Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MxAJVlv8B0G8wvsgKu_nXHjVfIc.roa
File: MxAJVlv8B0G8wvsgKu_nXHjVfIc.roa (raw, json)
Hash identifier: xvV3o+aiVqyG6AqpF09hA2TMAssoAcstO/pN7aJvZRQ=
Subject key identifier: 33:10:09:56:5B:FC:07:41:BC:C2:FB:20:2A:EF:E7:5C:78:D5:7C:87
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018AD6B3943DB70FB37081EB8CCE24806FFA
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MxAJVlv8B0G8wvsgKu_nXHjVfIc.roa
Signing time: Wed 27 Sep 2023 12:53:27 +0000
ROA not before: Wed 27 Sep 2023 12:53:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 27 Sep 2023 13:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:b3:94:3d:b7:0f:b3:70:81:eb:8c:ce:24:80:6f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 27 12:53:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=331009565bfc0741bcc2fb202aefe75c78d57c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:49:84:3c:33:85:1f:82:57:51:10:a2:d2:
0a:3e:57:c3:70:cf:7f:fd:56:3f:d6:27:a4:b0:72:
80:9d:3b:51:b9:23:a8:5b:92:1d:4d:75:b9:cd:dd:
66:32:b1:b3:c4:4f:79:af:78:04:86:a7:2e:b5:98:
f3:77:f2:ad:13:33:20:b8:84:1f:60:c8:7b:6d:df:
2c:a8:3f:15:36:80:f3:a6:91:fc:e2:be:f4:8c:c0:
07:79:db:2a:63:b2:ca:0e:c3:5b:be:4f:af:49:da:
6b:48:9f:28:99:c2:5d:08:d5:76:f8:11:ac:9a:fb:
38:59:e2:97:1c:a3:1e:60:db:e4:b8:ce:db:c1:e5:
d6:91:f7:42:1f:e9:90:7e:0d:03:40:2f:e2:b1:e2:
e3:bc:5f:91:a6:68:3f:59:04:7d:9b:44:dc:aa:8d:
d2:da:67:ed:c9:4d:da:d4:8f:7a:9d:ba:fa:1e:c3:
a7:c7:f0:f1:2e:6d:c9:4f:d2:91:26:be:44:6c:93:
b4:2b:5d:73:19:a4:5c:c7:9d:0a:da:fc:61:9c:6f:
02:0b:d1:36:76:bc:7a:df:7e:b8:a4:14:c9:b8:fb:
f7:ce:ad:30:87:ed:7a:54:d8:bc:0d:1d:f5:1a:d9:
5d:e2:87:7f:19:da:8e:ff:1c:6a:36:ab:fb:bc:4c:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:10:09:56:5B:FC:07:41:BC:C2:FB:20:2A:EF:E7:5C:78:D5:7C:87
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MxAJVlv8B0G8wvsgKu_nXHjVfIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/23
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
a4:18:d8:3f:a5:99:d5:a3:8b:16:24:9a:84:8c:5a:37:db:50:
ce:7c:09:c7:58:e7:17:f5:79:54:8d:f9:7c:ce:6b:97:a2:19:
40:ba:16:27:81:0e:86:a7:48:99:40:79:55:af:43:f1:38:a2:
e4:6c:c8:42:0e:2a:c2:20:b4:87:5e:50:88:40:dc:dd:dc:c6:
92:52:fb:ab:da:1d:01:b7:7f:79:bf:08:3d:ce:48:76:b7:b8:
0f:73:c5:1f:5b:eb:92:6d:47:c8:a8:1a:e5:23:ac:52:fe:b5:
3d:7e:4a:e3:55:91:73:23:95:b7:c5:3b:e7:18:0a:de:46:56:
e2:4f:d6:2d:b1:d5:ea:54:d0:ca:13:c4:06:c7:77:70:00:41:
9b:cc:cf:08:c4:a2:49:50:26:a3:ac:2c:66:de:85:ea:36:16:
ff:fc:ec:24:2c:58:4e:e1:47:2d:83:2c:cb:e4:fb:0c:e6:08:
5c:f8:86:55:00:bf:90:c0:9d:59:c3:4f:16:88:32:ec:bb:63:
cc:8a:e8:a4:b7:e2:bb:73:50:7b:fd:e0:b0:bf:a6:63:05:4b:
46:51:98:ec:71:1c:a8:85:9d:fa:a4:3a:53:9a:76:30:bc:f9:
4f:b9:74:cd:d6:0d:8b:38:8f:73:d4:c2:e4:83:cf:4d:5b:24:
8e:3a:91:97
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAYrWs5Q9tw+zcIHrjM4kgG/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwOTI3MTI1MzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzEwMDk1NjViZmMwNzQxYmNjMmZiMjAyYWVmZTc1Yzc4ZDU3Yzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fFJhDwzhR+CV1EQotIKPlfDcM9/
/VY/1ieksHKAnTtRuSOoW5IdTXW5zd1mMrGzxE95r3gEhqcutZjzd/KtEzMguIQf
YMh7bd8sqD8VNoDzppH84r70jMAHedsqY7LKDsNbvk+vSdprSJ8omcJdCNV2+BGs
mvs4WeKXHKMeYNvkuM7bweXWkfdCH+mQfg0DQC/iseLjvF+Rpmg/WQR9m0Tcqo3S
2mftyU3a1I96nbr6HsOnx/DxLm3JT9KRJr5EbJO0K11zGaRcx50K2vxhnG8CC9E2
drx63364pBTJuPv3zq0wh+16VNi8DR31Gtld4od/GdqO/xxqNqv7vEwu4QIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFDMQCVZb/AdBvML7ICrv51x41XyHMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvTXhBSlZsdjhCMEc4d3ZzZ0t1X25YSGpWZkljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHcBggrBgEFBQcBBwEB/wSBzDCByTCBmwQCAAEwgZQDBAAF
tVcDBAAtCR0DBAItUXADBAAtWIgDBAAtWIoDBAItXqgwDAMEAC2EtQMEAy2EsAME
AS2Q1AMEAE1TJQMEAE1TJwMEAlXReAMEAFvfbgMEAbkr+AMEALkr+wMEAbnIPgME
AMEe8AMEAcEe8gMEAME5KQMEAME5KwMEAsLyYDAMAwQCw7FcAwQAw7FeAwQCw9O8
MCkEAgACMCMDBQAqAXEgAwUDKgeSAAMFAyoMpYADBQMqEN/AAwUDKhEFgDANBgkq
hkiG9w0BAQsFAAOCAQEApBjYP6WZ1aOLFiSahIxaN9tQznwJx1jnF/V5VI35fM5r
l6IZQLoWJ4EOhqdImUB5Va9D8Tii5GzIQg4qwiC0h15QiEDc3dzGklL7q9odAbd/
eb8IPc5Idre4D3PFH1vrkm1HyKga5SOsUv61PX5K41WRcyOVt8U75xgK3kZW4k/W
LbHV6lTQyhPEBsd3cABBm8zPCMSiSVAmo6wsZt6F6jYW//zsJCxYTuFHLYMsy+T7
DOYIXPiGVQC/kMCdWcNPFogy7LtjzIropLfiu3NQe/3gsL+mYwVLRlGY7HEcqIWd
+qQ6U5p2MLz5T7l0zdYNiziPc9TC5IPPTVskjjqRlw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org