Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/qbKNhQB0z5CmHc-veomzBm3YAOY.roa
File: qbKNhQB0z5CmHc-veomzBm3YAOY.roa (raw, json)
Hash identifier: VMS32BUjLUrSNC4WShxf7zqleMEEeofTpYVYGhQ54R8=
Subject key identifier: A9:B2:8D:85:00:74:CF:90:A6:1D:CF:AF:7A:89:B3:06:6D:D8:00:E6
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019320CAEC4E0ACFC35712B748C71848F44E
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/qbKNhQB0z5CmHc-veomzBm3YAOY.roa
Signing time: Tue 12 Nov 2024 14:33:09 +0000
ROA not before: Tue 12 Nov 2024 14:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
46.235.96.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
62.240.24.0/21 maxlen: 21
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.39.144.0/23 maxlen: 23
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
94.228.229.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.234.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.94.228.0/22 maxlen: 22
109.94.232.0/21 maxlen: 21
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
176.67.192.0/24 maxlen: 24
176.67.202.0/23 maxlen: 23
176.67.204.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.214.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
178.17.30.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
178.237.208.0/20 maxlen: 20
178.250.136.0/21 maxlen: 21
185.10.140.0/22 maxlen: 22
185.26.172.0/22 maxlen: 22
185.27.128.0/24 maxlen: 24
185.34.92.0/22 maxlen: 22
185.71.88.0/22 maxlen: 22
185.103.136.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.179.136.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
212.62.59.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 13 Nov 2024 08:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:ca:ec:4e:0a:cf:c3:57:12:b7:48:c7:18:48:f4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Nov 12 14:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9b28d850074cf90a61dcfaf7a89b3066dd800e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:6b:d1:f6:ea:fb:04:83:e2:c9:15:5d:fe:
a4:6a:ee:3c:a0:32:ee:cc:97:4e:5e:78:eb:30:96:
38:2d:67:98:26:a0:2e:de:db:77:f0:75:25:44:78:
c0:f6:b2:44:05:e5:d9:85:c4:64:92:9a:b4:30:4c:
76:3e:d6:01:66:50:69:c9:44:bc:6b:62:42:2f:f2:
79:5c:62:8b:e0:c1:88:9f:ca:51:6d:fb:a2:a6:15:
ea:2e:30:f6:6b:6f:a9:33:93:7f:86:9a:63:61:77:
47:3f:18:09:5c:fd:12:17:51:f3:aa:33:15:0a:30:
3e:4a:a6:82:4b:3f:ef:58:7b:72:b5:35:af:22:3b:
67:23:25:df:13:32:da:fe:26:43:eb:ff:c0:c3:2d:
63:e7:09:0c:12:8a:2e:17:52:31:ac:ac:a2:3b:87:
ad:3b:1a:4f:ce:22:35:e3:3b:9e:9e:74:cc:9b:47:
83:f2:eb:48:52:42:27:c1:17:db:b3:da:31:5d:e3:
10:2a:2f:f8:b9:b0:04:8c:96:35:0f:9c:f3:9b:cb:
97:c6:d4:45:a0:47:41:af:0a:0c:8e:72:6d:71:e5:
ed:3c:dc:aa:16:5c:68:11:38:de:3d:57:9b:06:4b:
33:a9:bc:ca:9c:fd:d2:3e:ad:e0:33:16:7c:68:28:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B2:8D:85:00:74:CF:90:A6:1D:CF:AF:7A:89:B3:06:6D:D8:00:E6
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/qbKNhQB0z5CmHc-veomzBm3YAOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
37.153.174.0/24
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.39.144.0/23
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.60.224.0-92.60.226.255
92.60.229.0-92.60.231.255
92.60.233.0/24
92.60.237.0-92.60.239.255
92.244.128.0/19
93.86.0.0/15
94.228.229.0/24
94.228.231.0/24
94.228.234.0/24
94.228.237.0/24
109.72.48.0/20
109.92.0.0/15
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/24
176.67.202.0-176.67.204.255
176.67.206.0/23
176.67.210.0/24
176.67.214.0/24
176.67.217.0-176.67.218.255
176.67.221.0/24
178.17.30.0/24
178.79.0.0/18
178.220.0.0-178.223.223.255
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/24
185.34.92.0/22
185.71.88.0/22
185.103.136.0/22
185.157.104.0/22
185.179.136.0/22
185.190.152.0/22
188.240.200.0/23
195.178.32.0/19
212.62.59.0/24
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:2d:ab:88:6f:63:d2:c9:98:4f:9d:cb:36:4f:76:bd:bc:e6:
3a:9b:94:68:a4:83:b5:d0:6f:79:27:c8:67:cf:3d:35:ff:6e:
e8:ad:10:78:27:f4:12:4e:eb:1c:86:11:54:d4:d1:e0:27:9c:
85:50:66:31:e0:66:01:14:d9:f6:94:11:00:b8:13:47:37:34:
4d:91:0f:e7:3a:88:52:cb:97:fd:df:26:1c:b1:3b:e0:26:cf:
d2:c5:fc:5c:b8:85:7a:e0:f5:b9:90:f0:4e:5e:61:4b:d7:f7:
60:24:ed:0c:77:d2:9c:59:f7:27:1f:24:1d:72:fa:eb:6a:92:
16:32:f4:a6:a5:38:1f:7f:20:aa:fb:ff:fa:81:2b:c3:b8:dd:
74:75:82:cb:95:81:e2:06:36:eb:9a:6b:f4:85:34:3d:24:b9:
fb:9c:9e:51:5e:6b:83:3c:e1:95:6e:a1:c6:bd:19:fc:67:da:
95:2c:f2:f7:bd:58:1d:a1:40:e7:e9:a6:b3:ff:dc:f1:65:bc:
28:ce:58:6e:14:e6:78:ae:f1:09:61:57:a6:3a:9e:b8:91:87:
c0:7f:59:76:bb:e9:97:ed:bf:2b:c4:76:22:5f:46:54:6e:c7:
4a:30:7b:7c:fc:a7:71:d1:92:d7:34:32:ce:90:79:e0:49:aa:
6b:f6:69:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 10:57:09 2024 by rpki-client on console-fra.rpki-client.org