Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tGHdZfYiqdqM9f9OqNKTxULVzwk.roa
File: tGHdZfYiqdqM9f9OqNKTxULVzwk.roa (raw, json)
Hash identifier: uIbDwFmTNZqlA/v/hZHCL9jM+NBv8p3UzdG4pEwtTUE=
Subject key identifier: B4:61:DD:65:F6:22:A9:DA:8C:F5:FF:4E:A8:D2:93:C5:42:D5:CF:09
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018EE08E5B9EA10028E28E32728437CB6CBA
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tGHdZfYiqdqM9f9OqNKTxULVzwk.roa
Signing time: Mon 15 Apr 2024 07:00:09 +0000
ROA not before: Mon 15 Apr 2024 07:00:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 2.56.109.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.144.212.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.96.0/24 maxlen: 24
194.242.97.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a07:9200::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a10:dfc0::/29 maxlen: 29
2a11:580::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 12 May 2024 10:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:8e:5b:9e:a1:00:28:e2:8e:32:72:84:37:cb:6c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 15 07:00:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b461dd65f622a9da8cf5ff4ea8d293c542d5cf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:48:b4:d7:1a:50:da:9a:26:17:e4:10:de:ff:
d0:25:9f:75:75:71:eb:de:11:d4:bc:51:9e:3a:7f:
dd:07:8f:8a:f8:3b:d1:3e:15:de:40:31:fa:ea:b8:
e6:53:b1:cf:ee:0a:eb:8e:49:68:74:5e:d4:0f:dc:
dc:1d:f0:55:09:82:f0:f9:76:9a:6c:45:ef:e1:fd:
20:3a:b1:6a:5c:4c:e0:ec:22:90:49:10:53:31:4b:
81:a7:03:de:96:eb:f5:e7:a4:d3:7d:a5:8f:0a:21:
30:08:39:14:49:32:9c:93:1c:bb:75:ab:62:f1:1c:
fc:57:25:ae:6d:50:66:1a:81:fc:82:ca:92:3b:3f:
eb:e1:a0:76:b5:5d:04:85:27:c9:db:b3:47:a7:0a:
8d:3f:7b:42:d4:23:c9:e8:ad:3d:c6:58:1c:b0:5f:
8f:6c:6d:20:8a:5c:01:1c:5b:f4:6f:82:b6:a3:2a:
de:59:b3:1b:71:1b:f5:96:dc:cc:49:c1:b8:76:11:
5c:7c:e2:d8:6a:a6:59:20:8c:5a:54:59:b8:8b:52:
80:eb:bd:b5:c2:6c:f8:28:e9:58:b0:52:41:4f:fe:
14:ae:81:b2:ec:c1:36:d8:25:80:bf:3d:db:6b:51:
b5:cd:67:ca:10:9e:35:84:bf:6d:30:60:03:1a:2f:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:61:DD:65:F6:22:A9:DA:8C:F5:FF:4E:A8:D2:93:C5:42:D5:CF:09
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tGHdZfYiqdqM9f9OqNKTxULVzwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.81.115.0/24
45.88.136.0/24
45.88.138.0/24
45.94.171.0/24
45.132.180.0/22
45.144.212.0/24
45.151.3.0/24
77.83.37.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.177.93.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
78:d6:5a:06:cb:6c:bd:bb:2e:bb:47:de:0b:b5:d6:31:e0:a2:
b7:d4:9e:d2:dc:f8:90:a4:7b:4e:dc:20:ec:4b:90:ee:ed:ff:
2f:a9:3e:af:b0:1f:45:c7:6d:0e:36:97:bc:bb:ab:4f:08:a3:
0f:b2:c1:32:43:db:19:2e:9f:78:8d:aa:43:c3:ec:04:f7:5d:
0f:82:ba:8d:12:c0:0f:be:70:1a:ca:6a:00:ba:1d:b7:c6:8c:
01:4a:d1:bb:c8:a9:0c:b9:1a:1a:d9:25:2a:6e:09:5a:93:bf:
bf:3a:45:77:eb:ad:1c:d3:08:31:5c:e0:96:3a:b0:1a:75:73:
79:18:21:d8:d2:e1:f2:22:c7:21:b5:10:a8:a4:8b:aa:c3:5f:
cd:fc:63:21:09:fb:d7:e2:a2:03:69:80:01:63:88:9a:55:95:
6a:b7:f5:20:24:57:ba:41:c6:fe:62:bb:aa:fd:ac:01:38:18:
41:2a:8c:e5:22:75:81:14:84:d3:4f:c5:44:f1:ca:2c:32:11:
40:6e:b4:d8:75:1b:b9:79:64:3e:17:b2:20:e3:af:e8:3d:cd:
23:4d:97:5b:5b:42:ba:30:c8:e9:ab:a6:4b:59:49:f4:f0:31:
02:73:8c:82:c6:50:03:65:ee:b3:0a:01:9b:b6:5f:a4:63:d1:
d0:c4:62:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org