Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eQvUHOSCOPlioL1mLbrtcFOMT44.roa
File: eQvUHOSCOPlioL1mLbrtcFOMT44.roa (raw, json)
Hash identifier: Y4/A7jB7q1t2OObq4hXFPmex9RACFKYBgYF/0MFfNzM=
Subject key identifier: 79:0B:D4:1C:E4:82:38:F9:62:A0:BD:66:2D:BA:ED:70:53:8C:4F:8E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A370D65612F756E55937301C1A789089C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eQvUHOSCOPlioL1mLbrtcFOMT44.roa
Signing time: Sun 27 Aug 2023 12:52:19 +0000
ROA not before: Sun 27 Aug 2023 12:52:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
45.81.112.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.81.114.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 28 Aug 2023 10:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:37:0d:65:61:2f:75:6e:55:93:73:01:c1:a7:89:08:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 27 12:52:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=790bd41ce48238f962a0bd662dbaed70538c4f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:cb:9d:36:7c:4c:ee:f9:68:a9:83:5a:1a:
98:b2:71:d9:ac:54:fb:6c:a5:28:38:da:9f:04:2a:
9e:18:40:d1:e1:d5:f9:eb:3e:58:f4:2c:02:29:7f:
e5:e5:db:3d:22:0c:d2:79:44:a9:0e:18:9c:9b:59:
df:11:23:78:d5:07:ce:50:9d:b3:a1:01:4f:ef:0a:
4f:2b:88:7c:f4:97:89:12:9f:93:64:00:24:72:ac:
9a:cb:f0:15:c9:34:f7:54:85:d9:5c:90:b3:d9:85:
68:d5:ab:6b:69:19:86:58:bb:f4:a9:f1:07:6a:a7:
cc:78:42:8d:77:20:33:9b:ce:55:91:12:e5:19:98:
36:6d:ef:4d:98:91:c4:34:6f:b4:d4:c9:03:ad:b9:
01:12:1a:df:7d:b5:07:ad:42:b2:9a:b5:1a:53:48:
2b:2d:b1:e1:39:1f:ef:2a:bb:3d:23:7e:44:c2:3f:
ee:fc:8b:b7:b6:c5:58:c3:65:9b:96:32:93:89:43:
78:8a:0a:63:ef:e4:3e:ce:3d:4e:e6:4d:7b:1b:31:
00:a5:82:5f:8b:90:29:7e:d1:9c:25:c3:ff:f5:c5:
e5:16:0d:36:c3:cf:d3:d2:9d:71:47:b3:d7:dd:03:
d6:9b:c9:aa:b8:15:c1:5a:7c:b6:e3:48:81:c2:a7:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0B:D4:1C:E4:82:38:F9:62:A0:BD:66:2D:BA:ED:70:53:8C:4F:8E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eQvUHOSCOPlioL1mLbrtcFOMT44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/23
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/23
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
1e:ef:94:a9:c6:4a:ff:88:4c:df:e5:3d:0e:3d:ce:66:23:be:
3b:97:46:08:63:db:ae:80:7b:50:c4:81:83:6d:a4:47:50:37:
d2:e9:e6:1e:1f:92:24:8d:f1:61:6a:7c:a0:79:74:0e:23:66:
7f:a4:18:96:9c:9e:7a:d5:78:11:61:b5:3c:80:80:46:a9:84:
87:30:73:bf:81:c7:a0:6f:53:1b:7d:2f:b7:00:8d:55:04:d7:
55:69:a7:ad:d4:c3:e7:fe:57:8f:79:dc:fd:eb:5f:6c:be:e9:
22:78:b1:d9:84:7f:12:4f:03:37:9d:65:2c:33:3e:77:35:fe:
42:8c:88:bb:40:43:11:32:33:e9:df:5a:50:f3:2c:80:5b:82:
a9:a9:10:9c:0b:1f:17:47:c2:a7:fd:1a:39:b9:8f:f4:05:c6:
e2:6e:30:92:e3:c1:0e:bf:c7:ce:05:14:f1:b5:9e:f1:f1:87:
d3:35:17:dc:00:62:a3:86:39:a1:84:d2:a8:2e:47:73:8d:40:
7e:4e:3e:a1:2e:ca:b9:e9:ae:09:af:27:45:ad:7b:50:11:a6:
16:8e:bb:e8:13:d7:b4:df:f9:b6:2c:ca:73:3c:b1:77:4e:6c:
24:41:a9:8c:12:ec:80:39:a1:e0:03:70:ea:68:71:7d:e3:8c:
b2:93:03:ba
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgISAYo3DWVhL3VuVZNzAcGniQicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwODI3MTI1MjE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTBiZDQxY2U0ODIzOGY5NjJhMGJkNjYyZGJhZWQ3MDUzOGM0ZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodzLnTZ8TO75aKmDWhqYsnHZrFT7
bKUoONqfBCqeGEDR4dX56z5Y9CwCKX/l5ds9IgzSeUSpDhicm1nfESN41QfOUJ2z
oQFP7wpPK4h89JeJEp+TZAAkcqyay/AVyTT3VIXZXJCz2YVo1atraRmGWLv0qfEH
aqfMeEKNdyAzm85VkRLlGZg2be9NmJHENG+01MkDrbkBEhrffbUHrUKymrUaU0gr
LbHhOR/vKrs9I35Ewj/u/Iu3tsVYw2WbljKTiUN4igpj7+Q+zj1O5k17GzEApYJf
i5ApftGcJcP/9cXlFg02w8/T0p1xR7PX3QPWm8mquBXBWny240iBwqcgYQIDAQAB
o4ICuTCCArUwHQYDVR0OBBYEFHkL1Bzkgjj5YqC9Zi267XBTjE+OMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvZVF2VUhPU0NPUGxpb0wxbUxicnRjRk9NVDQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHOBggrBgEFBQcBBwEB/wSBvjCBuzCBjQQCAAEwgYYDBAAF
tVcDBAAtCR0DBAItUXADBAAtWIgDBAEtWIoDBAItXqgwDAMEAC2EtQMEAy2EsAME
AS2Q1AMEAE1TJwMEAlXReAMEAFvfbgMEAbkr+AMEALkr+wMEAbnIPgMEAsEe8AME
AME5KQMEAME5KwMEAsLyYAMEAMM+GAMEAsOxXAMEAsPTvDApBAIAAjAjAwUAKgFx
IAMFAyoHkgADBQMqDKWAAwUDKhDfwAMFAyoRBYAwDQYJKoZIhvcNAQELBQADggEB
AB7vlKnGSv+ITN/lPQ49zmYjvjuXRghj266Ae1DEgYNtpEdQN9Lp5h4fkiSN8WFq
fKB5dA4jZn+kGJacnnrVeBFhtTyAgEaphIcwc7+Bx6BvUxt9L7cAjVUE11Vpp63U
w+f+V4953P3rX2y+6SJ4sdmEfxJPAzedZSwzPnc1/kKMiLtAQxEyM+nfWlDzLIBb
gqmpEJwLHxdHwqf9Gjm5j/QFxuJuMJLjwQ6/x84FFPG1nvHxh9M1F9wAYqOGOaGE
0qguR3ONQH5OPqEuyrnprgmvJ0Wte1ARphaOu+gT17Tf+bYsynM8sXdObCRBqYwS
7IA5oeADcOpocX3jjLKTA7o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org