Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_WT33ijMv3lAYuJaNd3pZbStOco.roa
File: _WT33ijMv3lAYuJaNd3pZbStOco.roa (raw, json)
Hash identifier: s8FBu/hnWx7ISEg3qXP7umodEcZcu+mn1RXD14ZZNKM=
Subject key identifier: FD:64:F7:DE:28:CC:BF:79:40:62:E2:5A:35:DD:E9:65:B4:AD:39:CA
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A47A27837146A436E8602D9A1DFA118C3
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_WT33ijMv3lAYuJaNd3pZbStOco.roa
Signing time: Wed 30 Aug 2023 18:09:04 +0000
ROA not before: Wed 30 Aug 2023 18:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.37.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.81.114.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 01 Sep 2023 12:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:47:a2:78:37:14:6a:43:6e:86:02:d9:a1:df:a1:18:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 30 18:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd64f7de28ccbf794062e25a35dde965b4ad39ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:15:41:63:69:fc:20:c0:d5:90:29:b8:7c:
76:e4:9a:f6:6e:08:89:a3:9c:a4:1a:3b:f8:44:6e:
3d:10:82:fa:89:c1:3a:a8:07:9b:f9:a7:2c:5d:b9:
42:f4:7e:88:a2:9e:dc:82:b8:8a:b9:05:1c:6c:16:
ea:7e:f6:c8:92:f9:c8:55:ab:6d:27:c6:11:49:66:
e9:8d:4c:9e:a8:c2:1e:69:39:bb:59:ee:32:b0:76:
93:75:aa:77:df:75:7b:c5:6a:93:aa:97:6c:d8:31:
d1:39:60:8c:c2:89:43:8e:b4:93:fd:00:f6:d0:cb:
82:e7:6c:cf:c1:19:75:cb:61:1b:90:14:73:2f:cc:
35:5a:80:d0:63:08:33:8a:05:2b:4e:d0:c1:69:13:
9a:16:a2:64:37:d8:bb:31:4e:3c:32:3d:66:a7:19:
6c:78:b7:27:1b:dc:c0:d8:1b:27:97:bb:86:e1:87:
2b:65:dc:bf:6f:f7:92:eb:b2:37:81:d1:26:80:c3:
8f:7c:00:fa:5d:6d:d7:eb:a5:0a:dd:44:95:7f:90:
5e:12:49:17:22:ec:5b:f1:28:a8:85:fe:0c:fe:0d:
2e:8a:21:a2:91:ee:fd:6b:d8:a7:41:f4:18:23:2f:
9a:9e:19:5e:f9:7c:27:58:9b:1f:8e:c9:ad:fe:86:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:64:F7:DE:28:CC:BF:79:40:62:E2:5A:35:DD:E9:65:B4:AD:39:CA
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_WT33ijMv3lAYuJaNd3pZbStOco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/23
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/23
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
72:b1:d6:22:dd:04:98:41:96:80:0d:bc:e1:4c:39:1e:a6:71:
ce:f8:5e:1c:bb:c7:89:2f:a3:ec:c6:c5:97:bb:c9:03:5c:83:
b8:60:f0:f3:31:7b:f1:c3:d1:36:fb:49:cf:32:11:19:c2:ed:
2a:00:5a:65:47:63:81:e8:1b:28:09:ca:cc:00:ca:25:a6:fe:
a8:95:26:d1:64:f3:55:71:66:7b:e3:84:d0:f5:09:62:5e:1c:
6c:fb:90:0f:46:44:b9:5d:dc:af:8e:03:20:e3:9b:5c:55:b6:
5a:8d:ad:0a:28:ff:f1:a9:83:67:3e:82:83:a7:a2:5f:df:ae:
da:f8:91:f7:89:1e:08:c2:97:e2:bf:10:e2:b8:ba:cf:9e:62:
1b:14:9d:63:94:64:4c:0f:1a:b5:ce:09:a2:cc:0c:25:48:dd:
2f:a8:9f:97:94:7d:59:41:50:38:3f:b9:ed:eb:83:a2:8f:94:
2d:22:6a:7b:76:c8:41:9d:65:3e:e6:d2:ab:f7:77:21:47:ae:
e5:1c:84:da:0a:28:66:e4:cc:b4:d8:45:75:03:31:4f:61:d8:
8a:06:5c:60:53:4f:db:a3:9b:94:26:bf:a9:06:cc:c0:d9:ad:
e4:e0:ab:22:1a:66:a8:de:91:2c:8d:b8:e1:76:14:34:1f:ef:
a9:81:29:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org