Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0leSHgL9AFW86Jm_Zgsx14yJpXA.roa
File: 0leSHgL9AFW86Jm_Zgsx14yJpXA.roa (raw, json)
Hash identifier: p9khDwJ+2k/BeX6v6jrc4/VdHVwN1NXL/MTOAzd3kl0=
Subject key identifier: D2:57:92:1E:02:FD:00:55:BC:E8:99:BF:66:0B:31:D7:8C:89:A5:70
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018D0E3AA54AACB37351533F5927CA4778F6
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0leSHgL9AFW86Jm_Zgsx14yJpXA.roa
Signing time: Mon 15 Jan 2024 17:45:40 +0000
ROA not before: Mon 15 Jan 2024 17:45:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 16 Jan 2024 08:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0e:3a:a5:4a:ac:b3:73:51:53:3f:59:27:ca:47:78:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 15 17:45:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d257921e02fd0055bce899bf660b31d78c89a570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:bf:f7:ac:13:71:b5:ae:3a:b0:07:cf:11:
17:72:64:23:ad:6c:c6:49:b7:7b:53:ee:a1:98:32:
16:e3:59:e0:58:bf:c1:76:b7:0f:2b:a2:07:41:0e:
67:f9:04:c9:97:7f:25:3c:49:9a:d6:96:28:89:df:
12:b8:db:7e:d1:16:60:7a:5b:8d:ef:19:7a:10:54:
7e:df:31:09:b5:e0:05:bf:ef:0e:16:00:6c:ee:02:
bf:57:15:3a:6b:3f:f1:50:a9:87:90:58:21:35:4d:
e1:ec:d3:bf:cb:35:7e:b3:db:9c:f4:cc:70:23:d4:
fe:6f:6a:ab:f7:5c:b2:3f:8a:8b:ab:15:9f:b8:68:
86:73:81:b8:0b:0d:ff:3a:75:74:a3:b1:c8:94:9a:
af:90:45:ff:0a:61:bd:21:dc:f8:1c:70:90:5a:0c:
65:53:9e:89:4e:fc:6b:dc:d1:d1:77:d6:89:c7:c7:
bb:5c:8a:de:5b:ec:05:89:2c:a2:4a:98:68:4a:30:
99:5f:c3:8a:c8:af:4e:d4:39:30:5c:f8:1b:66:64:
ac:a5:b2:b3:d4:71:04:03:68:f7:f6:d4:ec:17:23:
8a:41:4e:ab:0d:36:57:cd:d4:d1:73:ad:21:c2:01:
91:7b:70:29:b6:cc:37:d1:d5:90:bf:26:c2:a3:aa:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:57:92:1E:02:FD:00:55:BC:E8:99:BF:66:0B:31:D7:8C:89:A5:70
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0leSHgL9AFW86Jm_Zgsx14yJpXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.87.0/24
45.9.29.0/24
45.81.113.0/24
45.81.115.0/24
45.88.136.0/24
45.88.138.0/23
45.94.170.0/24
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
c0:0e:20:a7:e1:37:3b:44:5b:8e:fb:6a:df:ca:36:3e:3b:be:
2f:aa:4c:62:30:6c:d1:41:03:50:1c:18:3d:b2:eb:26:92:68:
15:48:3c:b0:ff:06:0a:a5:7a:06:a0:ff:67:22:13:72:96:4a:
cf:94:b4:ff:77:72:58:5b:ab:06:21:c4:3a:93:19:44:d6:42:
ce:ae:23:cf:56:2b:0a:f4:1f:f6:ae:ba:ab:1d:1f:93:15:91:
16:dd:f0:d4:ea:6d:be:c5:02:49:4f:69:91:2e:ee:11:ae:79:
df:69:b1:55:ab:6e:d6:3e:fe:2b:dc:4c:41:8b:c5:26:cc:7b:
56:82:4a:38:2b:e9:9b:d0:c3:e4:a3:9e:d9:92:37:58:a9:01:
ec:d8:58:79:51:43:44:83:e6:f7:05:f3:23:6d:c8:13:93:08:
05:97:02:89:cf:ab:c2:ee:c8:58:0b:4f:6d:3f:3b:a6:c4:91:
70:95:6b:8e:a8:6f:ba:a5:ae:4e:2a:44:0a:63:4f:c2:a7:76:
8e:97:3b:7f:c1:76:2d:9d:85:45:41:d1:30:d1:b3:af:39:f9:
a9:1d:d5:82:73:b6:20:ea:57:47:3b:2a:65:1f:07:09:ab:56:
40:e6:cb:9b:95:f7:30:84:69:fd:4c:b1:f8:30:cb:be:f6:f5:
24:94:4e:1e
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAY0OOqVKrLNzUVM/WSfKR3j2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMTE1MTc0NTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjU3OTIxZTAyZmQwMDU1YmNlODk5YmY2NjBiMzFkNzhjODlhNTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN2/96wTcbWuOrAHzxEXcmQjrWzG
Sbd7U+6hmDIW41ngWL/BdrcPK6IHQQ5n+QTJl38lPEma1pYoid8SuNt+0RZgeluN
7xl6EFR+3zEJteAFv+8OFgBs7gK/VxU6az/xUKmHkFghNU3h7NO/yzV+s9uc9Mxw
I9T+b2qr91yyP4qLqxWfuGiGc4G4Cw3/OnV0o7HIlJqvkEX/CmG9Idz4HHCQWgxl
U56JTvxr3NHRd9aJx8e7XIreW+wFiSyiSphoSjCZX8OKyK9O1DkwXPgbZmSspbKz
1HEEA2j39tTsFyOKQU6rDTZXzdTRc60hwgGRe3Aptsw30dWQvybCo6o5/wIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFNJXkh4C/QBVvOiZv2YLMdeMiaVwMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvMGxlU0hnTDlBRlc4NkptX1pnc3gxNHlKcFhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHcBggrBgEFBQcBBwEB/wSBzDCByTCBmwQCAAEwgZQDBAAC
OG0DBAAFtVcDBAAtCR0DBAAtUXEDBAAtUXMDBAAtWIgDBAEtWIoDBAAtXqowDAME
AC2EtQMEAy2EsAMEAC2Q1AMEAE1TJQMEAlXReAMEAbkr+AMEALkr+wMEAbnIPgME
AMEe8AMEAcEe8gMEAME5KQMEAME5KwMEAsLyYDAMAwQCw7FcAwQAw7FeAwQCw9O8
MCkEAgACMCMDBQAqAXEgAwUDKgeSAAMFAyoMpYADBQMqEN/AAwUDKhEFgDANBgkq
hkiG9w0BAQsFAAOCAQEAwA4gp+E3O0Rbjvtq38o2Pju+L6pMYjBs0UEDUBwYPbLr
JpJoFUg8sP8GCqV6BqD/ZyITcpZKz5S0/3dyWFurBiHEOpMZRNZCzq4jz1YrCvQf
9q66qx0fkxWRFt3w1OptvsUCSU9pkS7uEa5532mxVatu1j7+K9xMQYvFJsx7VoJK
OCvpm9DD5KOe2ZI3WKkB7NhYeVFDRIPm9wXzI23IE5MIBZcCic+rwu7IWAtPbT87
psSRcJVrjqhvuqWuTipECmNPwqd2jpc7f8F2LZ2FRUHRMNGzrzn5qR3VgnO2IOpX
RzsqZR8HCatWQObLm5X3MIRp/Uyx+DDLvvb1JJROHg==
-----END CERTIFICATE-----
Generated at Tue Jan 16 13:17:12 2024 by rpki-client on console-fra.rpki-client.org