Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/iNWH_fWp8GVHNaA9CvKCTz4cssI.roa
File: iNWH_fWp8GVHNaA9CvKCTz4cssI.roa (raw, json)
Hash identifier: hn11TGrDgSjMVg4NQPswtHPSdQi8aLFRzj6+aV+/QKU=
Subject key identifier: 88:D5:87:FD:F5:A9:F0:65:47:35:A0:3D:0A:F2:82:4F:3E:1C:B2:C2
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 0192950193B7C5F4D390F913FFB3DB693900
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/iNWH_fWp8GVHNaA9CvKCTz4cssI.roa
Signing time: Wed 16 Oct 2024 11:06:01 +0000
ROA not before: Wed 16 Oct 2024 11:06:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
62.101.128.0/20 maxlen: 20
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.39.144.0/23 maxlen: 23
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
178.79.0.0/18 maxlen: 18
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
185.26.172.0/22 maxlen: 22
185.71.88.0/22 maxlen: 22
185.157.104.0/22 maxlen: 24
185.190.152.0/22 maxlen: 22
195.178.32.0/19 maxlen: 19
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 23 Oct 2024 13:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:01:93:b7:c5:f4:d3:90:f9:13:ff:b3:db:69:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Oct 16 11:06:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88d587fdf5a9f0654735a03d0af2824f3e1cb2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:07:41:a1:92:4b:33:c3:9a:f6:f8:f2:74:38:
cb:f9:54:8c:71:1d:d1:78:46:d7:f4:7d:ea:16:b0:
cf:cd:cd:79:6e:40:5c:c4:6a:da:48:ff:37:29:c5:
e1:fb:87:ef:cb:c9:8c:23:d8:c9:e8:93:cd:f8:16:
f3:c0:f2:49:9e:31:9f:41:29:bb:f6:f1:c7:6f:e5:
c2:6b:12:e2:92:c0:64:69:82:e5:7d:69:19:d8:43:
d5:ef:39:a2:e0:2c:af:7f:c0:22:a9:69:da:04:8d:
99:69:bd:37:c2:47:97:10:50:a6:a8:a1:e0:b1:ed:
bb:b7:7c:e0:8a:1c:a8:1d:18:4e:64:10:26:65:30:
7b:05:69:75:32:52:7f:1e:75:de:2a:65:46:80:8f:
47:f5:2b:29:b9:ce:10:2a:34:92:d7:3f:5c:a0:3a:
d7:67:1a:65:aa:e6:8a:c8:f3:42:f1:fb:88:33:6d:
5c:09:d8:1c:3c:32:08:2a:5b:b5:85:03:be:b8:14:
c4:7a:19:6e:4a:2f:8d:80:a6:df:23:c0:6b:91:72:
06:e5:42:40:f1:5c:e8:4a:fc:55:33:fc:26:3a:40:
07:74:06:f7:0d:8f:4a:7a:97:52:24:68:ad:c3:ba:
e8:a4:0b:97:86:2d:95:31:b4:c1:31:b4:df:65:c1:
d1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D5:87:FD:F5:A9:F0:65:47:35:A0:3D:0A:F2:82:4F:3E:1C:B2:C2
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/iNWH_fWp8GVHNaA9CvKCTz4cssI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
62.101.128.0/20
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.39.144.0/23
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.244.128.0/19
93.86.0.0/15
109.72.48.0/20
109.92.0.0/15
109.122.64.0/18
109.198.0.0/19
178.79.0.0/18
178.220.0.0-178.223.223.255
185.26.172.0/22
185.71.88.0/22
185.157.104.0/22
185.190.152.0/22
195.178.32.0/19
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:5a:9d:ba:15:0a:1e:d7:04:96:c2:ee:f1:ea:7d:82:f0:a3:
bb:28:20:39:23:ae:f2:f0:7d:1f:2c:32:70:5b:76:25:4a:c0:
7a:ed:de:93:4a:78:50:2f:33:c6:9f:f9:81:d9:b6:a8:1c:52:
7d:e9:4a:e7:f7:12:c2:c2:c3:a5:b9:6c:da:4b:ee:11:a6:ef:
a0:10:ba:21:f0:f0:b4:08:e8:4a:1c:dc:97:ef:83:f5:92:96:
6e:76:08:be:62:db:d1:b6:e3:e9:0f:e9:1d:47:8a:f5:72:63:
9b:97:23:8a:1c:86:74:2c:bb:5b:17:2e:94:f3:70:84:a3:c4:
45:ef:6c:d3:0d:47:8b:47:87:40:d3:3e:07:59:4e:7b:85:57:
26:d2:8a:c7:02:f6:12:38:18:60:ed:61:98:81:35:b9:27:f6:
f3:0c:d5:70:31:a3:a1:23:3f:28:4d:e6:e0:1c:21:7a:1e:f8:
fa:49:f4:d8:c0:8c:a1:72:9a:2f:8d:92:89:0b:b6:3f:83:1a:
22:36:6c:90:ed:0d:03:7c:61:13:8c:18:1d:ac:34:e6:f8:bc:
e0:e2:5f:ed:a4:8d:d6:1e:11:67:cc:d3:72:06:8b:0e:a2:41:
bc:8f:28:2b:8e:4e:b7:d7:e5:2a:06:07:5e:15:a0:93:6e:b9:
4c:83:84:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 16:24:29 2024 by rpki-client on console-fra.rpki-client.org