 maxlen: 17
91.150.91.0/24 maxlen: 24
212.200.224.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.225.0/24 maxlen: 24
212.200.232.0/21 maxlen: 21
212.200.228.0/22 maxlen: 22
212.200.240.0/20 maxlen: 20
2a06:63c0::/29 maxlen: 29
2a00:e90::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 18 Nov 2023 10:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:be:c7:a4:48:11:9e:c0:b8:ae:09:6a:26:95:8c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Oct 6 11:28:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1768f4d8e36f2ca43e2d1f21b565cfb04b8ef86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:52:b0:2b:35:24:2a:05:ac:fc:d5:1d:f2:5c:
9c:1c:81:09:f7:65:33:2c:5a:73:19:be:2d:fa:e3:
f2:9a:e9:e0:4e:d0:88:b5:84:86:f5:17:d9:07:25:
7e:be:46:28:7d:73:44:c8:94:30:ef:5d:12:ac:79:
97:6b:9a:c7:84:3a:59:c8:71:cd:e0:7a:47:79:f2:
5b:12:0a:d7:df:14:26:b2:7f:26:27:17:1f:da:a2:
16:ac:49:26:d3:f6:45:fb:77:7c:91:17:23:1e:7d:
4f:a2:4b:54:4c:62:3f:dc:0f:c9:95:a6:9e:31:c0:
2d:af:fb:b5:c0:5d:dc:e2:4b:2d:15:c5:5e:73:16:
6f:d6:78:6e:cf:25:96:d8:5c:8e:cf:9f:31:27:80:
51:12:81:85:a6:7a:a1:7e:2f:0f:b6:16:97:20:f7:
fb:d8:3d:43:66:4f:be:68:1c:39:ae:27:79:ee:97:
c9:1e:76:a4:b3:f1:b8:b5:5f:5c:5d:8d:39:b3:41:
00:96:45:72:e0:24:0a:a8:ad:8c:9d:ee:57:f0:84:
76:3c:57:15:c7:fe:79:f7:29:cc:b5:90:c4:e1:3b:
c8:63:aa:c0:6d:f0:ed:4a:d1:bc:8a:7e:b6:ea:f2:
ad:36:94:59:bb:d5:55:9a:c1:29:93:ec:27:6b:0e:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:68:F4:D8:E3:6F:2C:A4:3E:2D:1F:21:B5:65:CF:B0:4B:8E:F8:6F
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/F2j02ONvLKQ-LR8htWXPsEuO-G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.46.128.0/17
79.101.0.0/16
91.150.64.0/18
93.86.0.0/15
109.92.0.0/15
178.220.0.0-178.223.223.255
185.190.152.0/22
195.178.32.0/19
212.200.0.0/16
IPv6:
2a00:e90::/32
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
5c:8b:eb:76:1d:d0:9f:e8:6e:3b:1f:ce:60:7a:fd:e0:0f:bb:
4d:4a:05:6d:3b:31:9c:c6:e5:fe:ae:fc:b9:fa:e0:66:17:ea:
d8:18:d5:77:ac:0b:40:4c:51:f8:31:23:22:03:ab:f1:df:c5:
9c:ce:0d:a6:eb:ac:ba:28:0a:5c:03:3a:b8:53:ae:4b:66:f0:
2e:59:12:9c:bb:65:4d:39:49:15:8a:24:14:3a:be:3a:1a:b3:
38:aa:4f:67:87:f9:27:5a:a1:bf:81:ed:09:0d:71:4a:69:e8:
9e:99:ac:44:2c:32:ba:eb:29:3d:44:b6:be:27:c7:de:c6:35:
52:6d:05:26:54:64:a4:38:f6:5b:fc:eb:21:a4:50:41:5f:f5:
03:d2:4f:46:0c:83:11:2e:b0:e9:76:fd:0b:60:d7:a3:60:8b:
cc:89:4e:dc:b0:a4:0b:8e:be:e3:30:34:f1:d3:ae:be:11:2f:
ef:6d:63:fe:13:5a:2e:4f:10:32:cb:27:8d:8f:10:d7:53:d4:
bd:a2:96:25:7f:0a:67:b1:3e:70:2b:3f:cb:60:b6:f3:81:2b:
34:e3:a3:22:cb:1e:2c:c9:ee:b7:3b:5f:75:db:5d:18:81:4d:
00:c7:68:4f:b9:75:20:89:56:7f:ef:73:26:d1:76:37:28:2f:
98:8c:e8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:32 2024 by rpki-client on console-fra.rpki-client.org