Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rxJseU_PAOe--K4jGgmbKAj5KsM.roa
File: rxJseU_PAOe--K4jGgmbKAj5KsM.roa (raw, json)
Hash identifier: AcEw9oRC24youQZuZGpBM5+/67YF23VT/xuoRkJEPhw=
Subject key identifier: AF:12:6C:79:4F:CF:00:E7:BE:F8:AE:23:1A:09:9B:28:08:F9:2A:C3
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018BF870C31AA5E8F81D97E3985B743563E1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rxJseU_PAOe--K4jGgmbKAj5KsM.roa
Signing time: Wed 22 Nov 2023 19:10:21 +0000
ROA not before: Wed 22 Nov 2023 19:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 29 Nov 2023 10:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f8:70:c3:1a:a5:e8:f8:1d:97:e3:98:5b:74:35:63:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 22 19:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af126c794fcf00e7bef8ae231a099b2808f92ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:6b:b1:da:56:22:f5:fe:05:bf:ca:cb:d5:
cd:27:d5:89:e7:70:9b:5c:9f:08:4c:1f:11:32:0b:
da:79:4e:dd:43:67:c8:23:d4:b2:78:72:b6:75:2c:
4e:56:04:e0:69:18:51:af:ae:d3:60:4c:f0:46:ba:
40:83:12:8b:16:e1:68:1a:95:23:92:90:92:fb:c7:
cb:a8:63:c1:dc:2d:83:b7:73:47:3e:4f:c2:c1:27:
ec:3d:49:95:63:35:ab:c2:f2:7f:5c:49:67:b3:b6:
00:02:05:e1:77:dc:29:4e:a6:4a:10:b7:43:c0:73:
b4:a5:05:6b:0f:c8:23:61:6a:cd:5d:b4:82:44:9e:
60:5c:6f:98:b3:76:f1:00:44:75:f4:e3:7d:89:18:
9b:b1:00:5c:60:dd:df:2a:99:b9:89:82:d2:38:ba:
c4:42:fd:c7:02:e0:a3:68:27:c5:22:10:31:c6:5d:
ad:36:84:79:48:42:13:4d:2f:d3:b3:91:13:78:1d:
b0:34:fb:10:00:04:76:8a:de:0e:e7:0a:4d:64:fe:
5c:7e:21:a3:d6:ef:a4:43:d1:ec:09:f0:87:48:f8:
24:44:e6:7e:a9:a8:84:83:23:a3:ef:2b:9b:13:2b:
04:ac:8d:b2:2a:85:ec:90:a8:2e:ed:45:4c:26:10:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:6C:79:4F:CF:00:E7:BE:F8:AE:23:1A:09:9B:28:08:F9:2A:C3
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rxJseU_PAOe--K4jGgmbKAj5KsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
ae:9e:67:d7:ec:39:bb:d4:34:49:ca:94:c9:90:e0:94:fd:ac:
9b:8a:07:dc:1e:49:db:2f:93:74:0a:5d:31:23:cf:98:e4:93:
25:c0:14:34:2d:a2:26:e8:41:70:1e:c0:44:f9:89:97:5d:72:
10:88:1b:db:14:73:4d:67:a2:d3:c9:39:c3:dc:38:c9:41:23:
31:d2:87:ad:8c:f9:71:27:f0:bc:dd:9d:b5:d8:18:ac:85:9e:
1f:91:65:35:78:90:5d:73:8f:b6:65:9a:d0:da:40:68:70:9a:
f1:0d:9f:b1:ac:45:d7:c3:a3:97:b0:19:fa:96:c2:1a:04:50:
4e:e8:b8:52:bf:28:12:c6:e6:6e:a7:ec:26:f2:e3:e2:39:3b:
92:6d:e2:ba:d8:fc:e5:88:66:69:38:c3:ea:92:07:19:aa:7a:
f8:c3:6a:2c:c8:28:4f:96:13:0c:ba:ba:94:1a:e4:d9:1b:77:
9f:3a:b3:0c:3e:bb:25:b6:63:4c:fe:7f:9e:cd:de:fa:09:c0:
45:c2:5a:ca:d0:30:cb:e6:ba:3a:35:d7:c1:ed:9e:23:2b:26:
d9:87:c6:d1:d3:18:1d:ae:84:82:fb:87:64:74:fa:b9:99:eb:
06:ff:53:e8:3c:43:90:e1:e6:a8:73:72:34:ca:8f:1f:3d:4a:
65:e4:e2:9f
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAYv4cMMapej4HZfjmFt0NWPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMxMTIyMTkxMDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjEyNmM3OTRmY2YwMGU3YmVmOGFlMjMxYTA5OWIyODA4ZjkyYWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg1rsdpWIvX+Bb/Ky9XNJ9WJ53Cb
XJ8ITB8RMgvaeU7dQ2fII9SyeHK2dSxOVgTgaRhRr67TYEzwRrpAgxKLFuFoGpUj
kpCS+8fLqGPB3C2Dt3NHPk/CwSfsPUmVYzWrwvJ/XElns7YAAgXhd9wpTqZKELdD
wHO0pQVrD8gjYWrNXbSCRJ5gXG+Ys3bxAER19ON9iRibsQBcYN3fKpm5iYLSOLrE
Qv3HAuCjaCfFIhAxxl2tNoR5SEITTS/Ts5ETeB2wNPsQAAR2it4O5wpNZP5cfiGj
1u+kQ9HsCfCHSPgkROZ+qaiEgyOj7yubEysErI2yKoXskKgu7UVMJhB2OwIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFK8SbHlPzwDnvviuIxoJmygI+SrDMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvcnhKc2VVX1BBT2UtLUs0akdnbWJLQWo1S3NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHQBggrBgEFBQcBBwEB/wSBwDCBvTCBjwQCAAEwgYgDBAAF
tVcDBAAtCR0DBAAtWIgDBAAtWIoDBAItXqgwDAMEAC2EtQMEAy2EsAMEAC2Q1AME
AE1TJQMEAE1TJwMEAlXReAMEAbkr+AMEALkr+wMEAbnIPgMEAMEe8AMEAcEe8gME
AME5KwMEAsLyYAMEAMM+GDAMAwQCw7FcAwQAw7FeAwQCw9O8MCkEAgACMCMDBQAq
AXEgAwUDKgeSAAMFAyoMpYADBQMqEN/AAwUDKhEFgDANBgkqhkiG9w0BAQsFAAOC
AQEArp5n1+w5u9Q0ScqUyZDglP2sm4oH3B5J2y+TdApdMSPPmOSTJcAUNC2iJuhB
cB7ARPmJl11yEIgb2xRzTWei08k5w9w4yUEjMdKHrYz5cSfwvN2dtdgYrIWeH5Fl
NXiQXXOPtmWa0NpAaHCa8Q2fsaxF18Ojl7AZ+pbCGgRQTui4Ur8oEsbmbqfsJvLj
4jk7km3iutj85YhmaTjD6pIHGap6+MNqLMgoT5YTDLq6lBrk2Rt3nzqzDD67JbZj
TP5/ns3e+gnARcJaytAwy+a6OjXXwe2eIysm2YfG0dMYHa6EgvuHZHT6uZnrBv9T
6DxDkOHmqHNyNMqPHz1KZeTinw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org