Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/CKbo3d_1TUbAbAi9SsbTUP2Egkc.roa
File: CKbo3d_1TUbAbAi9SsbTUP2Egkc.roa (raw, json)
Hash identifier: H7cK9hTLkbM4RVTr3ACTpX+GWDJkTetNRZ3Vw/FqTQQ=
Subject key identifier: 08:A6:E8:DD:DF:F5:4D:46:C0:6C:08:BD:4A:C6:D3:50:FD:84:82:47
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B8E65763C99BA2F9530CA30CAA23C6794
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/CKbo3d_1TUbAbAi9SsbTUP2Egkc.roa
Signing time: Thu 02 Nov 2023 04:58:15 +0000
ROA not before: Thu 02 Nov 2023 04:58:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:65:76:3c:99:ba:2f:95:30:ca:30:ca:a2:3c:67:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 2 04:58:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08a6e8dddff54d46c06c08bd4ac6d350fd848247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2d:7f:06:08:06:fd:25:ca:71:ca:c7:a9:d7:
46:da:66:53:6d:2e:61:1a:a8:3a:00:39:60:73:65:
42:75:1f:ad:b5:e6:35:7b:6b:36:fa:e8:6d:29:ed:
08:3d:94:e9:4d:cb:87:56:a4:d9:b4:18:4f:9e:8d:
75:b7:92:d7:1a:73:94:bd:91:0c:9d:8c:00:82:5b:
88:95:3f:cf:3f:f0:32:92:a8:9d:f1:9b:cf:19:9f:
6a:9f:b1:c5:52:b4:e1:00:8f:55:cc:3f:5e:c7:54:
e7:ce:ef:52:97:42:38:c1:b0:55:36:10:a7:dd:1e:
64:20:73:d8:8b:7e:b8:90:39:80:0c:f0:c8:f3:c2:
96:45:42:ec:44:df:d9:fa:44:b2:34:5f:78:bb:05:
53:62:17:b2:12:b0:97:fd:65:71:95:70:81:1a:8d:
00:6e:c2:fe:e1:4d:d2:ab:3c:3b:18:d3:93:e0:b4:
96:15:03:5b:83:51:12:11:80:f7:7d:56:cc:08:26:
42:eb:13:03:48:f1:23:eb:fe:5c:09:97:f3:a2:81:
a2:54:35:f7:3d:15:cd:41:1d:ca:e6:5d:ff:ab:f4:
ad:d5:af:26:70:14:92:98:eb:80:06:03:78:08:4d:
76:10:08:6f:c5:8a:66:0a:f0:a7:8c:bb:fc:4b:89:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A6:E8:DD:DF:F5:4D:46:C0:6C:08:BD:4A:C6:D3:50:FD:84:82:47
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/CKbo3d_1TUbAbAi9SsbTUP2Egkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/23
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
b8:86:00:7e:f3:0a:c8:62:5b:e2:57:11:ff:55:88:b0:95:81:
77:b1:58:43:ab:75:00:c0:81:a6:67:96:59:dd:b3:68:37:5c:
84:2c:72:d5:51:67:94:93:3e:39:ec:28:fb:de:4f:f2:cd:46:
18:0d:88:78:8b:0e:7a:80:9e:3c:92:1d:22:28:73:13:89:a2:
17:52:44:69:25:f9:9d:1b:3d:f5:2d:4f:46:10:35:08:c1:6e:
ec:2b:c2:62:07:99:2b:0d:28:f5:2a:5e:e3:e2:9a:f9:83:d4:
14:a4:10:2c:b1:a0:ec:96:c4:19:fe:3f:ce:49:0c:72:cb:93:
01:53:0b:29:ac:94:30:4a:03:4b:d9:d2:1b:c7:b3:6d:2d:5e:
d0:79:0f:27:9d:df:d8:f0:62:b5:74:f3:f0:db:d6:58:98:0d:
d0:ab:5a:86:bf:7e:c8:fd:68:e9:f7:81:55:80:d0:c9:5e:17:
99:a8:48:7d:64:cb:ab:63:4d:55:87:33:66:bf:02:e6:21:42:
5d:12:2f:f8:a6:69:02:5c:2a:ab:20:5a:f6:db:51:c3:69:ec:
ce:0a:ac:04:4e:a6:11:7d:3e:ed:ac:56:12:0c:87:2a:e1:1b:
02:60:7a:f0:4b:ca:1b:7a:54:6b:09:f1:92:74:6e:26:eb:47:
aa:d7:5d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 12:50:35 2023 by rpki-client on console-fra.rpki-client.org