Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/jGvrEuG23MkNqCrR1T5sDbm2-Ao.roa
File: jGvrEuG23MkNqCrR1T5sDbm2-Ao.roa (raw, json)
Hash identifier: HHJk21f3qAwEcrCMUPz2eVuyoRwsKt6cUcrK/haAKko=
Subject key identifier: 8C:6B:EB:12:E1:B6:DC:C9:0D:A8:2A:D1:D5:3E:6C:0D:B9:B6:F8:0A
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 01917930BB84EE01EF287A657D3167357BDA
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/jGvrEuG23MkNqCrR1T5sDbm2-Ao.roa
Signing time: Thu 22 Aug 2024 08:25:22 +0000
ROA not before: Thu 22 Aug 2024 08:25:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
62.101.128.0/20 maxlen: 20
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
109.92.0.0/15 maxlen: 15
109.122.77.0/24 maxlen: 24
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
185.71.88.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
195.178.32.0/19 maxlen: 19
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a06:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 26 Aug 2024 21:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:30:bb:84:ee:01:ef:28:7a:65:7d:31:67:35:7b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Aug 22 08:25:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c6beb12e1b6dcc90da82ad1d53e6c0db9b6f80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:3c:f6:f8:30:2e:3f:8a:1e:93:df:27:f3:
b9:b8:44:21:a5:5f:b7:07:76:f0:19:5b:4b:a0:74:
5f:4d:20:85:1c:f2:ba:e2:1c:99:f3:3c:d7:ae:bb:
88:6d:3a:5d:b1:f0:51:a7:b5:3f:6a:b1:c6:22:65:
b9:15:24:0d:cb:81:fc:20:01:3a:e9:ca:6a:4e:46:
ed:c1:40:7b:96:6e:cc:1d:1b:dc:d8:05:7a:8e:14:
40:91:51:c8:9f:82:0f:a6:74:22:92:b1:fe:c4:31:
a2:2b:c7:91:5a:a1:30:45:c9:96:15:32:ac:91:ed:
b5:3b:92:29:a5:72:f9:1f:7b:5e:57:75:70:ab:be:
18:6a:22:69:ce:7c:25:c5:51:74:48:c3:c5:e0:a3:
19:ca:9c:ea:9c:11:26:f8:94:f0:bb:55:e1:0b:45:
d9:6e:a0:4f:cb:96:7f:68:1f:01:77:5e:43:c7:6c:
6c:df:d4:35:e2:09:13:68:b2:07:92:35:59:7c:cd:
54:4f:be:f2:75:28:45:25:20:e7:00:44:77:31:ac:
1e:49:2d:65:e1:bd:09:46:d0:8a:c0:76:b8:f9:6e:
9d:ff:86:a6:ef:6d:9b:ff:13:09:9c:8e:2e:73:95:
60:9b:75:73:a2:bd:8f:ee:95:e9:fd:a4:54:b5:80:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6B:EB:12:E1:B6:DC:C9:0D:A8:2A:D1:D5:3E:6C:0D:B9:B6:F8:0A
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/jGvrEuG23MkNqCrR1T5sDbm2-Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
62.101.128.0/20
77.46.128.0/17
79.101.0.0/16
89.39.144.0/23
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
93.86.0.0/15
109.92.0.0/15
109.122.77.0/24
178.220.0.0-178.223.223.255
185.71.88.0/22
185.190.152.0/22
195.178.32.0/19
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
81:31:ad:59:fb:78:81:ad:cb:c2:49:06:bc:d6:7e:88:19:a0:
b1:67:8e:7c:7d:63:0c:5e:d2:73:4b:60:fa:8a:7a:a2:a5:db:
56:ea:85:3c:4f:02:01:3b:ca:01:49:11:9c:01:49:c4:3d:00:
11:f8:c5:e0:ad:14:a7:57:12:c6:3a:c4:08:ba:a5:91:25:3f:
63:e8:5f:39:98:26:31:36:5a:98:99:e0:67:ff:40:11:1d:bd:
3b:ca:53:57:e5:05:44:53:e7:06:99:ce:4d:38:90:22:b5:63:
51:cd:0d:0a:87:1e:26:c8:ae:bc:95:2d:aa:f8:39:a7:55:65:
e8:d8:07:b4:1f:15:62:1b:ab:ea:8c:d1:22:f9:21:48:25:14:
a5:38:3a:af:d6:6b:24:7e:4c:c1:16:95:91:eb:83:b7:70:26:
5b:76:8b:e2:2f:57:d5:f1:b9:5a:61:40:a1:68:6f:ca:49:4a:
b3:33:2d:cf:5d:fe:36:5e:d6:61:23:1f:25:09:da:09:0c:0d:
9b:c9:22:97:84:b3:03:a2:03:6c:6b:a8:86:45:e7:36:ff:d8:
f8:c9:9a:83:39:a9:c0:bb:99:0b:ce:74:9e:61:ed:c0:84:30:
b4:3c:d1:b7:dc:bc:27:a2:78:9f:4e:55:3f:02:21:0d:29:18:
6e:20:a9:a4
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 26 23:41:09 2024 by rpki-client on console-ams.rpki-client.org