Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/pgLptvshBOKy27saXgiXWO1pbJo.roa
File: pgLptvshBOKy27saXgiXWO1pbJo.roa (raw, json)
Hash identifier: /cE/hcWSG40p24F6JXTUmSVj0t9YIpGuhEH+A9uYYXk=
Subject key identifier: A6:02:E9:B6:FB:21:04:E2:B2:DB:BB:1A:5E:08:97:58:ED:69:6C:9A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018AB21F432057B75DA22C2EA456DB32B373
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/pgLptvshBOKy27saXgiXWO1pbJo.roa
Signing time: Wed 20 Sep 2023 10:25:07 +0000
ROA not before: Wed 20 Sep 2023 10:25:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 26 Sep 2023 07:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:1f:43:20:57:b7:5d:a2:2c:2e:a4:56:db:32:b3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 20 10:25:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a602e9b6fb2104e2b2dbbb1a5e089758ed696c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:5c:f3:45:17:20:8d:6e:2c:c3:74:b2:2c:
31:bd:9b:42:34:92:9d:5c:24:18:93:d8:9a:2b:bc:
6e:2c:25:9e:11:6b:79:82:ec:52:9a:fb:91:38:da:
4c:62:45:9e:12:5b:f2:13:89:20:80:17:0e:27:a2:
9b:58:a5:25:f3:cf:7e:bf:6d:44:a3:fd:65:e8:a4:
13:db:39:6d:e1:91:8d:ac:ae:8a:cd:1e:90:98:88:
48:8d:29:93:8e:2f:d4:dd:19:7b:80:ab:a4:c6:1e:
fa:36:be:d9:df:57:08:60:b6:c9:19:3f:a4:8e:c2:
90:12:1f:6c:42:01:02:03:bd:9c:0a:78:a5:a9:55:
0a:93:13:5b:bb:0b:9f:4e:85:f9:6b:90:88:0e:c8:
7b:20:e2:1d:9f:ae:54:4e:83:ed:8c:90:4b:44:b6:
a8:34:9f:f6:06:0f:22:fe:89:81:5c:42:86:94:7c:
e7:04:fa:de:52:27:8e:1f:74:59:5f:2f:89:1a:e1:
d3:e3:1a:78:10:f4:fc:d3:4c:73:e9:ae:de:89:49:
42:46:83:dd:41:b8:7f:c8:80:0b:7e:9f:43:e5:31:
eb:cb:dd:ff:1f:c9:7f:e4:28:bc:a8:f3:6a:52:e2:
61:38:74:5a:6c:3a:b4:35:7c:28:8d:eb:d2:41:ab:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:02:E9:B6:FB:21:04:E2:B2:DB:BB:1A:5E:08:97:58:ED:69:6C:9A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/pgLptvshBOKy27saXgiXWO1pbJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/23
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
05:18:8e:0b:73:ae:9b:3a:39:ec:26:34:cb:84:0b:2e:97:55:
fb:f7:e8:b2:9c:67:ae:42:80:fe:c9:85:e4:54:55:5f:33:75:
9e:f4:aa:dd:65:e3:0b:72:20:5c:36:15:2d:ed:8a:89:e2:f4:
d3:f1:9d:86:43:45:6e:17:95:9f:7e:b6:18:0d:4f:a1:99:c8:
88:1e:00:60:70:56:a1:07:a2:c9:72:f1:ce:63:2d:9a:22:e7:
5b:45:d8:cc:fe:f3:15:e7:5b:54:26:41:2b:33:bb:50:3d:2e:
d5:83:f9:7e:b7:81:71:e5:3a:e8:7e:38:27:48:a0:84:7a:50:
44:c4:55:63:f3:7f:1b:ef:95:72:a9:50:33:cc:69:51:65:fe:
c4:4c:27:c8:fc:69:b1:a9:01:42:b4:e1:3f:dc:eb:72:41:14:
b3:2e:dc:51:ee:c1:b4:70:0c:6e:9a:ec:29:02:57:ab:21:ac:
ab:93:1d:ef:15:fc:f8:bd:64:17:c4:5a:07:ef:98:f4:a5:61:
6c:11:64:09:df:65:43:af:ad:18:9b:15:49:1d:6f:dc:5f:ab:
a1:1f:35:df:86:b6:95:30:48:d8:31:ba:6b:5a:7b:38:89:08:
64:d1:1b:bd:52:14:e3:76:c1:f7:30:3d:25:82:0c:a5:1d:42:
41:88:61:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org