Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iZt4yAzyv_AdKv0oY_NH0qrYZWM.roa
File: iZt4yAzyv_AdKv0oY_NH0qrYZWM.roa (raw, json)
Hash identifier: puLIUqdhnFzK+LDRYvPxwz4BSvn8elnWadXrzsbh5Hg=
Subject key identifier: 89:9B:78:C8:0C:F2:BF:F0:1D:2A:FD:28:63:F3:47:D2:AA:D8:65:63
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CF94692E872135FE01CC4F9A335357886
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iZt4yAzyv_AdKv0oY_NH0qrYZWM.roa
Signing time: Thu 11 Jan 2024 16:06:41 +0000
ROA not before: Thu 11 Jan 2024 16:06:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 15 Jan 2024 17:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:46:92:e8:72:13:5f:e0:1c:c4:f9:a3:35:35:78:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 11 16:06:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=899b78c80cf2bff01d2afd2863f347d2aad86563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:6e:2f:51:7e:43:a6:4a:a4:e8:45:dc:eb:
27:8e:bf:95:9e:23:ad:08:fa:9e:18:31:36:71:8f:
b8:d4:b9:76:e1:ea:14:a0:5a:7c:c4:05:51:26:09:
61:cb:d5:ae:18:08:0d:c0:88:95:e1:52:0b:9f:94:
10:c9:6b:b5:93:87:f8:41:68:33:75:47:85:b9:29:
db:72:30:72:cb:5c:d5:16:40:c2:8c:78:ec:7c:0e:
7b:26:f9:a1:1d:8a:f4:13:05:81:86:99:0a:4a:af:
1d:08:ec:f1:3d:a2:5a:90:4f:92:cc:50:7d:4a:b8:
2a:b9:c3:af:43:6d:39:f2:55:43:89:4c:80:61:bb:
8e:c1:a7:d2:e9:e7:92:0f:56:cd:5d:30:b4:b1:9e:
40:01:99:98:11:a7:15:d5:11:50:f2:63:0b:20:91:
1c:79:0b:63:51:16:77:87:cc:f6:45:11:eb:b4:01:
21:73:56:f0:0c:10:0d:c5:65:4f:f7:8a:e2:6f:2c:
af:48:c3:3a:22:47:42:ca:98:6c:18:29:b1:d5:cf:
b2:3a:e2:02:bc:a1:64:ee:aa:c4:a8:21:6a:e6:8c:
12:49:ed:0d:8a:d7:43:e4:eb:46:c2:76:81:9c:9d:
56:26:d0:d3:4a:64:bf:dc:0c:76:07:61:69:70:2d:
ae:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9B:78:C8:0C:F2:BF:F0:1D:2A:FD:28:63:F3:47:D2:AA:D8:65:63
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iZt4yAzyv_AdKv0oY_NH0qrYZWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.87.0/24
45.9.29.0/24
45.81.112.0/23
45.81.115.0/24
45.88.136.0/24
45.88.138.0/23
45.94.170.0/24
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
a5:69:24:79:22:bf:e5:74:57:a6:ca:1a:59:ef:36:32:ea:bd:
d4:a3:8a:4e:f7:19:b2:ac:03:a7:2c:5a:5b:7b:af:92:a5:0e:
b0:ba:b9:84:d9:1d:fd:8e:06:ba:39:82:3f:7a:6b:53:e6:06:
37:ec:66:ef:65:3b:56:41:96:9a:f5:ae:d8:34:12:35:a9:43:
6e:49:d3:18:5f:3d:d6:77:a5:c9:71:2b:16:ee:b6:b0:16:32:
a3:0c:37:5d:7f:b1:81:25:26:05:97:cd:c2:05:d2:63:57:ba:
9e:ba:07:c0:47:10:fb:97:6f:ff:d1:0c:a1:ee:36:46:ac:a9:
72:c2:3d:3e:ec:41:b3:85:66:d9:4e:25:25:51:63:33:c0:a5:
dc:1a:39:66:99:7b:5d:32:7a:32:4e:72:04:27:36:88:22:4b:
80:b5:25:2a:2e:d9:44:3f:72:bb:fa:86:65:2b:06:b3:51:08:
74:02:18:86:46:23:ec:63:50:5d:b6:75:a8:e1:df:99:1e:20:
92:21:a6:dc:4f:68:f9:6a:4c:5d:73:90:0b:da:8e:73:54:0a:
5f:5b:18:48:d7:2b:63:6a:cc:b6:30:40:69:b2:a6:5b:e0:e0:
f7:b7:d4:b3:ff:53:78:15:ff:16:61:3c:de:24:77:d7:53:bd:
0f:b6:b7:6e
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAYz5RpLochNf4BzE+aM1NXiGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMTExMTYwNjQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTliNzhjODBjZjJiZmYwMWQyYWZkMjg2M2YzNDdkMmFhZDg2NTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXhuL1F+Q6ZKpOhF3Osnjr+VniOt
CPqeGDE2cY+41Ll24eoUoFp8xAVRJglhy9WuGAgNwIiV4VILn5QQyWu1k4f4QWgz
dUeFuSnbcjByy1zVFkDCjHjsfA57JvmhHYr0EwWBhpkKSq8dCOzxPaJakE+SzFB9
SrgqucOvQ2058lVDiUyAYbuOwafS6eeSD1bNXTC0sZ5AAZmYEacV1RFQ8mMLIJEc
eQtjURZ3h8z2RRHrtAEhc1bwDBANxWVP94ribyyvSMM6IkdCyphsGCmx1c+yOuIC
vKFk7qrEqCFq5owSSe0NitdD5OtGwnaBnJ1WJtDTSmS/3Ax2B2FpcC2uXwIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFImbeMgM8r/wHSr9KGPzR9Kq2GVjMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvaVp0NHlBenl2X0FkS3Ywb1lfTkgwcXJZWldNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHcBggrBgEFBQcBBwEB/wSBzDCByTCBmwQCAAEwgZQDBAAC
OG0DBAAFtVcDBAAtCR0DBAEtUXADBAAtUXMDBAAtWIgDBAEtWIoDBAAtXqowDAME
AC2EtQMEAy2EsAMEAC2Q1AMEAE1TJQMEAlXReAMEAbkr+AMEALkr+wMEAbnIPgME
AMEe8AMEAcEe8gMEAME5KQMEAME5KwMEAsLyYDAMAwQCw7FcAwQAw7FeAwQCw9O8
MCkEAgACMCMDBQAqAXEgAwUDKgeSAAMFAyoMpYADBQMqEN/AAwUDKhEFgDANBgkq
hkiG9w0BAQsFAAOCAQEApWkkeSK/5XRXpsoaWe82Muq91KOKTvcZsqwDpyxaW3uv
kqUOsLq5hNkd/Y4GujmCP3prU+YGN+xm72U7VkGWmvWu2DQSNalDbknTGF891nel
yXErFu62sBYyoww3XX+xgSUmBZfNwgXSY1e6nroHwEcQ+5dv/9EMoe42RqypcsI9
PuxBs4Vm2U4lJVFjM8Cl3Bo5Zpl7XTJ6Mk5yBCc2iCJLgLUlKi7ZRD9yu/qGZSsG
s1EIdAIYhkYj7GNQXbZ1qOHfmR4gkiGm3E9o+WpMXXOQC9qOc1QKX1sYSNcrY2rM
tjBAabKmW+Dg97fUs/9TeBX/FmE83iR311O9D7a3bg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org