Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U1ZNa17My43MF0ahE_rGUXcwWt8.roa
File: U1ZNa17My43MF0ahE_rGUXcwWt8.roa (raw, json)
Hash identifier: 1mmCnpyLbv6jtT4GqMaSrVWN545eJnDyyGgYJYQ7v70=
Subject key identifier: 53:56:4D:6B:5E:CC:CB:8D:CC:17:46:A1:13:FA:C6:51:77:30:5A:DF
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A311821B2F98183C7C34D376505C5CCBC
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U1ZNa17My43MF0ahE_rGUXcwWt8.roa
Signing time: Sat 26 Aug 2023 09:06:19 +0000
ROA not before: Sat 26 Aug 2023 09:06:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
45.81.112.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.81.114.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 27 Aug 2023 12:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:18:21:b2:f9:81:83:c7:c3:4d:37:65:05:c5:cc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 26 09:06:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53564d6b5ecccb8dcc1746a113fac65177305adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:2f:d9:55:7e:d0:f9:f6:7c:41:35:6f:ba:
8d:d5:6b:24:20:c1:03:0d:0c:2b:62:14:0b:0d:c1:
45:80:73:b2:17:2a:96:2f:7c:c2:c0:89:6b:7d:48:
1f:ff:61:68:c9:de:a8:21:96:c6:55:ee:7e:f1:86:
4a:81:5d:51:ea:4e:00:00:8b:64:a2:c6:e0:e7:00:
7c:5f:55:47:55:26:a4:18:73:3a:62:5d:0e:fd:a7:
b9:70:f9:db:11:2a:06:95:4f:36:da:b0:a8:61:2b:
54:a7:95:32:f3:e2:60:a9:bc:f4:7c:b7:76:b1:95:
aa:b6:5e:0f:fa:00:5f:f4:83:8e:7c:d9:e1:9c:89:
64:4e:72:dd:e5:34:bb:89:6b:a3:06:21:77:d0:90:
a2:ee:ee:e9:c6:dc:1c:de:2b:66:72:e3:06:70:37:
59:3a:94:a4:0f:3c:d6:a7:da:0d:a4:57:6f:2a:27:
b1:ed:29:73:2b:20:20:e4:18:8a:00:38:c6:71:c7:
9e:ee:14:f5:2d:68:fa:9c:ef:88:55:1d:c6:57:29:
3d:82:e5:35:42:da:52:c7:61:e5:46:05:c1:bf:11:
6b:ee:fc:2f:10:1f:83:9b:c7:2a:0a:41:ee:8c:7a:
6f:d6:95:f6:90:da:92:43:08:57:c0:6a:17:12:1b:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:56:4D:6B:5E:CC:CB:8D:CC:17:46:A1:13:FA:C6:51:77:30:5A:DF
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U1ZNa17My43MF0ahE_rGUXcwWt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/23
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/23
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
0b:ac:04:a1:8a:38:65:99:41:1c:90:ff:bc:83:b7:37:36:e0:
63:22:1f:d0:77:f4:a6:8f:fd:1c:a2:22:c0:fb:ad:79:4b:20:
ee:96:b6:42:4d:ce:32:a5:66:ac:9a:78:5a:ad:e2:23:62:92:
8b:7f:e9:ed:a4:c9:e4:54:dc:09:e2:13:8f:0c:2d:69:36:82:
1f:82:45:2f:9b:d0:14:53:64:4a:dc:10:8a:b8:cc:02:e5:39:
e1:cc:09:50:62:43:06:bd:30:6d:57:ea:c4:36:ca:c3:c7:9d:
2a:e5:ba:50:6e:cb:ca:7a:54:19:8a:a7:97:ac:a1:9d:9a:e8:
42:06:2f:fc:fc:b7:17:0d:da:e6:53:fe:a5:06:a0:d1:8e:b0:
be:c2:d9:d3:4f:d3:7e:ca:97:6f:1d:37:4f:0b:49:ef:5c:e3:
67:a6:6b:c2:02:4f:14:8f:04:ac:c1:79:20:f8:5a:93:97:ef:
5e:82:9a:d5:cc:48:08:11:56:3f:4e:ee:1d:9f:73:80:8c:52:
3e:1d:1c:cc:5b:ed:08:d7:57:08:06:c1:ab:a6:c7:eb:d0:6f:
bd:63:4e:e2:f1:48:d8:31:1e:8c:af:0f:4b:99:1b:7c:12:95:
45:eb:9a:ee:85:fe:46:50:f0:37:ec:36:d3:25:77:9e:c7:e1:
a4:ee:80:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org