Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/sCAopcdkPUs5h8I2HV0Mnj6bxNI.roa
File: sCAopcdkPUs5h8I2HV0Mnj6bxNI.roa (raw, json)
Hash identifier: 1rtwXvJb1V1PCsS/Lu4d//81kMqzyODTPj7UPAWbhoE=
Subject key identifier: B0:20:28:A5:C7:64:3D:4B:39:87:C2:36:1D:5D:0C:9E:3E:9B:C4:D2
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 0191B1EBE4B3E480EF3129B3507AE2E82B2C
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/sCAopcdkPUs5h8I2HV0Mnj6bxNI.roa
Signing time: Mon 02 Sep 2024 08:48:32 +0000
ROA not before: Mon 02 Sep 2024 08:48:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
62.101.128.0/20 maxlen: 20
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.39.144.0/23 maxlen: 23
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
178.79.0.0/18 maxlen: 18
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
185.71.88.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
195.178.32.0/19 maxlen: 19
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a06:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 02 Sep 2024 09:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b1:eb:e4:b3:e4:80:ef:31:29:b3:50:7a:e2:e8:2b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Sep 2 08:48:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b02028a5c7643d4b3987c2361d5d0c9e3e9bc4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:d0:90:11:c2:c6:23:4c:3c:66:95:ad:c6:
82:50:e8:92:fb:fa:21:c3:33:8b:39:06:66:0c:fd:
58:4e:e8:91:c4:a4:e1:e5:18:29:e0:70:26:22:da:
8e:4b:10:0a:60:2c:75:9f:47:e7:83:53:49:f5:31:
e1:0c:85:37:fa:fb:9c:df:69:67:c7:27:a0:aa:31:
bf:d6:e1:6c:16:ad:54:bd:94:82:d3:a6:28:03:46:
42:c3:d5:0e:93:93:c7:b6:9e:ea:7e:3a:09:a9:ab:
df:03:00:a0:df:86:cb:35:ca:3f:8b:34:23:bf:57:
6b:1a:9b:99:55:a9:7a:92:0d:a1:79:d8:c6:51:07:
f7:d8:76:10:8f:99:0e:ec:5b:93:e1:8d:f7:29:d5:
85:f7:c5:7a:1e:6c:35:cc:56:d8:d6:aa:b1:3c:b6:
47:65:a2:fe:49:9f:84:d4:ec:71:0b:ea:de:e6:08:
e7:14:92:6b:6d:e5:87:6f:88:3a:03:1e:e6:14:ed:
e1:25:a8:0f:74:23:7f:86:e5:12:92:4f:a1:19:c7:
48:55:a2:b4:6f:77:d3:33:8e:38:28:17:f8:bb:a7:
da:a1:00:2d:99:53:a8:20:2a:e6:ca:43:5e:cb:10:
d4:02:3f:56:4b:12:cd:47:3d:f9:d9:11:a7:81:9c:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:20:28:A5:C7:64:3D:4B:39:87:C2:36:1D:5D:0C:9E:3E:9B:C4:D2
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/sCAopcdkPUs5h8I2HV0Mnj6bxNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
62.101.128.0/20
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.39.144.0/23
89.46.126.0/23
89.47.40.0/23
91.150.64.0/18
92.244.128.0/19
93.86.0.0/15
109.72.48.0/20
109.92.0.0/15
109.122.77.0/24
109.198.0.0/19
178.79.0.0/18
178.220.0.0-178.223.223.255
185.71.88.0/22
185.190.152.0/22
195.178.32.0/19
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
75:33:5b:1b:70:99:5a:26:eb:bc:6c:f8:2d:35:60:60:8c:47:
8d:8d:e4:c7:5c:1d:33:93:53:2e:71:4a:24:7b:29:c1:b8:2d:
9d:01:59:9b:7f:36:79:95:18:8d:0e:26:b1:16:0a:19:14:06:
bd:ea:a8:e1:d0:3a:2f:7e:d8:5a:47:c5:09:f4:59:80:df:31:
e3:1e:ea:70:74:2b:18:71:92:7d:a0:70:1e:7a:c5:f3:e7:1b:
c0:00:06:9f:e5:2f:6c:f4:1f:6d:c1:45:1c:a7:67:0e:19:dd:
70:98:34:c0:8e:bb:b0:a5:8f:f4:05:e3:f6:13:c5:06:c0:d9:
8c:20:59:94:a9:89:f7:01:82:69:3f:e1:be:2c:80:14:fe:bd:
6d:9b:3f:d8:5b:25:34:12:d3:c4:d8:22:04:18:15:6d:9a:3c:
e4:f3:bd:55:ee:83:e7:e8:d3:85:5e:a1:5a:75:c1:6e:8c:13:
fd:4f:ab:4e:24:99:09:4b:7e:7d:04:94:ed:a7:79:0f:21:05:
ce:df:11:6f:b6:b3:fd:98:e8:6f:10:b5:87:b6:f0:c9:2c:c7:
ed:be:18:a2:90:11:49:23:1b:26:42:da:00:7f:4b:ec:99:b8:
a1:db:0c:9e:89:e6:82:61:86:e9:c7:35:b2:ff:76:56:3f:9d:
da:5d:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:35:29 2025 by rpki-client