Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/YoK7ehWpeb7MXhAdhX-PYkaN79w.roa
File: YoK7ehWpeb7MXhAdhX-PYkaN79w.roa (raw, json)
Hash identifier: OK72G4z7+n59waUby60DGkd04/ZsO1T+BIar8jiw0JE=
Subject key identifier: 62:82:BB:7A:15:A9:79:BE:CC:5E:10:1D:85:7F:8F:62:46:8D:EF:DC
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 01919D716FD46ACCB6B780E5E36EBAC1C10E
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/YoK7ehWpeb7MXhAdhX-PYkaN79w.roa
Signing time: Thu 29 Aug 2024 09:22:22 +0000
ROA not before: Thu 29 Aug 2024 09:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
62.101.128.0/20 maxlen: 20
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.122.77.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
185.71.88.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
195.178.32.0/19 maxlen: 19
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a06:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 02 Sep 2024 08:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:71:6f:d4:6a:cc:b6:b7:80:e5:e3:6e:ba:c1:c1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Aug 29 09:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6282bb7a15a979becc5e101d857f8f62468defdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:cd:f7:27:97:89:83:72:0d:6f:ca:69:3d:
2d:e8:09:fe:92:ab:bc:d7:1e:2f:a9:e7:52:78:c5:
7e:e3:91:f1:f1:8d:c8:55:31:26:bc:4d:d6:4d:0f:
1a:4e:cd:05:20:ec:71:af:4d:86:72:af:09:26:8b:
a5:ed:69:c9:79:57:6e:98:33:11:0f:08:7d:7a:fb:
e1:6f:41:e8:e8:a0:b9:dc:1b:a8:9f:37:cb:c9:c4:
15:74:1e:86:ff:f0:f2:be:64:5b:d4:f9:54:7f:78:
61:4e:ea:47:3d:4e:31:82:f9:0e:7e:39:4e:11:a2:
e5:c7:d3:0d:e5:61:46:e1:8f:f7:31:84:e4:57:f9:
66:03:2a:1f:ae:d6:08:f9:45:1a:1d:30:c6:d4:93:
4d:ab:aa:55:bb:6b:5f:84:23:9b:b4:48:3c:c8:01:
89:bd:32:25:b2:eb:cd:11:81:c8:20:c8:a6:2f:43:
8d:d5:ab:d7:76:c0:d1:bd:36:1f:55:bf:3f:e2:1e:
bd:f3:2d:0f:a7:07:87:af:2a:15:b9:cc:9d:a1:66:
a4:f5:c4:33:93:48:2a:6d:77:ac:1c:53:f6:a7:11:
86:22:f4:f6:51:c8:cd:a3:3a:a5:95:a2:de:1d:ef:
55:61:f4:1b:c0:a3:fc:a3:d5:06:68:a2:4d:89:58:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:82:BB:7A:15:A9:79:BE:CC:5E:10:1D:85:7F:8F:62:46:8D:EF:DC
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/YoK7ehWpeb7MXhAdhX-PYkaN79w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
62.101.128.0/20
77.46.128.0/17
79.101.0.0/16
89.39.144.0/23
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.244.128.0/19
93.86.0.0/15
109.72.48.0/20
109.92.0.0/15
109.122.77.0/24
178.79.0.0/18
178.220.0.0-178.223.223.255
185.71.88.0/22
185.190.152.0/22
195.178.32.0/19
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:4d:d9:06:14:1b:7e:d0:9e:b4:77:53:4c:23:be:33:9c:00:
ce:3c:7a:ec:cb:8e:6f:18:ad:aa:d2:a5:10:99:f1:25:db:65:
c9:03:87:ef:4b:f8:ad:37:1b:12:b2:2a:0b:c3:c2:02:9f:e8:
1b:47:a6:4c:cf:cb:17:39:e3:57:15:1f:22:77:d8:bc:2b:47:
4d:80:e8:6c:d8:fe:b9:5a:c3:a1:f6:3f:26:07:be:0f:40:8d:
0e:19:d4:18:2e:6b:39:b2:df:2d:1c:0c:93:a1:08:d2:03:de:
de:b6:29:bb:e6:d3:b4:48:16:35:47:34:6c:e9:5b:7d:12:b0:
de:64:28:a0:59:47:6f:c4:d9:aa:e4:fb:c6:84:a8:f1:19:72:
6c:2a:51:88:0d:50:13:eb:c2:5d:00:c9:22:62:14:62:d8:6c:
d6:c2:05:04:62:9d:77:b2:93:d3:ea:1c:65:27:dd:f8:d7:8a:
e0:9e:30:4c:cc:e6:8a:fb:46:6d:5a:c4:02:b2:11:25:0f:b7:
00:ac:65:bb:e8:33:e1:0d:aa:08:ac:cd:af:da:af:fe:3e:0f:
51:bd:73:77:13:86:17:96:48:34:08:8f:2f:3b:0e:0d:75:00:
ee:12:e2:4a:34:76:cf:83:65:ca:af:77:9e:2c:3b:28:32:69:
16:ff:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 09:32:15 2024 by rpki-client on console-fra.rpki-client.org