Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HRO4to0OZ5pRhBklZRnqfdbS5OI.roa
File: HRO4to0OZ5pRhBklZRnqfdbS5OI.roa (raw, json)
Hash identifier: Nfvq49obuwP2IU/lZeZuTIscSx96H7uVk0kSFtjSoGE=
Subject key identifier: 1D:13:B8:B6:8D:0E:67:9A:51:84:19:25:65:19:EA:7D:D6:D2:E4:E2
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01859628449FEB549DB61898F7B66F109EC1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HRO4to0OZ5pRhBklZRnqfdbS5OI.roa
Signing time: Mon 09 Jan 2023 10:51:39 +0000
ROA not before: Mon 09 Jan 2023 10:51:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 22
45.88.139.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 15 Jan 2023 17:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:28:44:9f:eb:54:9d:b6:18:98:f7:b6:6f:10:9e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 9 10:51:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d13b8b68d0e679a518419256519ea7dd6d2e4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:fa:26:10:1c:e1:94:b6:ff:d4:e9:54:21:
8b:a3:48:09:6e:6e:31:b7:9b:bb:75:c2:19:10:98:
b3:93:1b:bd:20:e0:24:ab:0a:8c:58:72:e9:ba:ef:
ad:7d:8d:87:64:3f:6e:00:c2:35:ca:1a:37:84:13:
8f:da:9d:ff:2b:b7:b8:46:5e:f6:1c:db:73:eb:22:
51:c2:50:b3:b0:55:19:db:99:ae:9d:86:c5:ac:2a:
82:46:65:45:43:47:37:ae:ae:ba:e3:59:ea:d6:74:
d1:01:74:e4:c1:03:3f:2f:f1:23:6f:c3:c2:58:2c:
49:e6:53:ed:69:7f:66:40:f3:2c:9e:9f:9e:3a:bb:
5c:22:dc:23:ad:6b:23:cf:c1:3a:9e:56:ce:9e:fc:
c1:70:40:c8:1b:41:ef:fb:19:3d:d1:f7:2f:8c:43:
58:80:f0:66:e0:e0:28:91:eb:01:8b:56:30:6e:19:
6a:f4:f4:48:f5:c7:24:4b:eb:d7:7e:dc:44:9e:a1:
ed:a0:6b:45:4d:6c:fd:0b:25:07:aa:6c:55:25:4e:
b9:0d:28:d3:a5:65:d1:8b:07:1c:c8:c0:4e:34:ed:
2c:4a:43:8c:5f:ad:1a:5f:43:5e:70:6f:3d:2f:d6:
d5:cc:ee:55:ed:74:f2:77:e7:21:53:0f:3d:f1:47:
69:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:13:B8:B6:8D:0E:67:9A:51:84:19:25:65:19:EA:7D:D6:D2:E4:E2
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HRO4to0OZ5pRhBklZRnqfdbS5OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.139.0/24
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.38.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
ae:ef:12:25:87:26:06:5e:67:d0:10:7f:5f:d4:81:c0:e9:fc:
9d:dc:01:cd:9b:f3:14:bf:1e:b9:3f:cc:d4:a1:0c:43:7f:b3:
28:7f:cd:d2:eb:24:97:41:77:a6:e0:ce:bd:cb:37:3f:6f:b0:
ff:1a:80:e2:fd:f8:97:d8:97:31:0e:5d:0a:9e:9b:e2:73:dc:
3f:53:19:b8:6d:0d:28:93:f3:2c:9b:77:2b:47:99:17:d1:c1:
b6:ef:91:d4:5e:9c:59:bb:d6:b0:a9:73:22:0f:c9:92:96:54:
c3:00:17:e4:c8:56:c5:9f:6a:2f:68:64:77:72:c2:2d:f0:8d:
19:83:d5:fb:f9:40:dc:8f:81:67:15:0c:30:b3:a1:c1:ec:b2:
a8:ac:a0:f0:81:24:a0:c5:c6:38:14:5d:55:46:21:15:ca:9e:
c7:97:3e:ad:da:61:f1:18:50:37:25:42:06:1e:a8:24:8e:6d:
0f:21:7f:2f:df:1f:92:20:9f:0a:a8:12:e7:81:9f:5c:de:01:
2e:e9:91:7c:1c:71:0b:f0:a5:24:1f:4d:9f:c0:dd:d6:ff:01:
56:ec:0b:c7:b3:b3:fa:b3:83:66:76:6f:6c:1c:fc:97:ab:5b:
df:e7:d2:46:d5:8c:16:80:43:ca:11:82:f9:39:a3:68:4e:7f:
2d:2c:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org