Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BXgT9hZkd4yLMjxamL1q_l5hWsc.roa
File: BXgT9hZkd4yLMjxamL1q_l5hWsc.roa (raw, json)
Hash identifier: 6mt3gO/6xgsnH/CD/B+GlFIJ8A1UMX/2Yhx5kNpAUbA=
Subject key identifier: 05:78:13:F6:16:64:77:8C:8B:32:3C:5A:98:BD:6A:FE:5E:61:5A:C7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018AF03A2958D7D20CB2A06A2006B32DEA35
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BXgT9hZkd4yLMjxamL1q_l5hWsc.roa
Signing time: Mon 02 Oct 2023 11:50:57 +0000
ROA not before: Mon 02 Oct 2023 11:50:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.37.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 02 Oct 2023 16:43:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:3a:29:58:d7:d2:0c:b2:a0:6a:20:06:b3:2d:ea:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 2 11:50:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=057813f61664778c8b323c5a98bd6afe5e615ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ec:93:b8:7a:d8:3a:01:1e:9d:17:0f:67:78:
c7:07:b8:bd:14:e9:73:03:74:4b:0a:30:c1:1c:5d:
16:d1:54:e8:20:fa:d3:aa:9d:a7:77:62:b4:8b:99:
5d:2e:0a:ac:7a:b6:ff:c0:a6:c3:f3:9c:57:da:25:
f5:f6:91:dd:39:53:ff:89:fc:ac:be:d7:a4:6b:31:
93:ad:97:7f:d1:06:32:c9:ae:4e:dd:ec:d7:1b:1a:
80:d6:9c:8b:42:23:7e:90:3d:df:51:9a:2b:b9:28:
3f:5f:28:39:68:12:99:d0:c1:c2:76:17:c4:32:c6:
5f:0b:42:1f:cf:99:d7:d4:27:f3:24:08:34:a3:ac:
30:0f:7a:09:8c:b4:15:71:7d:49:36:07:07:9e:17:
e9:bc:5e:ec:2e:2b:25:15:6f:68:b6:84:ea:e0:27:
d0:4f:1b:0e:36:b9:a9:e7:74:77:c4:99:fb:79:a0:
ed:27:2e:b2:09:ed:d3:65:3d:f6:9f:0d:ed:48:45:
e8:f5:b8:e6:8f:81:58:1d:a2:53:30:04:e5:18:8a:
be:71:9f:51:c5:ac:4b:67:92:19:31:a9:05:b9:8b:
96:6d:f0:15:ff:f0:7f:36:2f:3a:87:bb:3a:15:83:
50:f4:3b:1d:d2:3e:e8:43:d1:e6:8f:b6:09:44:10:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:78:13:F6:16:64:77:8C:8B:32:3C:5A:98:BD:6A:FE:5E:61:5A:C7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BXgT9hZkd4yLMjxamL1q_l5hWsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
6e:8d:c6:5a:95:53:b7:ce:82:d3:8b:26:29:04:88:f2:cb:f8:
0b:e0:9d:64:80:4e:cd:49:4c:0d:8c:cb:cc:fa:6a:83:c0:ab:
35:b4:12:aa:81:45:53:25:c4:61:e8:dd:f8:9a:11:d3:5c:fa:
05:be:66:8b:f8:d4:f5:3f:c4:fc:fa:25:f2:88:e3:91:99:87:
b1:02:62:3e:ec:92:b3:3c:d6:e3:17:d8:92:e6:52:ef:56:61:
bb:c6:2f:bd:c5:df:80:7c:4d:b6:13:0f:d6:d8:54:11:5f:e3:
dc:53:30:d9:fd:81:e5:0f:21:01:3f:02:84:d6:33:c2:71:1e:
ea:00:8a:c0:24:f5:59:f7:6a:5c:f0:8e:14:39:6b:d6:cf:23:
ff:17:6a:f2:15:d9:69:e3:19:66:21:3a:1e:fb:bb:d2:8e:1a:
16:ce:e7:43:c9:73:04:f3:58:1f:ac:2c:c7:60:cf:ef:56:8d:
e7:b6:b6:2f:7d:34:3e:ec:35:34:1b:b5:e3:f2:fe:67:c8:5b:
8d:88:7d:73:df:55:27:18:e7:01:0a:58:27:2f:c3:8c:a5:ed:
1d:75:9e:26:4e:18:6e:26:74:6f:0b:3d:28:81:4b:58:ff:4b:
72:db:5e:d7:64:f5:48:a2:99:83:25:a2:47:d1:56:ca:fa:d2:
7d:56:8e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org