Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/dwkXgtSCTMGLAROhpoqQs0BeqeM.roa
File: dwkXgtSCTMGLAROhpoqQs0BeqeM.roa (raw, json)
Hash identifier: pxM9Z6ytmeCBtw/fifoG/8wJy+pf5C+SSsjrdpNQxww=
Subject key identifier: 77:09:17:82:D4:82:4C:C1:8B:01:13:A1:A6:8A:90:B3:40:5E:A9:E3
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 01932B19797C5AA19F3E9ECBD3CE33D7E401
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/dwkXgtSCTMGLAROhpoqQs0BeqeM.roa
Signing time: Thu 14 Nov 2024 14:35:09 +0000
ROA not before: Thu 14 Nov 2024 14:35:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
31.14.33.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
37.153.175.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
46.235.96.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
62.240.24.0/21 maxlen: 21
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.34.2.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.42.12.0/24 maxlen: 24
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.234.0/23 maxlen: 23
92.60.236.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
93.113.250.0/23 maxlen: 23
94.228.224.0/22 maxlen: 22
94.228.229.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.234.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.94.228.0/22 maxlen: 22
109.94.232.0/21 maxlen: 21
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
176.67.192.0/24 maxlen: 24
176.67.202.0/23 maxlen: 23
176.67.204.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.214.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
178.17.30.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
178.237.208.0/20 maxlen: 20
178.250.136.0/21 maxlen: 21
185.10.140.0/22 maxlen: 22
185.26.172.0/22 maxlen: 22
185.27.128.0/24 maxlen: 24
185.27.129.0/24 maxlen: 24
185.27.130.0/23 maxlen: 23
185.34.92.0/22 maxlen: 22
185.36.255.0/24 maxlen: 24
185.71.88.0/22 maxlen: 22
185.103.136.0/22 maxlen: 22
185.112.20.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.179.136.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
188.215.30.0/24 maxlen: 24
188.240.88.0/24 maxlen: 24
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
212.62.59.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 19 Nov 2024 11:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2b:19:79:7c:5a:a1:9f:3e:9e:cb:d3:ce:33:d7:e4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Nov 14 14:35:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77091782d4824cc18b0113a1a68a90b3405ea9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:59:5f:1f:44:d0:7f:5e:98:74:50:ed:30:
1d:60:b8:b5:31:a8:7c:f9:46:25:23:01:75:f5:0d:
c7:c5:8a:68:4b:ff:40:d9:1d:36:87:ca:7d:f5:e0:
42:a0:ee:c9:8c:7d:a5:a8:5c:16:25:73:6e:60:16:
33:0a:df:fb:64:1a:cd:b2:18:24:0a:cb:66:68:b8:
2e:2a:60:dc:88:31:a0:8c:18:3f:78:c2:44:5b:7f:
79:7b:de:31:de:39:90:f8:d7:ab:3e:95:06:98:2a:
51:0a:c6:87:08:43:9c:b7:55:8a:cb:9d:35:ac:04:
67:34:db:a4:df:74:b4:75:4a:40:e0:31:b2:a7:e4:
d7:08:3e:7d:c7:bf:87:b9:90:d0:a2:f6:08:6b:5f:
03:6e:75:fa:c1:25:55:c7:64:31:d0:99:08:6c:b7:
42:b3:50:16:2c:bd:9b:4b:52:21:25:53:85:82:cf:
33:e8:b2:b2:fe:6f:73:93:c1:da:94:94:47:09:69:
03:82:86:db:ba:ca:12:ff:08:59:db:94:e5:8d:b0:
d9:d9:ff:a6:ad:10:de:7e:c5:ed:00:3a:06:1f:b6:
b5:3b:c9:d5:53:19:b8:b2:63:13:8d:7f:41:79:28:
c5:83:95:a1:f7:f3:71:a6:83:92:0e:9c:8b:09:77:
bb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:09:17:82:D4:82:4C:C1:8B:01:13:A1:A6:8A:90:B3:40:5E:A9:E3
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/dwkXgtSCTMGLAROhpoqQs0BeqeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
31.14.33.0/24
37.153.174.0/23
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.34.2.0/24
89.39.144.0/23
89.42.12.0/24
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.60.224.0/20
92.244.128.0/19
93.86.0.0/15
93.113.250.0/23
94.228.224.0/22
94.228.229.0/24
94.228.231.0/24
94.228.234.0/24
94.228.237.0/24
109.72.48.0/20
109.92.0.0/15
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/24
176.67.202.0-176.67.204.255
176.67.206.0/23
176.67.210.0/24
176.67.214.0/24
176.67.217.0-176.67.218.255
176.67.221.0/24
178.17.30.0/24
178.79.0.0/18
178.220.0.0-178.223.223.255
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/22
185.34.92.0/22
185.36.255.0/24
185.71.88.0/22
185.103.136.0/22
185.112.20.0/22
185.157.104.0/22
185.179.136.0/22
185.190.152.0/22
188.215.30.0/24
188.240.88.0/24
188.240.200.0/23
195.178.32.0/19
212.62.59.0/24
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
a9:ec:bf:10:9f:27:4e:9a:d1:e8:a8:93:7c:75:b7:15:8a:e6:
05:b6:d5:9e:c9:14:aa:6f:49:3c:5d:68:66:e9:b3:b8:4e:a7:
0c:62:e2:11:f8:30:0f:45:67:c2:38:a3:8f:ae:a3:69:e0:51:
b9:8a:16:5a:aa:4d:33:ad:ea:07:bd:00:da:1b:f8:e7:f1:62:
b6:f5:1f:da:d0:f9:18:f9:73:6d:62:ed:02:93:95:b6:92:71:
3a:28:e0:65:e0:1f:77:87:7a:4b:36:a0:8f:2c:29:2c:34:3b:
c4:47:8a:4c:77:99:f7:2d:9d:dc:64:d1:a1:04:73:36:42:25:
fd:f6:fd:6e:a2:ce:57:cb:a2:ab:09:97:ca:d3:70:ab:bd:64:
39:2a:5c:50:35:e1:a5:3f:b3:28:54:26:94:b9:03:b9:bf:5e:
e1:b3:69:e6:e0:1a:4b:0f:47:4f:bb:64:62:5e:18:6e:5b:64:
fa:be:0f:7d:24:94:63:b1:7f:9f:52:ad:b9:3e:ed:cc:ae:52:
8c:71:5f:56:27:1c:e1:9b:2c:b0:d4:f2:02:3d:d8:ae:28:95:
98:b1:ad:b4:a9:97:46:2c:3b:92:4c:35:58:70:57:aa:a8:51:
1b:92:ff:cd:b3:54:52:05:48:20:38:86:64:5a:86:49:d3:a6:
42:5e:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:17:35 2024 by rpki-client on console-fra.rpki-client.org