Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/te9eVBOnXm99XAYu2Eoo1GLsPCc.roa
File: te9eVBOnXm99XAYu2Eoo1GLsPCc.roa (raw, json)
Hash identifier: s5YDpwQ6HDFP6rKYBWo161LxfdOKXhk7GjREKGa+ntI=
Subject key identifier: B5:EF:5E:54:13:A7:5E:6F:7D:5C:06:2E:D8:4A:28:D4:62:EC:3C:27
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A8A855C5542A27FDE11872479AF3B7AFF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/te9eVBOnXm99XAYu2Eoo1GLsPCc.roa
Signing time: Tue 12 Sep 2023 17:51:50 +0000
ROA not before: Tue 12 Sep 2023 17:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 14 Sep 2023 07:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8a:85:5c:55:42:a2:7f:de:11:87:24:79:af:3b:7a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 12 17:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5ef5e5413a75e6f7d5c062ed84a28d462ec3c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:62:00:7c:6d:6b:ad:5a:60:e7:bc:27:16:
d3:e2:61:f5:10:21:87:61:e3:5f:e3:f4:e0:a1:36:
3b:31:40:fa:6a:1a:af:f4:9f:ae:62:97:93:77:51:
70:35:0c:30:a7:f8:8a:1b:3d:4a:6b:d7:0b:3c:32:
68:9c:42:d1:16:e5:21:09:c3:72:8a:06:b1:e7:c4:
a3:af:04:7a:50:01:d6:19:ff:aa:84:fb:ea:67:58:
8d:11:87:27:5f:26:ee:5a:fc:9f:5e:07:bb:53:d1:
dd:10:3c:d1:72:25:68:76:19:5d:76:17:61:2f:c0:
53:fd:9e:b9:fd:f0:85:1e:b2:f0:2f:ce:b7:d9:36:
1f:ce:35:88:c7:b3:05:f0:15:5f:60:7d:04:fc:eb:
f1:58:22:3e:34:93:7a:ed:29:83:6a:8b:db:c1:e5:
bb:d0:5f:9d:5d:68:e0:36:3f:e9:1c:4d:a6:3f:38:
f8:83:dd:81:9d:34:f6:c8:58:ad:54:5d:5c:f5:e5:
72:41:6a:8d:f0:6c:91:4c:bb:10:82:89:a3:ad:ba:
0f:6a:47:98:12:c6:05:4a:85:de:71:31:b4:df:7c:
c1:8b:d1:11:f0:43:c8:a4:e1:01:7a:ae:74:0a:22:
f3:8d:6a:42:f6:d6:5b:6a:1f:f9:f8:07:8a:9c:ec:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EF:5E:54:13:A7:5E:6F:7D:5C:06:2E:D8:4A:28:D4:62:EC:3C:27
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/te9eVBOnXm99XAYu2Eoo1GLsPCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/23
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
7a:07:80:5f:17:76:1f:c4:ac:61:fd:a7:54:2e:23:41:c0:bf:
96:be:37:12:08:4a:76:8e:84:54:2d:9c:e6:4a:1e:04:74:ad:
67:97:63:90:3f:e3:34:7a:59:fb:47:91:5b:c5:6c:32:83:f4:
a5:c9:46:1c:9f:c3:91:bd:a3:b5:1f:47:6b:31:02:5d:cc:0b:
65:f4:e7:9a:72:09:08:17:ad:49:af:d3:12:9e:cd:6c:c7:b0:
77:2a:53:3c:22:47:52:60:e3:cb:4f:39:12:0b:6f:ac:13:55:
78:27:b8:9c:5f:62:91:72:6d:cd:ef:fd:71:8e:aa:a0:1c:5a:
53:e0:f8:88:a8:7b:96:6b:6a:7d:51:c7:29:9f:04:1b:f7:12:
e6:6b:22:19:11:9a:5a:2d:7e:9a:9b:c4:74:00:5a:22:6c:99:
52:1d:e1:72:41:0c:14:cc:22:8d:ba:77:d1:64:7a:70:c8:43:
e0:56:ce:6f:cd:cd:10:47:ed:93:35:36:87:11:54:87:d1:8a:
70:e5:e7:54:c3:28:3f:68:be:e0:e1:19:9f:af:fc:79:92:b6:
29:2c:5f:bf:b9:df:7f:aa:7d:45:3f:45:af:2f:e9:3a:6c:2d:
8b:29:7d:80:cc:08:84:95:14:32:74:12:5c:5e:32:4e:df:4b:
7e:3d:9b:06
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAYqKhVxVQqJ/3hGHJHmvO3r/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwOTEyMTc1MTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWVmNWU1NDEzYTc1ZTZmN2Q1YzA2MmVkODRhMjhkNDYyZWMzYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq25iAHxta61aYOe8JxbT4mH1ECGH
YeNf4/TgoTY7MUD6ahqv9J+uYpeTd1FwNQwwp/iKGz1Ka9cLPDJonELRFuUhCcNy
igax58SjrwR6UAHWGf+qhPvqZ1iNEYcnXybuWvyfXge7U9HdEDzRciVodhlddhdh
L8BT/Z65/fCFHrLwL8632TYfzjWIx7MF8BVfYH0E/OvxWCI+NJN67SmDaovbweW7
0F+dXWjgNj/pHE2mPzj4g92BnTT2yFitVF1c9eVyQWqN8GyRTLsQgomjrboPakeY
EsYFSoXecTG033zBi9ER8EPIpOEBeq50CiLzjWpC9tZbah/5+AeKnOwzEwIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFLXvXlQTp15vfVwGLthKKNRi7DwnMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvdGU5ZVZCT25YbTk5WEFZdTJFb28xR0xzUENjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHcBggrBgEFBQcBBwEB/wSBzDCByTCBmwQCAAEwgZQDBAAF
tVcDBAAtCR0DBAItUXADBAAtWIgDBAAtWIoDBAItXqgwDAMEAC2EtQMEAy2EsAME
AS2Q1AMEAE1TJQMEAE1TJwMEAlXReAMEAFvfbgMEAbkr+AMEALkr+wMEAbnIPgME
AMEe8AMEAcEe8gMEAME5KQMEAME5KwMEAsLyYDAMAwQCw7FcAwQAw7FeAwQCw9O8
MCkEAgACMCMDBQAqAXEgAwUDKgeSAAMFAyoMpYADBQMqEN/AAwUDKhEFgDANBgkq
hkiG9w0BAQsFAAOCAQEAegeAXxd2H8SsYf2nVC4jQcC/lr43EghKdo6EVC2c5koe
BHStZ5djkD/jNHpZ+0eRW8VsMoP0pclGHJ/Dkb2jtR9HazECXcwLZfTnmnIJCBet
Sa/TEp7NbMewdypTPCJHUmDjy085EgtvrBNVeCe4nF9ikXJtze/9cY6qoBxaU+D4
iKh7lmtqfVHHKZ8EG/cS5msiGRGaWi1+mpvEdABaImyZUh3hckEMFMwijbp30WR6
cMhD4FbOb83NEEftkzU2hxFUh9GKcOXnVMMoP2i+4OEZn6/8eZK2KSxfv7nff6p9
RT9Fry/pOmwtiyl9gMwIhJUUMnQSXF4yTt9Lfj2bBg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org