Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6cPgJXK6Gbl5Z32FJ9DJquJ71oE.roa
File: 6cPgJXK6Gbl5Z32FJ9DJquJ71oE.roa (raw, json)
Hash identifier: +2V5FVJxTPgJJvTARC9OAf4EAVVq8qojOTKRCHoTibM=
Subject key identifier: E9:C3:E0:25:72:BA:19:B9:79:67:7D:85:27:D0:C9:AA:E2:7B:D6:81
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01884D2D76765F893C2AE0A564A03203D5C9
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6cPgJXK6Gbl5Z32FJ9DJquJ71oE.roa
Signing time: Wed 24 May 2023 09:53:25 +0000
ROA not before: Wed 24 May 2023 09:53:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 22
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 05 Jun 2023 08:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:2d:76:76:5f:89:3c:2a:e0:a5:64:a0:32:03:d5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 24 09:53:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c3e02572ba19b979677d8527d0c9aae27bd681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:e0:e5:9d:01:e4:cd:eb:41:4a:51:c0:15:
cb:f2:04:ac:18:f3:36:15:27:7e:ca:3b:83:59:1e:
3f:27:3c:d1:cc:e3:27:0e:a6:cd:1d:e8:16:80:cb:
f9:4b:8f:bf:33:ff:5e:62:83:95:c3:13:fc:ad:d7:
7d:b1:93:09:21:99:f7:04:70:20:66:6f:50:8c:05:
36:4e:19:d9:ca:da:5a:7c:b1:b8:36:8c:83:23:e4:
ec:ae:59:2a:ca:ba:f7:0c:c0:9d:23:e9:7a:fe:3f:
ca:ab:75:99:e8:1c:7b:88:84:dc:2c:c0:98:9d:b2:
cf:b3:51:c8:ea:a5:23:0e:1a:44:ae:82:b9:d2:9b:
5b:83:b6:b0:16:77:c9:0f:3c:6d:83:e8:81:0a:64:
0e:54:fd:da:2e:82:fd:a3:28:8a:3c:d7:9d:cd:82:
88:3f:48:d7:08:73:e3:86:f7:fd:33:a6:fb:a9:03:
59:12:8f:38:c5:9c:93:10:e7:10:33:30:33:45:c2:
e2:33:bc:30:cf:d3:4f:a2:75:5a:3c:6e:f8:36:0b:
3b:96:ae:6e:cb:0c:48:46:44:3f:1f:12:b1:b7:fd:
40:27:7b:b1:b1:03:43:24:15:f6:69:a1:d1:5a:f8:
0c:a9:71:e9:54:0b:b2:9c:78:0b:1a:60:0f:50:ad:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C3:E0:25:72:BA:19:B9:79:67:7D:85:27:D0:C9:AA:E2:7B:D6:81
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6cPgJXK6Gbl5Z32FJ9DJquJ71oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/23
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.38.0/23
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
0c:29:32:af:f7:c1:d8:28:55:f7:9a:8a:d1:1f:cf:c5:75:3d:
cc:41:32:4d:01:d0:2a:94:ee:5a:42:4f:2c:28:1c:65:6e:9d:
2c:13:6f:95:c8:1a:98:cf:0b:3f:29:c3:ec:a5:6a:4e:b4:1d:
45:06:96:02:b9:bc:67:ff:04:33:fc:09:88:c1:ea:e5:26:96:
fd:ee:0f:a7:7d:d9:15:8b:5d:ce:92:6b:13:48:f8:b8:3f:0e:
61:70:98:51:91:8e:4d:87:62:e6:9f:b7:06:bc:30:82:1a:2b:
7e:2d:8e:14:2d:b1:67:0c:c6:c7:01:54:0e:3e:5e:df:c1:46:
ed:6d:7e:ff:5b:2e:8f:33:a9:58:69:43:02:e2:33:35:00:10:
ad:5f:6c:d4:e1:a7:49:c8:ce:42:6f:91:30:bc:ea:44:e1:8f:
0f:f5:6c:dc:1e:f0:9c:24:5d:83:a9:16:e9:c0:09:28:58:f8:
b3:90:f0:21:10:e9:28:39:a9:f7:7e:d7:6e:b3:4a:64:cf:b5:
e7:56:5a:e3:a9:ec:84:ee:76:d3:d6:09:01:e9:81:f3:7f:b5:
3a:b2:c8:d3:41:fa:a0:6e:5a:55:fb:c5:40:15:a2:f8:33:2f:
fa:ad:1e:57:cd:73:19:c4:84:97:e6:cb:5a:19:df:aa:92:35:
2c:fd:18:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org