Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8HHQnMiOcVpEOF5iEnslV0Vg1Qo.roa
File: 8HHQnMiOcVpEOF5iEnslV0Vg1Qo.roa (raw, json)
Hash identifier: p5RZ2uYB1KI4mIco8dQklzdZtUD5kPLTn/XFCeUOH5Q=
Subject key identifier: F0:71:D0:9C:C8:8E:71:5A:44:38:5E:62:12:7B:25:57:45:60:D5:0A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01903F9B749CE87E6810E0E2864A3D0BFBD0
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8HHQnMiOcVpEOF5iEnslV0Vg1Qo.roa
Signing time: Sat 22 Jun 2024 11:01:10 +0000
ROA not before: Sat 22 Jun 2024 11:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 2.56.109.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.144.212.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a07:9200::/29 maxlen: 29
2a07:9201::/32 maxlen: 32
2a0c:a580::/29 maxlen: 29
2a10:dfc0::/29 maxlen: 29
2a11:580::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jul 2024 15:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3f:9b:74:9c:e8:7e:68:10:e0:e2:86:4a:3d:0b:fb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 22 11:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f071d09cc88e715a44385e62127b25574560d50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:59:5a:60:61:0d:b2:64:0c:92:33:85:d1:
1c:00:18:52:b3:a6:7e:ae:7c:c8:d1:17:a3:b9:c3:
ef:24:4f:56:4d:50:5c:2e:da:c9:eb:af:32:25:65:
2e:9a:fe:9e:c7:d7:1a:5c:98:2b:65:5e:95:c2:ad:
b4:03:7d:22:40:1a:72:66:61:94:72:a5:72:94:48:
fe:21:53:bf:ac:f6:d5:83:1b:22:47:20:ad:31:d1:
f6:34:e3:c3:47:49:9a:bd:ae:5a:e3:81:0d:67:f0:
2e:a9:40:7e:ec:e8:da:13:c7:06:77:0e:dd:03:e1:
8d:34:f8:48:99:8b:d5:73:27:f5:e8:15:59:c7:18:
e1:4f:e7:08:d3:63:08:84:c3:e3:14:42:31:81:6c:
e1:dd:4c:31:03:24:c9:2b:4f:63:46:97:6b:10:15:
b5:17:07:43:28:de:0a:11:41:12:e5:54:4f:3e:08:
a7:f3:89:54:e8:36:41:75:49:f3:b6:55:dd:49:cc:
ed:44:b9:76:b3:33:a5:d9:fc:84:c3:34:a8:23:d8:
5f:dd:b3:b4:dc:78:38:a1:e8:a7:a8:00:30:44:d0:
09:a1:41:dc:85:31:cb:3c:ae:1c:fd:f7:e5:b4:ed:
d6:32:94:30:d2:cc:e5:fc:5f:ff:7d:8a:c3:09:48:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:71:D0:9C:C8:8E:71:5A:44:38:5E:62:12:7B:25:57:45:60:D5:0A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8HHQnMiOcVpEOF5iEnslV0Vg1Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.81.115.0/24
45.88.136.0/24
45.88.138.0/24
45.94.171.0/24
45.132.180.0/22
45.144.212.0/24
45.151.3.0/24
77.83.37.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.177.93.0-195.177.95.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
5b:e5:95:72:2e:c6:ba:76:d9:f6:86:53:b3:0b:2e:3b:7d:73:
d0:5a:97:28:06:4f:67:68:18:32:5a:01:10:05:71:6d:89:58:
a9:d7:56:69:74:99:87:60:17:f8:8b:83:20:32:55:4c:fc:e1:
c8:c9:a1:8e:be:f5:a1:17:ab:a6:ee:d3:69:5c:59:cc:64:da:
7f:46:5c:6d:f5:7b:41:62:ce:81:02:10:7d:59:c7:f0:84:15:
ba:2f:1d:a0:17:02:01:a9:0d:d2:4f:69:54:2c:83:98:c8:11:
3b:88:62:4d:19:82:4a:3b:d0:70:cf:12:99:e4:19:4b:be:09:
ce:29:cf:fc:40:f2:e3:16:30:cf:07:f0:0f:89:0f:5f:c2:bd:
69:be:07:5b:0b:0b:a2:fc:aa:ff:22:73:40:93:40:4e:42:0d:
11:97:4f:c6:55:f5:9c:32:bc:b2:78:c2:7a:09:c1:91:70:e3:
2d:fd:f7:94:aa:3d:78:d0:17:a9:49:51:3e:9d:4d:f1:65:a2:
9b:e5:b7:19:d3:b8:0d:2d:86:37:bb:d1:5e:1b:76:20:4c:89:
80:0c:49:27:7b:06:b9:8d:e7:49:54:f1:2c:df:a7:a1:ad:36:
b3:a0:e7:c5:06:1f:52:fe:99:56:01:55:f0:2b:e1:42:cd:7a:
51:b1:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:35:14 2024 by rpki-client on console-fra.rpki-client.org