Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7St3xg70ELohiyH9igR7NcmMUz8.roa
File: 7St3xg70ELohiyH9igR7NcmMUz8.roa (raw, json)
Hash identifier: kVbxwt7BMzqdTmydCgZWgUajehavZYsVdwTO2b6JuWU=
Subject key identifier: ED:2B:77:C6:0E:F4:10:BA:21:8B:21:FD:8A:04:7B:35:C9:8C:53:3F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0192633FA85AA35E34337555A83FDA7FF587
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7St3xg70ELohiyH9igR7NcmMUz8.roa
Signing time: Sun 06 Oct 2024 19:12:49 +0000
ROA not before: Sun 06 Oct 2024 19:12:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 2.56.109.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.144.212.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.188.0/24 maxlen: 24
195.211.189.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a01:7120:7::/48 maxlen: 48
2a07:9200::/29 maxlen: 29
2a07:9201::/32 maxlen: 32
2a07:9206::/32 maxlen: 32
2a07:9207::/32 maxlen: 32
2a09:340::/32 maxlen: 32
2a09:342::/32 maxlen: 32
2a09:346::/32 maxlen: 32
2a09:c440::/32 maxlen: 32
2a0c:5d40::/32 maxlen: 32
2a0c:a580::/29 maxlen: 29
2a0c:a580::/32 maxlen: 32
2a0c:a581::/32 maxlen: 32
2a0c:a584::/32 maxlen: 32
2a0c:a586::/32 maxlen: 32
2a10:dfc0::/29 maxlen: 29
2a10:dfc0::/32 maxlen: 32
2a10:fac0::/32 maxlen: 32
2a11:580::/29 maxlen: 29
2a11:580::/32 maxlen: 32
2a11:1600::/32 maxlen: 32
2a11:2a80::/32 maxlen: 32
2a11:3900::/32 maxlen: 32
2a11:d680::/32 maxlen: 32
2a12:9f00::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Oct 2024 17:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:63:3f:a8:5a:a3:5e:34:33:75:55:a8:3f:da:7f:f5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 6 19:12:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed2b77c60ef410ba218b21fd8a047b35c98c533f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:75:67:fd:32:a6:a4:3b:7c:91:b5:4f:19:
fb:e1:c6:b6:3e:53:91:10:46:d7:e8:d3:cd:8b:ec:
39:54:32:24:9a:dc:2e:10:e7:79:ba:7c:f2:ea:3a:
d0:ed:d4:b9:a6:5e:ca:04:6e:bc:1b:a1:f0:47:88:
9a:8b:1b:89:51:c6:e1:b0:d6:f2:58:bf:c8:8f:07:
5d:7f:f8:b1:37:0d:9e:28:64:e2:48:9c:b8:17:23:
e0:dd:f7:d9:15:b6:25:fe:7a:55:5d:88:ac:39:07:
5d:95:3d:e6:ab:db:35:86:9f:2a:93:e2:37:67:17:
ec:4b:3a:26:0e:30:63:8c:ae:13:3a:0e:bc:95:e4:
30:74:23:27:94:ba:cf:e1:14:c1:9a:04:8c:ad:b6:
63:6d:4c:65:cb:6c:19:f8:5b:60:3c:16:96:1a:ab:
2a:10:b9:e7:3e:9d:0a:01:94:83:ed:08:00:8a:4f:
46:92:e3:d3:1c:a6:97:39:bd:ae:3f:59:d3:d0:53:
4e:6e:21:bc:ee:5b:ed:5c:3f:c0:6a:e2:92:2a:c7:
55:05:39:d4:44:10:5c:9f:17:6a:c4:c6:ff:07:37:
76:1d:4a:d2:7e:50:3b:34:ae:fc:51:b3:ad:98:10:
8d:69:0b:72:6a:01:02:e3:a3:8b:7a:bb:08:f3:f6:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2B:77:C6:0E:F4:10:BA:21:8B:21:FD:8A:04:7B:35:C9:8C:53:3F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7St3xg70ELohiyH9igR7NcmMUz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.13.189.0-45.13.190.255
45.81.115.0/24
45.88.136.0/24
45.88.138.0/24
45.94.171.0/24
45.132.180.0/22
45.144.212.0/24
45.151.3.0/24
77.83.37.0/24
146.19.125.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.177.93.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a09:340::/32
2a09:342::/32
2a09:346::/32
2a09:c440::/32
2a0c:5d40::/32
2a0c:a580::/29
2a10:dfc0::/29
2a10:fac0::/32
2a11:580::/29
2a11:1600::/32
2a11:2a80::/32
2a11:3900::/32
2a11:d680::/32
2a12:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
ad:9d:f6:1d:e6:ff:34:ca:96:a9:5e:67:e9:f1:b1:79:ba:76:
14:61:9f:e0:0c:94:d9:86:31:b3:7d:f3:fe:da:e8:91:0a:9d:
5b:7e:24:b6:99:27:fd:5c:06:96:31:31:73:cd:72:6e:6a:9a:
55:8c:bb:d1:ee:c7:de:3e:be:b6:81:bf:17:ce:b4:e4:07:be:
09:bd:4a:80:6d:21:05:33:9f:8e:8c:f9:2a:e2:91:b1:ba:37:
2b:10:c4:06:a1:53:eb:5b:f3:53:37:44:e5:c3:59:87:f3:83:
0a:20:ff:99:51:11:64:ab:45:12:47:98:23:38:89:8f:3e:44:
45:8c:61:36:78:65:89:5b:fa:7d:95:f9:e2:45:4a:57:4d:16:
a6:1a:6f:2d:0c:07:d3:b6:be:d4:a8:67:49:a8:fc:9f:22:75:
dc:ca:84:07:7f:97:5f:ca:89:0b:09:3c:e2:3d:6f:4f:4a:a3:
a0:a9:d5:28:cf:5a:ca:1b:bc:e6:3a:13:18:8d:67:59:d3:0a:
14:ba:62:ea:77:42:88:6a:f1:f2:87:4f:a5:82:3f:ed:58:a5:
b4:14:fa:81:5c:e0:7a:37:66:a4:0e:8a:0b:8c:84:f7:40:33:
3a:d9:eb:95:66:15:c2:70:28:12:61:38:84:4b:32:1c:6b:24:
30:75:f8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 21:20:32 2024 by rpki-client on console-ams.rpki-client.org