Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/zhqxiSChjOhqiT4behKNDQbMvwM.roa
File: zhqxiSChjOhqiT4behKNDQbMvwM.roa (raw, json)
Hash identifier: phD2LFb7zg6cmSQIn4kVbpDUhwcedO1HbFK6MmC+MaI=
Subject key identifier: CE:1A:B1:89:20:A1:8C:E8:6A:89:3E:1B:7A:12:8D:0D:06:CC:BF:03
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 018F1A2CADCCAC5D349C6FD4E87F2AD6BAA8
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/zhqxiSChjOhqiT4behKNDQbMvwM.roa
Signing time: Fri 26 Apr 2024 11:31:26 +0000
ROA not before: Fri 26 Apr 2024 11:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
62.101.128.0/20 maxlen: 20
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.21.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
109.92.0.0/15 maxlen: 15
109.122.77.0/24 maxlen: 24
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
185.190.152.0/22 maxlen: 22
195.178.32.0/19 maxlen: 19
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a06:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 26 Apr 2024 11:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1a:2c:ad:cc:ac:5d:34:9c:6f:d4:e8:7f:2a:d6:ba:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Apr 26 11:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce1ab18920a18ce86a893e1b7a128d0d06ccbf03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:b5:ad:41:da:c7:75:9d:0e:97:f0:05:f7:
b5:c6:51:e4:b2:74:5b:85:ac:60:f3:93:d8:ad:86:
e9:20:16:95:cd:e0:9f:7a:d0:b0:8f:f1:24:3a:9f:
35:cf:2d:09:c4:26:6d:1d:7e:9f:66:68:5f:bf:50:
7d:c6:86:ce:18:64:79:84:ee:53:a0:a7:63:fe:b8:
4e:50:aa:76:09:09:7b:a1:b0:05:f3:0b:0d:24:1a:
b5:fe:b6:dd:79:6a:02:96:37:bb:8c:d2:38:56:fc:
ed:48:14:73:87:5c:d1:6b:39:59:20:ab:75:36:d9:
af:74:c0:0a:6c:33:66:94:8e:b9:22:2d:e9:e4:67:
c7:92:0d:69:14:79:b5:b2:2b:c4:7d:fa:60:4f:14:
9f:9e:a2:a0:e7:04:6c:93:ca:0a:e0:73:0e:0d:53:
a2:e1:74:6f:44:b9:fb:4a:84:0f:1a:9b:00:3b:10:
78:e9:13:cd:22:17:2c:a1:c9:41:6e:2e:ef:a5:0d:
92:3e:59:cc:5e:72:96:32:bc:fc:11:ca:af:4b:42:
c9:93:84:04:ef:ef:4b:bd:91:9e:7d:17:53:8f:b9:
c9:7c:92:c7:a1:a7:9c:50:f6:72:08:19:eb:45:07:
aa:a1:3e:97:00:3b:1c:26:3e:07:0c:5d:44:c8:0e:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:B1:89:20:A1:8C:E8:6A:89:3E:1B:7A:12:8D:0D:06:CC:BF:03
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/zhqxiSChjOhqiT4behKNDQbMvwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
62.101.128.0/20
77.46.128.0/17
79.101.0.0/16
89.39.144.0/23
91.150.64.0/18
93.86.0.0/15
109.92.0.0/15
109.122.77.0/24
178.220.0.0-178.223.223.255
185.190.152.0/22
195.178.32.0/19
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
98:78:2c:3e:3d:d6:77:d9:2d:d2:45:75:45:58:97:5b:d8:55:
24:d0:0e:ac:8e:39:97:50:98:64:ba:00:77:47:e2:51:dd:0b:
0a:be:9e:a7:98:7c:24:5c:c3:39:6b:80:68:c9:ef:d4:f8:45:
26:25:f4:df:0e:0e:ea:3e:45:10:51:ec:5a:50:b7:5b:5c:1c:
50:34:c2:64:fd:fd:9d:c6:b8:0f:30:69:b5:4d:07:e4:43:0b:
db:fd:8b:b4:49:bb:af:29:2f:a7:70:72:7d:d7:8b:ba:c1:70:
53:9c:16:2e:cf:61:ee:0f:e5:86:85:32:79:18:02:db:b7:98:
4e:87:45:11:ad:1c:8e:79:c9:42:19:81:5c:23:a8:7f:78:b6:
7f:5a:75:67:62:40:1a:45:b7:30:17:bb:9c:cc:5e:bb:8f:ef:
7b:1f:0b:0b:20:49:58:3c:1b:c2:c3:da:c3:7c:17:71:7d:7a:
2e:1c:dd:a5:8b:a9:40:95:aa:8e:a6:7d:06:a2:9b:6c:5f:2d:
8f:5d:02:64:59:85:cf:4a:5c:36:90:cc:7f:52:9c:3f:ae:e6:
db:8f:fc:8e:20:3c:16:6e:3b:11:bf:60:bf:b8:83:2e:37:fc:
c9:57:61:96:e8:9f:df:59:40:38:e9:e4:2c:27:e0:dc:c5:35:
b2:cd:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 18:27:27 2024 by rpki-client on console.sobornost.net