Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/SaWQ-wkDz-A-DNMDE4wqnmkTtMM.roa
File: SaWQ-wkDz-A-DNMDE4wqnmkTtMM.roa (raw, json)
Hash identifier: v9LMHWdrJGAvzUR82wy8ETbpdENGNPIexmMgF3nh5ss=
Subject key identifier: 49:A5:90:FB:09:03:CF:E0:3E:0C:D3:03:13:8C:2A:9E:69:13:B4:C3
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 018C033E91FDC47FC85203AA3D9E602F5C11
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/SaWQ-wkDz-A-DNMDE4wqnmkTtMM.roa
Signing time: Fri 24 Nov 2023 21:31:21 +0000
ROA not before: Fri 24 Nov 2023 21:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8400
IP address blocks: 109.92.0.0/15 maxlen: 15
178.220.0.0/15 maxlen: 15
178.223.128.0/18 maxlen: 18
93.87.38.0/24 maxlen: 24
109.122.77.0/24 maxlen: 24
77.46.128.0/17 maxlen: 17
212.200.52.0/24 maxlen: 24
79.101.0.0/16 maxlen: 16
212.200.0.0/21 maxlen: 21
212.200.0.0/17 maxlen: 17
93.87.39.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
93.87.50.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
93.87.58.0/24 maxlen: 24
178.222.0.0/16 maxlen: 16
178.223.192.0/19 maxlen: 19
212.200.51.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.45.0/24 maxlen: 24
185.190.152.0/22 maxlen: 22
212.200.192.0/19 maxlen: 19
91.150.64.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.66.0/24 maxlen: 24
79.101.21.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.132.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
93.86.0.0/16 maxlen: 16
93.86.0.0/15 maxlen: 15
178.223.0.0/17 maxlen: 17
91.150.91.0/24 maxlen: 24
212.200.224.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.225.0/24 maxlen: 24
212.200.232.0/21 maxlen: 21
212.200.228.0/22 maxlen: 22
212.200.240.0/20 maxlen: 20
2a06:63c0::/29 maxlen: 29
2a00:e90::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:03:3e:91:fd:c4:7f:c8:52:03:aa:3d:9e:60:2f:5c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Nov 24 21:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49a590fb0903cfe03e0cd303138c2a9e6913b4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:90:e5:c1:ed:69:ee:43:a6:a9:99:55:6b:88:
ca:fb:f2:32:aa:84:bd:11:b6:b6:f3:2b:a1:c9:a8:
8a:31:42:a1:22:2d:99:cd:3b:c8:b5:2c:7c:ca:01:
51:75:19:89:27:c4:3e:c5:58:11:86:99:d2:d4:a0:
7b:91:a7:00:9c:c1:28:3a:15:53:0b:a2:13:d3:f5:
64:00:cf:bc:dc:bc:81:94:78:0c:fc:d1:9e:a9:fb:
39:2f:1f:78:8b:e6:72:1d:0f:34:6c:d1:70:38:db:
8a:19:50:c5:d1:92:77:ae:4e:71:92:f0:f1:5b:01:
d4:82:3e:6d:b2:c9:2d:35:41:73:63:9e:3a:15:fd:
fd:b0:26:05:50:a1:80:1e:0b:06:e1:c0:db:9a:8f:
f7:0e:23:f6:dc:38:05:ef:b6:2d:7b:17:f2:a5:45:
e4:cf:13:fd:11:30:d8:de:b6:d9:d1:a8:28:4d:b3:
9c:67:8a:e2:bb:51:fb:48:65:64:ff:df:49:dd:40:
a0:2c:78:bf:2d:af:d7:ff:c0:df:55:92:10:54:06:
df:b2:20:58:10:b3:ac:ab:3f:99:9a:d8:71:c0:a9:
75:64:97:db:d7:99:eb:51:88:39:bc:9b:7c:fd:89:
9a:1e:a4:b3:69:22:bc:11:5f:86:fc:22:09:0e:00:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A5:90:FB:09:03:CF:E0:3E:0C:D3:03:13:8C:2A:9E:69:13:B4:C3
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/SaWQ-wkDz-A-DNMDE4wqnmkTtMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.46.128.0/17
79.101.0.0/16
91.150.64.0/18
93.86.0.0/15
109.92.0.0/15
109.122.77.0/24
178.220.0.0-178.223.223.255
185.190.152.0/22
195.178.32.0/19
212.200.0.0/16
IPv6:
2a00:e90::/32
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:82:6b:4a:aa:4b:4e:da:7c:41:d6:a9:71:6c:a3:64:22:3f:
eb:bc:7c:92:58:f1:36:af:58:cb:ab:1e:d7:74:69:dc:31:f0:
c3:fb:aa:31:df:a5:91:d2:9c:1c:67:b9:c9:2c:01:61:8a:68:
1a:bf:6e:a7:a7:c5:46:2e:fe:19:b2:98:ba:e4:a5:77:54:3b:
a5:df:1b:e5:c0:5a:b4:a6:eb:1a:91:a1:f9:93:52:15:3a:17:
33:fa:32:aa:2c:66:ff:dd:03:5c:74:ba:24:69:e0:76:9e:77:
b7:ae:42:99:8c:d1:c0:6d:5f:21:4e:68:a9:9c:56:91:5f:44:
cf:4b:b2:95:66:5c:92:56:f8:92:4c:cc:2c:4a:13:04:3f:d7:
98:70:58:80:d9:12:bc:46:73:75:9f:99:00:22:86:a5:47:20:
45:07:2c:ca:2d:8f:c4:05:75:19:87:3f:d8:d1:22:48:82:cd:
98:77:87:9a:3f:75:c8:4c:43:35:33:2a:1c:84:b6:bc:22:c4:
78:ad:2a:74:ba:6f:52:1d:cf:a0:ef:11:5d:a7:a6:3a:7e:a0:
b2:9d:47:15:da:6f:92:14:b6:16:d9:e8:c8:1e:d6:c4:17:4f:
7c:01:7a:22:6b:c6:73:bd:f8:92:d3:f9:45:cd:da:b3:27:e4:
6b:88:33:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:38 2023 by rpki-client on console.sobornost.net