Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yRDECwAznbrDfZhNyqWhdpgusIo.roa
File: yRDECwAznbrDfZhNyqWhdpgusIo.roa (raw, json)
Hash identifier: kHL+wNaj86ze1zI1GDiqFUjThU3OQ+lHRBbakRbw4lg=
Subject key identifier: C9:10:C4:0B:00:33:9D:BA:C3:7D:98:4D:CA:A5:A1:76:98:2E:B0:8A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B001CB7DF6E329126FD7EEE015A2B9A6C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yRDECwAznbrDfZhNyqWhdpgusIo.roa
Signing time: Thu 05 Oct 2023 13:52:43 +0000
ROA not before: Thu 05 Oct 2023 13:52:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 06 Oct 2023 12:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:1c:b7:df:6e:32:91:26:fd:7e:ee:01:5a:2b:9a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 5 13:52:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c910c40b00339dbac37d984dcaa5a176982eb08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ea:9c:b5:a0:51:d8:cc:ab:8a:b8:55:f5:8f:
3a:31:cf:4a:7e:bd:8d:6b:c3:85:f5:69:a0:9b:a1:
4a:c5:19:59:a3:14:bf:cf:6b:8b:22:a9:8f:83:05:
02:3c:16:81:6d:e3:50:8a:14:a2:ab:d6:e3:bd:7a:
d5:00:83:70:7b:45:93:01:63:b0:4a:74:b6:b8:b0:
26:c9:5c:9e:82:b7:b9:77:40:2b:8f:96:61:0e:1a:
a5:39:f2:26:7c:7e:18:6c:52:bb:39:0e:1d:59:ad:
a4:15:98:50:2f:58:9d:f2:16:ec:cf:c3:c8:8d:37:
fb:08:ca:6f:84:98:66:d5:b3:90:68:87:71:b3:44:
54:63:ed:10:a0:f0:23:22:41:18:80:8a:92:04:48:
e7:3e:31:5b:58:90:ed:48:53:ab:5e:91:e4:fc:ae:
24:d5:c1:9a:fa:12:66:4f:bd:00:c2:f4:f6:a4:a1:
13:52:2d:70:89:2d:ef:c2:f5:13:87:c6:0a:95:bc:
88:78:07:c2:b6:ae:ac:a9:19:8f:f9:82:d6:ce:2b:
4a:e6:b3:bf:59:36:c8:1f:bf:e8:fd:4a:3e:78:1c:
4f:6c:91:5f:74:69:00:bb:41:dd:69:17:7c:d7:15:
e6:47:b8:c4:ca:93:2d:fe:59:4e:ab:37:f9:0d:af:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:10:C4:0B:00:33:9D:BA:C3:7D:98:4D:CA:A5:A1:76:98:2E:B0:8A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yRDECwAznbrDfZhNyqWhdpgusIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.88.136.0/24
45.88.138.0/23
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
36:08:2f:18:a8:f5:2c:26:b0:61:c2:cc:d8:49:a8:c4:4c:17:
63:d6:3b:5f:78:7a:74:90:7d:52:9b:f7:c9:bc:91:e8:76:d6:
b7:eb:4f:5a:b1:74:74:9b:03:7f:1a:3b:75:6a:16:8a:6e:d2:
25:95:6b:8a:f4:10:d5:fb:84:df:dd:cd:d3:54:df:d3:76:33:
d1:1a:47:51:87:85:ff:f6:84:58:db:9a:b8:60:36:f2:16:93:
bc:89:0f:80:99:a4:c5:ed:8e:ec:54:14:4a:3e:68:b9:0e:9f:
29:fc:a4:52:48:59:58:db:57:3f:fc:e3:1c:e4:07:b5:df:42:
fb:3e:c8:e7:81:73:e2:aa:9a:e7:bf:b6:0e:c5:24:ef:33:84:
a8:26:c2:ac:f7:fa:97:97:09:60:36:7e:2e:77:29:a8:f2:2a:
5e:d9:7f:f8:2b:58:64:2e:a3:8b:cd:b5:01:15:03:8a:77:8a:
d1:86:7a:76:99:eb:fe:3f:3a:90:90:be:15:bb:cf:be:00:6a:
40:83:c8:46:54:55:9e:4f:a8:0d:00:32:e7:bd:ee:a7:f3:b3:
57:1c:62:04:21:72:cd:c8:e5:05:e0:85:4a:04:9f:8b:c4:84:
15:0b:e3:b5:4d:4f:48:13:b4:39:23:5d:9e:f9:54:52:08:4b:
e5:36:d8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org