Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JCZOhSoJg1-8eyTtehmon4gN79g.roa
File: JCZOhSoJg1-8eyTtehmon4gN79g.roa (raw, json)
Hash identifier: IawZo/9UTTJw9mc5ODzCKVHAHzNZiMgsrFeCfYZ4zmc=
Subject key identifier: 24:26:4E:85:2A:09:83:5F:BC:7B:24:ED:7A:19:A8:9F:88:0D:EF:D8
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CEE3952434E653D84C62ADE72D16CB2E5
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JCZOhSoJg1-8eyTtehmon4gN79g.roa
Signing time: Tue 09 Jan 2024 12:36:23 +0000
ROA not before: Tue 09 Jan 2024 12:36:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Jan 2024 15:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:39:52:43:4e:65:3d:84:c6:2a:de:72:d1:6c:b2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 9 12:36:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24264e852a09835fbc7b24ed7a19a89f880defd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:5a:9f:f7:be:a1:bc:f7:b8:b9:cd:2a:c8:
b0:30:a4:7b:9b:74:2c:04:b5:7f:1a:73:77:09:11:
05:f5:b4:81:a9:e4:84:3f:f3:3c:a0:f7:ef:82:2c:
a5:cc:0a:68:58:51:e7:96:ac:0a:3d:3f:1b:b2:71:
3f:bc:df:2c:b1:a6:7e:95:87:7f:1f:e0:b7:ba:4a:
49:f2:02:ca:90:66:6d:d2:ab:60:6e:52:7c:70:2f:
dd:4c:ca:1e:bb:22:9f:cc:87:b6:4d:29:86:c7:e1:
26:1b:e9:82:71:58:cc:df:c7:37:bc:61:59:9a:f3:
4f:29:80:b6:fc:6e:a6:8a:ce:cc:ec:b3:56:eb:d0:
46:41:b1:7e:70:50:1c:a3:9f:16:33:1d:86:61:02:
16:28:7d:1d:24:b3:33:fe:a9:22:c1:e8:f6:97:46:
64:52:91:6e:5b:3a:fe:c0:5e:16:28:c2:42:69:52:
5b:68:30:27:4d:86:81:46:7c:29:9f:2f:83:a8:29:
a6:69:f7:94:81:0d:23:38:34:df:78:cd:02:4c:e5:
c6:fd:e2:f3:53:a6:ea:71:31:cd:00:ed:27:00:72:
ae:a0:e8:1f:0a:a0:a6:36:77:86:f4:34:34:bb:a7:
a2:38:ef:58:a4:ef:e6:96:d5:d7:ed:17:f9:1f:c1:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:26:4E:85:2A:09:83:5F:BC:7B:24:ED:7A:19:A8:9F:88:0D:EF:D8
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JCZOhSoJg1-8eyTtehmon4gN79g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.87.0/24
45.9.29.0/24
45.81.112.0/23
45.88.136.0/24
45.88.138.0/23
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
02:ac:d7:a9:c8:6e:70:df:5e:8a:20:15:d7:ba:b3:b2:f4:5a:
ec:bd:8b:f8:c4:fd:7e:8c:d2:26:7e:ad:05:d1:88:ca:cf:ec:
5c:10:f6:f5:8b:4b:cd:3d:c2:f4:49:7b:d1:cd:5d:fb:25:07:
dd:e0:a9:a5:7d:f4:9b:a4:da:38:1d:aa:63:fd:f3:8b:ff:cb:
c8:28:10:8a:ea:aa:fe:57:5c:dc:70:02:25:00:f5:11:d4:6e:
80:65:90:4a:22:ee:6c:48:a2:f0:5a:18:16:59:5f:2b:c6:b2:
ba:45:3c:e0:b2:5e:fe:a2:6a:2b:fa:f1:86:c2:da:3d:18:57:
7d:35:76:26:7c:97:0e:22:fb:46:b4:60:8a:10:c7:3a:73:5d:
47:46:2a:49:ec:12:92:d8:2d:99:57:1b:c4:2b:dc:7e:82:75:
a1:8b:1d:ed:9f:07:1f:5a:db:bb:85:33:14:01:a8:a8:fe:c5:
c8:24:df:05:8e:db:13:de:fa:a6:7f:b4:0e:e9:4a:b0:29:f7:
e1:18:4d:76:52:68:6c:46:ff:76:9f:e1:09:1f:82:80:bc:b1:
c7:fd:37:93:9f:87:ea:f6:a0:82:1a:93:cc:5c:f0:56:7c:bb:
8d:95:5f:16:a4:3d:3d:cf:ed:50:2f:0e:62:99:de:7b:58:93:
29:99:a2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org