Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/c8D4M1LSyutl1YIta-wkO-_sYLI.roa
File: c8D4M1LSyutl1YIta-wkO-_sYLI.roa (raw, json)
Hash identifier: XjPsWQZ4rUQFgrLdAbduBLcroT3Nhh+KmmElWvBnc1I=
Subject key identifier: 73:C0:F8:33:52:D2:CA:EB:65:D5:82:2D:6B:EC:24:3B:EF:EC:60:B2
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019324A7B246A38DDBC46812D82AD831DA04
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/c8D4M1LSyutl1YIta-wkO-_sYLI.roa
Signing time: Wed 13 Nov 2024 08:33:09 +0000
ROA not before: Wed 13 Nov 2024 08:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
46.235.96.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
62.240.24.0/21 maxlen: 21
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.39.144.0/23 maxlen: 23
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
94.228.229.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.234.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.94.228.0/22 maxlen: 22
109.94.232.0/21 maxlen: 21
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
176.67.192.0/24 maxlen: 24
176.67.202.0/23 maxlen: 23
176.67.204.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.214.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
178.17.30.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
178.237.208.0/20 maxlen: 20
178.250.136.0/21 maxlen: 21
185.10.140.0/22 maxlen: 22
185.26.172.0/22 maxlen: 22
185.27.128.0/24 maxlen: 24
185.34.92.0/22 maxlen: 22
185.71.88.0/22 maxlen: 22
185.103.136.0/22 maxlen: 22
185.112.20.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.179.136.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
212.62.59.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 14 Nov 2024 13:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:24:a7:b2:46:a3:8d:db:c4:68:12:d8:2a:d8:31:da:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Nov 13 08:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73c0f83352d2caeb65d5822d6bec243befec60b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:f9:e2:37:2a:a0:b4:96:d1:06:16:e9:dd:
43:2c:3b:b9:11:2d:fe:78:84:07:a7:34:59:7c:b0:
79:fa:f4:7c:0c:17:1b:6c:67:cb:06:99:18:9c:4d:
f1:22:00:f0:4f:2b:11:42:78:04:fd:c1:a6:38:d8:
72:98:48:b6:52:21:3b:6c:cc:ce:39:87:56:f9:ec:
63:93:43:5b:b0:90:02:07:38:9d:bb:a5:42:b9:c2:
81:62:12:18:02:be:32:90:24:53:8b:29:78:42:d4:
6d:21:51:6e:04:22:99:a9:d2:0d:86:8f:0b:20:dc:
ec:3a:95:fb:e2:69:27:1d:e9:38:f9:40:7d:91:f1:
5d:36:69:83:42:ac:4e:70:fc:22:1e:48:37:02:ac:
fe:50:7a:68:8c:ab:51:95:3a:7c:ed:37:ec:75:d9:
7e:6f:e5:db:ca:13:cb:8c:f5:4e:40:64:77:44:50:
d3:a7:12:56:02:67:aa:12:cf:cf:f1:af:a5:6c:85:
7a:af:e8:fe:05:4d:ca:3b:53:53:1c:13:b9:e2:7d:
1c:9f:fb:72:f7:9f:cb:ca:36:cd:f8:92:65:ab:57:
cf:86:1b:18:a7:8e:58:64:7e:69:25:3a:c1:a5:95:
1d:8d:e7:1b:e7:63:0b:54:f5:5f:c1:6c:89:5d:f4:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C0:F8:33:52:D2:CA:EB:65:D5:82:2D:6B:EC:24:3B:EF:EC:60:B2
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/c8D4M1LSyutl1YIta-wkO-_sYLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
37.153.174.0/24
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.39.144.0/23
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.60.224.0-92.60.226.255
92.60.229.0-92.60.231.255
92.60.233.0/24
92.60.237.0-92.60.239.255
92.244.128.0/19
93.86.0.0/15
94.228.229.0/24
94.228.231.0/24
94.228.234.0/24
94.228.237.0/24
109.72.48.0/20
109.92.0.0/15
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/24
176.67.202.0-176.67.204.255
176.67.206.0/23
176.67.210.0/24
176.67.214.0/24
176.67.217.0-176.67.218.255
176.67.221.0/24
178.17.30.0/24
178.79.0.0/18
178.220.0.0-178.223.223.255
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/24
185.34.92.0/22
185.71.88.0/22
185.103.136.0/22
185.112.20.0/22
185.157.104.0/22
185.179.136.0/22
185.190.152.0/22
188.240.200.0/23
195.178.32.0/19
212.62.59.0/24
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
57:cf:ee:2c:66:d3:b0:2b:92:3a:da:29:c6:bf:72:1a:3d:fe:
3e:f7:1a:35:60:74:14:9f:2b:6e:ef:07:25:24:5f:8f:5c:17:
39:80:5c:08:38:66:ea:7e:cc:29:cc:70:fa:22:f0:a5:27:fa:
cd:af:02:50:07:5b:32:b6:5b:ae:c3:4d:a4:8b:22:fb:be:1c:
41:5d:98:86:62:04:73:b0:a8:d6:6b:24:90:f3:26:ce:1d:8e:
4d:cd:64:2a:5a:97:b6:b6:cc:d1:1f:31:a9:70:ad:2d:74:b2:
ba:bc:8b:4b:a5:b4:51:7a:0d:73:23:35:1f:3c:e0:bc:6a:df:
85:46:ab:dd:05:61:c3:61:01:43:45:11:88:95:9e:59:2d:52:
1c:43:c3:c4:12:06:80:38:4a:59:e0:af:c3:8b:c6:ca:d1:b3:
9f:5e:82:0e:bf:29:1d:22:03:ae:f1:4d:04:fb:56:2b:23:00:
73:38:9c:6e:ea:30:39:6e:29:e8:6f:ef:29:cd:a5:7e:71:db:
34:2a:eb:8d:6a:c1:fb:53:bd:eb:50:4b:b5:03:39:0b:5a:df:
e9:f9:c3:f3:6e:0d:48:97:42:8e:54:b8:da:11:ba:58:ba:20:
a7:d8:ed:dc:98:e3:08:96:23:2d:f6:f3:c4:ac:a4:d6:df:31:
d7:dc:82:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 15:01:10 2024 by rpki-client on console-ams.rpki-client.org