Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0e5-o0Yzz8VEKe4gUKmAp6ybCew.roa
File: 0e5-o0Yzz8VEKe4gUKmAp6ybCew.roa (raw, json)
Hash identifier: i5GXRWmovjJIPbZlEVe1Rn119p4vG+8tf51y14T496Q=
Subject key identifier: D1:EE:7E:A3:46:33:CF:C5:44:29:EE:20:50:A9:80:A7:AC:9B:09:EC
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B4364E299B6655D63915E51BA993E1B55
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0e5-o0Yzz8VEKe4gUKmAp6ybCew.roa
Signing time: Wed 18 Oct 2023 15:26:06 +0000
ROA not before: Wed 18 Oct 2023 15:26:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:64:e2:99:b6:65:5d:63:91:5e:51:ba:99:3e:1b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 18 15:26:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1ee7ea34633cfc54429ee2050a980a7ac9b09ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:c6:8e:75:50:82:4a:de:31:3d:92:d9:03:
9c:67:d5:35:40:f4:93:06:19:38:61:3e:49:f8:01:
8e:54:eb:03:f4:e7:fa:3b:08:2e:8c:e5:a3:42:8a:
2f:22:01:db:82:a6:17:7f:9b:c3:fa:6a:9c:c4:53:
55:8e:ae:75:e1:37:74:16:52:a8:eb:c1:92:93:3a:
cc:30:c9:34:9d:e8:bd:fb:22:02:34:e9:c9:b1:61:
d1:dd:3d:0c:27:d4:a2:a7:2c:89:ae:5b:fa:9b:95:
07:76:74:fc:01:c5:d1:ac:9a:a4:16:8d:4a:7b:68:
05:2b:9f:53:6c:b4:65:9c:74:03:13:2d:e5:7f:dd:
1a:1c:48:03:16:e2:27:44:da:ee:2e:c6:e0:03:f9:
2a:ff:9a:66:e6:35:b6:cb:eb:24:eb:a6:a3:48:6c:
35:4f:fa:72:19:1f:ab:ce:91:92:d4:9e:df:87:28:
a7:36:e8:84:eb:2a:85:57:33:3a:27:e8:e8:39:41:
37:f1:31:59:e0:d7:16:4a:0d:4d:97:dc:48:a1:28:
bb:a0:e9:0c:45:48:25:4f:dc:d7:1d:63:4e:4b:fd:
36:3b:de:b2:cb:d6:c2:88:7a:3d:6c:fd:b6:41:30:
83:fe:ae:31:7c:b3:a2:b2:61:ff:7b:24:ae:a7:4f:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EE:7E:A3:46:33:CF:C5:44:29:EE:20:50:A9:80:A7:AC:9B:09:EC
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0e5-o0Yzz8VEKe4gUKmAp6ybCew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
51:67:00:71:0c:78:5b:f5:66:8a:94:b8:42:74:88:9e:85:82:
65:b4:78:51:d6:e4:2a:3f:cb:fb:27:2a:95:d0:02:50:63:db:
83:81:9e:f0:1b:bc:b5:e1:c8:47:08:e8:8d:05:9f:5b:3e:36:
4d:7a:8c:8b:05:fa:c6:6e:b4:4e:e3:03:a1:fe:cb:70:17:81:
62:a4:5f:d8:64:6b:70:89:7c:ea:2a:5f:d7:13:e6:6e:4b:c4:
3c:21:ff:7d:51:ce:49:ee:4f:43:6a:e6:ba:38:49:70:01:73:
99:d4:ce:62:10:66:16:c1:fd:ea:0c:1b:e5:e1:e1:9a:65:ea:
eb:f4:c9:b3:6b:16:75:40:dc:c8:4b:f2:f5:01:72:8c:89:7b:
ed:0e:50:ee:c1:1c:3a:68:28:bd:49:be:9a:21:1c:1b:de:c2:
d4:ef:ed:dd:6e:4e:97:03:91:a7:fb:ce:fe:1c:de:80:02:0a:
df:6e:b2:b0:96:67:03:d0:bf:ce:5a:48:d6:aa:bc:55:3d:ea:
c2:55:a9:22:fb:14:57:e4:0a:7b:74:62:0f:65:63:3c:85:71:
ec:28:1a:3f:92:dd:4b:3a:9a:c6:c0:39:e3:a0:64:99:9a:e5:
98:62:c3:b5:f9:be:f8:7e:10:93:8a:fc:4e:6f:9a:1d:19:03:
91:1e:5a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 22:43:40 2023 by rpki-client on console-fra.rpki-client.org