Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2muGXL1CAf6cA46GQe7FaWV1yfI.roa
File: 2muGXL1CAf6cA46GQe7FaWV1yfI.roa (raw, json)
Hash identifier: UlzZFckGRFWzgwN86/BFfDU64dhczOBt3C0UO0pZATU=
Subject key identifier: DA:6B:86:5C:BD:42:01:FE:9C:03:8E:86:41:EE:C5:69:65:75:C9:F2
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B42C1002F0DE745380110F0460AEBCCBE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2muGXL1CAf6cA46GQe7FaWV1yfI.roa
Signing time: Wed 18 Oct 2023 12:27:06 +0000
ROA not before: Wed 18 Oct 2023 12:27:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 18 Oct 2023 15:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:c1:00:2f:0d:e7:45:38:01:10:f0:46:0a:eb:cc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 18 12:27:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da6b865cbd4201fe9c038e8641eec5696575c9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:82:da:51:39:c3:cb:3c:32:32:44:2b:c2:ea:
df:4e:46:a3:75:78:7b:be:81:69:c6:97:42:8f:e1:
00:14:98:8d:c7:4d:6e:f9:c9:d5:79:6e:6e:36:c7:
fa:ae:c4:35:e0:5f:89:71:ae:e3:6b:37:d2:82:fb:
dc:b2:20:fb:ce:e5:59:80:7e:f9:5e:59:bc:09:ed:
d5:95:72:af:76:eb:52:1d:4f:06:3f:1b:6d:c9:ad:
01:e9:f3:bf:e1:ed:85:b9:36:53:8a:68:57:7c:81:
1a:fb:80:36:f1:97:ea:91:ce:5c:2b:b1:85:33:66:
c1:40:49:bd:f0:e9:31:57:21:b3:89:00:dc:21:a8:
42:4a:d2:9b:47:8c:6d:48:af:0e:34:8d:7d:59:ac:
01:e9:4c:0c:49:ac:0f:1d:68:80:81:76:de:52:53:
10:6d:21:5e:02:11:df:ce:71:8c:5f:b8:4c:ac:5e:
e8:bf:10:c8:44:7e:05:a7:ae:ed:f6:f9:e1:08:da:
61:8c:71:cb:f4:6c:ca:19:0e:86:bd:fd:83:37:db:
f8:a2:cb:46:1d:8a:37:d8:3f:79:2c:77:ea:8b:10:
df:01:b7:f8:f2:71:d0:99:f3:92:b6:97:6d:19:4c:
0e:8c:7c:65:27:61:08:fc:03:a3:ba:a0:11:92:b6:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6B:86:5C:BD:42:01:FE:9C:03:8E:86:41:EE:C5:69:65:75:C9:F2
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2muGXL1CAf6cA46GQe7FaWV1yfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
1c:fa:f7:65:54:9c:ef:29:2e:29:3c:2a:af:c3:f4:76:cc:94:
36:39:c8:2e:1b:7d:6a:21:14:3a:66:6b:35:d0:39:bb:19:eb:
d0:ea:e1:0a:b4:7e:c2:f0:ac:42:23:b6:54:91:93:f6:a3:be:
b5:d8:db:bf:b1:93:70:9f:fc:29:61:59:c6:2f:be:5d:48:ce:
aa:ed:c8:52:e9:cc:53:19:af:c2:87:8c:fb:bf:80:34:a1:5d:
e2:6c:d0:0d:ff:0c:e6:41:74:39:09:21:87:65:da:18:7e:0f:
fe:8c:21:b4:cb:23:0f:6b:f0:15:a6:8e:68:f9:3f:06:73:2a:
8e:18:af:c0:55:d7:60:d9:9f:3e:60:90:55:f9:95:8e:fc:23:
1d:82:1b:c5:90:4d:20:8f:fd:f3:73:f4:bb:6d:f5:f2:69:fc:
1f:29:15:95:aa:3f:18:94:1e:e5:40:e1:27:ae:05:2b:12:2f:
77:cb:5f:be:b3:5f:8f:86:0e:3c:86:f5:c9:2f:74:6d:2f:78:
b6:95:23:9d:08:19:81:61:56:e5:bf:b7:2c:83:85:50:5d:bc:
ed:80:2c:1e:aa:5a:a5:c1:27:82:69:c1:67:cd:e7:4a:d2:3c:
0f:c9:63:35:ee:7c:de:85:f4:83:61:14:2f:8b:03:40:cf:5c:
62:c0:a9:dc
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYtCwQAvDedFOAEQ8EYK68y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMxMDE4MTIyNzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTZiODY1Y2JkNDIwMWZlOWMwMzhlODY0MWVlYzU2OTY1NzVjOWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoLaUTnDyzwyMkQrwurfTkajdXh7
voFpxpdCj+EAFJiNx01u+cnVeW5uNsf6rsQ14F+Jca7jazfSgvvcsiD7zuVZgH75
Xlm8Ce3VlXKvdutSHU8GPxttya0B6fO/4e2FuTZTimhXfIEa+4A28Zfqkc5cK7GF
M2bBQEm98OkxVyGziQDcIahCStKbR4xtSK8ONI19WawB6UwMSawPHWiAgXbeUlMQ
bSFeAhHfznGMX7hMrF7ovxDIRH4Fp67t9vnhCNphjHHL9GzKGQ6Gvf2DN9v4ostG
HYo32D95LHfqixDfAbf48nHQmfOStpdtGUwOjHxlJ2EI/AOjuqARkrYM0QIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFNprhly9QgH+nAOOhkHuxWlldcnyMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvMm11R1hMMUNBZjZjQTQ2R1FlN0ZhV1YxeWZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHKBggrBgEFBQcBBwEB/wSBujCBtzCBiQQCAAEwgYIDBAAF
tVcDBAAtCR0DBAAtWIgDBAAtWIoDBAItXqgwDAMEAC2EtQMEAy2EsAMEAC2Q1AME
AE1TJQMEAE1TJwMEAlXReAMEAFvfbgMEAbkr+AMEALkr+wMEAbnIPgMEAsEe8AME
AME5KwMEAsLyYDAMAwQCw7FcAwQAw7FeAwQCw9O8MCkEAgACMCMDBQAqAXEgAwUD
KgeSAAMFAyoMpYADBQMqEN/AAwUDKhEFgDANBgkqhkiG9w0BAQsFAAOCAQEAHPr3
ZVSc7ykuKTwqr8P0dsyUNjnILht9aiEUOmZrNdA5uxnr0OrhCrR+wvCsQiO2VJGT
9qO+tdjbv7GTcJ/8KWFZxi++XUjOqu3IUunMUxmvwoeM+7+ANKFd4mzQDf8M5kF0
OQkhh2XaGH4P/owhtMsjD2vwFaaOaPk/BnMqjhivwFXXYNmfPmCQVfmVjvwjHYIb
xZBNII/983P0u2318mn8HykVlao/GJQe5UDhJ64FKxIvd8tfvrNfj4YOPIb1yS90
bS94tpUjnQgZgWFW5b+3LIOFUF287YAsHqpapcEngmnBZ83nStI8D8ljNe583oX0
g2EUL4sDQM9cYsCp3A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org