Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/67sb5X6bPxm8t6-1spiaSGpybGg.roa
File: 67sb5X6bPxm8t6-1spiaSGpybGg.roa (raw, json)
Hash identifier: U8N8072CfIWnmVuBk3UEnIASuHPIYe842xoXUeK871U=
Subject key identifier: EB:BB:1B:E5:7E:9B:3F:19:BC:B7:AF:B5:B2:98:9A:48:6A:72:6C:68
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A16E6E4D3F045EEDD7EB076C53831A0D9
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/67sb5X6bPxm8t6-1spiaSGpybGg.roa
Signing time: Mon 21 Aug 2023 07:02:25 +0000
ROA not before: Mon 21 Aug 2023 07:02:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 24
2.56.111.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 21 Aug 2023 12:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:16:e6:e4:d3:f0:45:ee:dd:7e:b0:76:c5:38:31:a0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 21 07:02:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebbb1be57e9b3f19bcb7afb5b2989a486a726c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e4:a8:c2:90:03:5f:bc:ae:8b:88:13:cb:a6:
9f:7a:e1:0c:f2:6c:15:85:61:97:58:16:b9:da:23:
a8:de:a9:fe:b3:fa:49:2e:a6:7f:8c:30:2e:79:78:
bc:e0:06:9d:bc:15:a5:32:df:62:df:7a:c8:ec:74:
30:9c:cf:1a:04:9b:7a:cc:9d:95:81:b4:fa:ff:08:
c1:4c:88:26:77:87:8a:53:43:ef:50:77:f1:81:0b:
d3:f4:66:05:ab:17:81:69:c8:18:ce:0c:db:bf:fe:
8a:18:45:c3:fe:d1:3e:0b:79:9f:7f:12:bf:27:9b:
e3:06:cf:46:4e:4a:73:00:73:d8:dd:60:d6:62:9a:
c8:46:41:ee:d7:5c:26:60:14:07:00:88:81:6d:b6:
bf:f3:fc:68:d2:61:8d:8e:8b:ec:1e:13:f6:64:57:
ef:d6:4b:d4:71:ff:69:86:f9:89:7b:fc:27:5d:f4:
eb:72:e4:b4:5c:6d:06:54:e4:49:12:3d:a3:7c:ed:
5a:b0:76:6c:41:b0:a6:33:7b:e3:8f:cd:e6:07:3b:
3c:60:aa:93:5b:eb:31:e3:64:5e:57:bd:86:f2:f0:
c5:d5:61:5a:b8:4d:2a:58:d3:b9:fe:af:46:d6:32:
a7:5d:ab:af:85:48:bd:bf:0d:fc:46:a0:f3:6e:a7:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BB:1B:E5:7E:9B:3F:19:BC:B7:AF:B5:B2:98:9A:48:6A:72:6C:68
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/67sb5X6bPxm8t6-1spiaSGpybGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/23
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
71:13:38:84:5c:4d:eb:b4:9d:29:6c:a1:c3:c6:fb:73:1a:89:
d9:47:c4:d1:d9:24:1a:ec:7f:d8:85:1b:1f:85:67:66:a0:21:
fd:ea:0f:cf:b8:ec:54:e0:02:8a:fb:f2:36:87:e0:02:2b:71:
93:d2:31:c0:2e:00:58:21:db:76:59:4a:87:dd:3a:8b:24:cd:
34:00:3c:4d:77:eb:28:e2:02:30:db:1d:86:9d:30:96:b8:1f:
ef:e9:9f:1f:6a:82:15:6a:87:05:9b:ed:83:5e:9d:96:a6:3a:
bf:93:3d:07:d5:15:96:cf:00:50:07:8b:42:68:0b:bb:fc:cf:
9a:f9:82:3a:cd:2c:95:1e:9a:d1:f7:c5:b9:24:9e:b9:16:83:
35:47:1a:ea:94:8f:86:7b:42:eb:21:04:ff:1a:ee:10:e9:ec:
07:e2:02:5f:41:b4:f9:03:0d:ab:0b:3b:68:89:3e:91:5b:9d:
e2:59:3a:f9:dc:24:94:41:fa:43:c3:b3:e3:66:e1:91:3d:04:
b4:7d:58:0e:59:6e:e0:e1:b3:21:3c:b1:3f:ef:6e:d4:c6:5b:
6a:56:31:f4:05:e2:06:c2:82:04:5b:0b:6b:d5:06:45:44:b9:
37:1c:0c:04:5f:dd:10:d6:82:28:87:76:ed:0f:6b:16:92:7d:
4f:03:93:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org