Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/Uh94AP7mwNQdN_Hfnx6OlKma0vE.roa
File: Uh94AP7mwNQdN_Hfnx6OlKma0vE.roa (raw, json)
Hash identifier: OBEhqVvgy3SjGeW1+5TlSKgpJJPAx5SpOvrDXP0Ro8M=
Subject key identifier: 52:1F:78:00:FE:E6:C0:D4:1D:37:F1:DF:9F:1E:8E:94:A9:9A:D2:F1
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 0192E2601860D5C60C5835988DBE04D0D2E1
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/Uh94AP7mwNQdN_Hfnx6OlKma0vE.roa
Signing time: Thu 31 Oct 2024 11:40:01 +0000
ROA not before: Thu 31 Oct 2024 11:40:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.39.144.0/23 maxlen: 23
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
178.79.0.0/18 maxlen: 18
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
185.26.172.0/22 maxlen: 22
185.71.88.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
195.178.32.0/19 maxlen: 19
212.62.59.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 08 Nov 2024 14:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:60:18:60:d5:c6:0c:58:35:98:8d:be:04:d0:d2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Oct 31 11:40:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=521f7800fee6c0d41d37f1df9f1e8e94a99ad2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:92:89:94:00:74:42:43:72:80:90:af:ec:a9:
81:04:ee:88:1f:ed:b0:e8:10:96:66:a4:9a:f5:63:
a4:e0:b0:3e:ca:43:13:e5:a1:0f:f7:6f:e6:0c:68:
71:cf:d8:46:c1:80:8f:45:51:e6:02:fa:3b:10:bf:
75:32:be:f1:f2:e6:bc:b9:86:1c:3a:4d:c2:0b:f5:
b0:14:e8:31:a0:2f:f3:07:f2:95:10:79:aa:e5:53:
34:2a:cd:7a:04:d8:51:33:43:3b:8f:1a:9c:47:72:
1c:c1:25:af:58:a7:68:c5:d1:80:af:55:4a:a4:51:
32:10:4b:c8:e9:8a:e2:78:5d:dd:d2:bf:95:73:09:
90:01:15:34:f5:85:87:7a:8e:a7:fd:71:c3:1f:9d:
f4:b3:ce:31:f6:fe:83:e6:29:f2:58:72:c0:07:3f:
54:13:3f:90:95:25:be:5c:41:f5:de:4c:f3:d6:7f:
82:2e:09:45:0f:ea:6d:17:3c:50:fa:93:4c:fc:a6:
50:7b:0a:8d:a7:6a:7d:90:0a:59:4f:f8:fa:42:e4:
78:ea:7e:62:9d:0c:50:e0:9a:87:c8:cc:d0:fb:a5:
31:d9:27:d3:cd:b1:ae:2c:a0:03:8d:77:79:bf:83:
83:2f:5c:40:b0:c6:d6:30:ac:c3:1b:a5:f8:45:16:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1F:78:00:FE:E6:C0:D4:1D:37:F1:DF:9F:1E:8E:94:A9:9A:D2:F1
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/Uh94AP7mwNQdN_Hfnx6OlKma0vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
46.17.120.0/21
62.101.128.0/20
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.39.144.0/23
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.244.128.0/19
93.86.0.0/15
109.72.48.0/20
109.92.0.0/15
109.122.64.0/18
109.198.0.0/19
178.79.0.0/18
178.220.0.0-178.223.223.255
185.26.172.0/22
185.71.88.0/22
185.157.104.0/22
185.190.152.0/22
195.178.32.0/19
212.62.59.0/24
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
67:12:89:26:2d:ea:55:51:95:b2:1b:3b:2e:8b:66:6f:6f:06:
3e:7f:73:23:a6:60:5f:2a:67:4c:89:46:30:30:a4:b3:22:21:
01:b7:99:00:91:9d:ed:66:6d:ae:5f:bd:cc:c0:8b:ff:8d:99:
1e:09:38:4a:3c:e1:d7:d6:d8:bd:fd:28:71:d2:7e:9a:d7:22:
2f:28:f7:0f:10:38:6c:73:e3:43:f1:d4:c2:b9:e7:2b:9e:e6:
57:39:87:91:d4:be:53:fa:78:cd:82:70:ff:a5:9a:52:ed:fd:
92:5d:9d:8a:0a:f3:db:e1:08:e5:16:03:70:2a:41:1c:06:f3:
cb:92:c8:95:47:30:04:17:05:3c:c7:bc:18:0b:dd:92:5f:0d:
d7:61:d7:05:57:74:d9:52:0c:d1:2e:5f:4d:65:ee:fc:1a:8d:
90:7d:49:22:4c:4e:ac:df:58:02:73:88:7c:7c:63:ef:5a:6b:
4e:8b:af:f5:c7:1a:7f:49:c3:91:cb:6f:0c:09:54:d4:be:15:
c0:3d:3c:9a:fe:7e:b6:d1:6c:63:2a:25:49:16:33:b6:01:c4:
06:72:d5:13:ee:ba:0d:3c:ef:f9:ad:f1:e1:80:3a:b0:96:ed:
c9:9d:e6:62:f6:ae:fb:b2:54:1b:5c:ce:67:1e:e5:c4:d5:8c:
d6:5c:d0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:59 2024 by rpki-client on console-ams.rpki-client.org