Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8I58N1bCNab9A6MSnRq41FEVczI.roa
File: 8I58N1bCNab9A6MSnRq41FEVczI.roa (raw, json)
Hash identifier: vHW7Av8ZIJTbtIPp9t8nOA2G7Czk+DY7NOQzrA/QIxo=
Subject key identifier: F0:8E:7C:37:56:C2:35:A6:FD:03:A3:12:9D:1A:B8:D4:51:15:73:32
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C33E82871E7E88E69DE6E0198282DF5CB
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8I58N1bCNab9A6MSnRq41FEVczI.roa
Signing time: Mon 04 Dec 2023 08:18:21 +0000
ROA not before: Mon 04 Dec 2023 08:18:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 04 Dec 2023 14:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:e8:28:71:e7:e8:8e:69:de:6e:01:98:28:2d:f5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 4 08:18:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f08e7c3756c235a6fd03a3129d1ab8d451157332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:53:99:06:19:ad:02:04:74:90:39:09:f2:
96:a2:d7:5d:8a:7d:c3:45:bd:60:57:35:8a:9d:4c:
75:52:c2:33:0c:5e:63:81:be:2e:56:e5:a3:91:ee:
f0:6f:eb:98:4a:64:e8:de:9f:64:0f:4f:c1:49:cc:
99:59:8a:42:bc:a2:4d:6a:d8:12:42:bb:b7:6c:17:
07:61:2b:36:9c:dd:10:5b:b9:c7:31:9c:6a:a5:4b:
c6:c1:9b:27:52:54:f5:f9:a8:59:b9:1b:98:f2:8f:
88:85:3c:98:01:b6:2b:1b:33:dd:f8:bb:3d:28:1f:
72:fa:9c:62:83:39:4e:11:3b:ed:af:44:28:19:ff:
0f:33:7d:46:c4:25:55:81:09:d4:c3:11:c1:9a:7a:
e2:7e:67:39:61:60:0f:01:3f:3e:98:2e:14:5f:3e:
ce:31:f4:34:9d:85:2a:0b:25:5b:c8:58:cc:3e:1e:
d5:3d:08:da:5c:66:68:1a:47:15:09:bb:7a:d0:9f:
a8:8b:49:09:6c:03:02:48:9e:d5:e5:4d:32:a3:66:
1e:c7:47:18:c7:75:ca:cf:93:ec:c4:0b:29:ef:b8:
6b:48:e4:26:70:f7:75:f5:4c:25:a6:4d:f5:a9:df:
b0:65:4b:25:e6:f8:57:68:cf:3a:a3:9e:21:79:87:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8E:7C:37:56:C2:35:A6:FD:03:A3:12:9D:1A:B8:D4:51:15:73:32
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8I58N1bCNab9A6MSnRq41FEVczI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
a9:a2:5a:13:9b:a4:3b:68:fd:a0:ee:13:a0:92:2d:c0:b7:44:
9c:a5:bb:71:2e:31:64:92:ed:3f:61:8e:99:00:2c:80:00:3f:
3b:12:b4:c3:1a:21:a3:67:17:d4:48:68:95:1c:32:9f:f4:11:
80:70:e5:73:7c:d2:46:36:a3:2c:66:d0:a5:82:7c:b6:ca:cb:
fa:fe:3d:bc:8a:2a:2a:20:70:5c:e6:f1:8c:3b:18:75:09:49:
6b:c4:b4:7b:ed:1f:9f:2e:07:56:17:49:1e:bb:36:b3:6c:15:
af:0f:07:0d:ea:63:c2:89:75:23:8c:c1:f6:c4:61:6e:48:fa:
fd:ba:86:9f:0d:b2:b6:43:4e:e8:07:14:23:08:de:c2:fe:3b:
d3:9d:e1:d3:56:1a:a4:b2:b6:47:07:05:24:7a:76:a2:fa:93:
47:c2:b6:64:bf:1e:80:ba:82:fd:ed:de:4c:cc:31:70:8e:cd:
3c:27:af:2e:91:e5:18:8d:0f:f6:2a:f8:1d:dc:d2:47:34:bd:
fe:0f:fe:e9:d9:a3:65:55:52:e0:44:5b:cd:ff:d1:05:7b:af:
05:59:4d:be:40:d2:86:19:8c:37:35:a3:bf:f2:0a:3d:8c:40:
7f:3d:af:af:1f:ba:b8:47:12:2d:97:ac:90:82:a5:a9:7e:b3:
02:02:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org