Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VUXpY-aWF4WXdORt0sYwOxW5Vzs.roa
File: VUXpY-aWF4WXdORt0sYwOxW5Vzs.roa (raw, json)
Hash identifier: ovj8L0/8dwsEn9Qvly+Nvz+02+imGHzzXGwiNkt09u0=
Subject key identifier: 55:45:E9:63:E6:96:17:85:97:74:E4:6D:D2:C6:30:3B:15:B9:57:3B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E992FA3F666744D1DC2BD2E0CA143A448
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VUXpY-aWF4WXdORt0sYwOxW5Vzs.roa
Signing time: Mon 01 Apr 2024 10:23:39 +0000
ROA not before: Mon 01 Apr 2024 10:23:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 2.56.109.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.144.212.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.96.0/24 maxlen: 24
194.242.97.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a07:9200::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a10:dfc0::/29 maxlen: 29
2a11:580::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Apr 2024 19:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:99:2f:a3:f6:66:74:4d:1d:c2:bd:2e:0c:a1:43:a4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 1 10:23:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5545e963e69617859774e46dd2c6303b15b9573b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:b2:7f:9b:be:25:c7:7c:62:57:17:6b:4b:
4a:01:bf:10:1a:1d:b3:39:36:e5:b6:f6:5f:9d:a8:
49:72:de:cb:67:5e:7d:10:58:fb:03:60:5b:16:cb:
d6:c5:e0:be:52:ac:6f:ed:c6:4e:09:0b:d6:92:20:
bd:03:e2:4e:69:8b:56:11:83:c4:68:20:f4:d1:55:
35:75:9b:6c:a9:ac:89:99:6a:07:4f:18:74:f3:57:
a7:e7:15:93:72:46:6b:69:8c:2e:78:3b:c5:73:9f:
71:64:1a:5b:c7:9a:69:31:fa:ca:6e:00:a0:a7:14:
9b:b7:98:10:7a:a6:6b:cd:47:de:97:bd:9d:09:a0:
e0:80:e3:df:89:70:4b:7d:40:8c:6a:dc:8c:39:0c:
8d:10:81:82:29:bc:f2:96:0a:8e:b4:78:25:4b:20:
48:b7:26:3e:01:c2:48:d0:be:7d:d6:ae:2a:72:8f:
13:17:7f:da:eb:c4:b6:6e:26:01:95:3d:fd:6a:6e:
ee:c4:52:5c:2a:b9:e1:3b:22:0a:81:b8:27:72:20:
e1:3c:b0:a2:1b:7a:73:28:5f:9c:c7:7d:20:77:45:
db:f8:64:a1:15:17:67:b8:a2:fc:00:91:be:d9:00:
ea:1f:24:05:28:08:8c:76:27:b9:7b:e8:8d:1d:d7:
4a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:45:E9:63:E6:96:17:85:97:74:E4:6D:D2:C6:30:3B:15:B9:57:3B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VUXpY-aWF4WXdORt0sYwOxW5Vzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.81.115.0/24
45.88.136.0/24
45.88.138.0/24
45.94.171.0/24
45.132.180.0/22
45.144.212.0/24
45.144.215.0/24
45.151.3.0/24
77.83.37.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.93.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
4a:5f:0e:c6:91:f0:48:8a:74:c0:95:82:10:5f:b0:99:2f:ed:
ed:25:06:dc:b9:c7:79:89:6c:8a:bf:5b:8c:cb:ec:51:47:61:
97:02:03:cf:cc:90:b5:5c:fd:34:26:be:90:29:90:6b:b2:1f:
ae:bd:93:17:6a:78:98:69:cf:51:82:b5:cb:a8:78:d1:70:4d:
5a:40:64:3e:7f:78:1e:82:80:fe:99:2c:ad:4d:42:52:fe:e8:
f1:eb:b4:e4:0e:12:13:f3:b1:1e:ed:fc:62:4a:a0:48:5e:31:
64:4c:75:ed:df:52:8a:2f:b1:f8:43:23:1c:ce:bc:ca:e2:c6:
4c:b8:e8:34:46:df:59:b9:14:ac:6c:b1:5f:75:64:c1:ad:38:
a5:56:0a:4b:a8:84:95:e5:0e:17:27:61:e3:6d:0c:32:d0:0e:
78:4e:6a:9f:85:84:21:aa:9a:39:9c:86:03:6f:0b:ef:22:17:
cf:60:04:20:a9:dd:4a:30:a5:f6:e6:26:57:3f:81:c2:66:a5:
69:34:cb:0d:dc:2c:0b:cc:1a:f4:50:aa:3f:03:16:d0:75:ea:
19:08:1d:fb:53:f6:90:28:da:cf:fb:3b:1c:92:45:84:8a:ed:
69:f4:88:13:fd:74:eb:d7:af:3b:e2:a9:40:04:42:e3:7e:1d:
ce:18:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org