Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/f_YuB9fmcbuQ1tz6PW9ywADJP-c.roa
File: f_YuB9fmcbuQ1tz6PW9ywADJP-c.roa (raw, json)
Hash identifier: Bc0SDxJiEOD3Pe4mljLIfHs/A/k4+2uXM/UvudgDmy0=
Subject key identifier: 7F:F6:2E:07:D7:E6:71:BB:90:D6:DC:FA:3D:6F:72:C0:00:C9:3F:E7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C1A99E1AFD0DC5DCEB5B666CD4CE4CDAE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/f_YuB9fmcbuQ1tz6PW9ywADJP-c.roa
Signing time: Wed 29 Nov 2023 10:22:21 +0000
ROA not before: Wed 29 Nov 2023 10:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 29 Nov 2023 11:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:99:e1:af:d0:dc:5d:ce:b5:b6:66:cd:4c:e4:cd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 29 10:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff62e07d7e671bb90d6dcfa3d6f72c000c93fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e4:f0:25:fb:cc:0c:17:23:63:fd:75:4b:42:
9a:ec:86:fb:fc:2b:32:b0:f8:16:84:6a:96:22:f4:
9f:a2:30:fa:99:d5:6b:ea:0b:c3:a8:14:f2:76:ec:
a3:d6:3f:80:ff:18:0b:dc:39:c2:72:41:db:9f:8a:
7b:e4:79:bf:7a:74:2a:1c:b6:17:54:57:92:0b:53:
ce:f1:ac:42:8f:8a:21:39:54:6c:71:17:be:c2:d0:
95:7e:90:5d:e6:ad:9f:2f:f5:32:18:21:24:23:e9:
07:fb:7e:5c:31:29:e1:b6:90:1b:43:95:d2:cb:3b:
a3:a6:95:bf:95:86:3d:94:03:e7:df:8b:6a:ca:58:
aa:a6:66:06:81:2e:55:cb:8f:fe:31:a0:c2:94:7c:
50:52:b7:a4:2b:fd:70:f4:68:fa:76:d0:6d:8f:66:
fa:1a:b9:6c:f1:61:24:72:c2:c2:65:ac:fb:7b:6f:
24:b7:c0:83:97:c2:29:7b:9b:37:f1:15:fb:bc:1b:
87:4e:41:22:ce:48:a1:aa:d4:5f:bc:f1:28:c5:33:
f4:a3:9a:bd:bc:70:d1:33:0a:2e:29:28:91:ac:d9:
34:b4:ab:c7:ae:ef:f7:76:8d:d5:9b:2e:8b:9a:14:
e9:9d:21:eb:94:6b:20:25:0a:0a:a8:a3:86:c8:d8:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F6:2E:07:D7:E6:71:BB:90:D6:DC:FA:3D:6F:72:C0:00:C9:3F:E7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/f_YuB9fmcbuQ1tz6PW9ywADJP-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
29:ff:41:14:ec:12:fb:70:1b:89:5c:e7:f4:72:f5:4a:8c:62:
43:1a:e7:b1:63:a6:19:4f:1b:f4:80:a6:f2:5a:05:dc:26:ab:
d4:a1:5f:45:d7:38:4d:3d:56:65:2f:d4:e2:55:f2:0a:56:64:
35:ff:34:ea:61:0d:b2:a6:b5:86:e2:03:25:d2:9f:2e:7e:32:
f1:48:23:0e:8d:9b:d9:fb:11:fc:77:46:25:4b:cd:63:9f:89:
92:70:dd:87:94:b7:f8:ff:02:8a:2e:d8:8f:2c:e1:6c:b4:9a:
44:9f:10:42:65:03:01:3c:7c:24:f0:9c:3e:fc:df:37:e9:3b:
cf:17:4d:95:42:5c:be:71:76:9f:d1:c9:b1:0e:c7:fc:fb:8c:
37:cb:c5:1a:b6:c3:a8:d6:3a:64:df:3b:ef:7a:8f:10:76:51:
0c:7f:1f:ed:c5:29:cc:e4:be:09:d5:c5:c3:50:a3:0d:5d:a7:
c8:64:64:ae:bc:3d:2b:16:e7:9e:a5:79:02:ec:06:88:88:ed:
a9:fe:6b:ea:79:c8:af:e4:0e:6a:6a:61:1b:99:c4:9e:97:f4:
14:0c:02:f3:e0:f8:55:3d:72:ec:14:61:58:31:8d:c6:c3:4b:
81:39:a8:1a:5d:9a:9b:8a:4e:8a:59:69:4c:22:57:c3:e7:3a:
ad:7d:75:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org