Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/H0D9AKitrZIX80Y4_4UvRBnnzuU.roa
File: H0D9AKitrZIX80Y4_4UvRBnnzuU.roa (raw, json)
Hash identifier: DgWYicVnurvhuMavv0+cQx9wcz4gchKqpqYmms17P5A=
Subject key identifier: 1F:40:FD:00:A8:AD:AD:92:17:F3:46:38:FF:85:2F:44:19:E7:CE:E5
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01888AA46FEB7A731C0E932C4D3AEF0D9CBF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/H0D9AKitrZIX80Y4_4UvRBnnzuU.roa
Signing time: Mon 05 Jun 2023 08:20:12 +0000
ROA not before: Mon 05 Jun 2023 08:20:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:a4:6f:eb:7a:73:1c:0e:93:2c:4d:3a:ef:0d:9c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 5 08:20:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f40fd00a8adad9217f34638ff852f4419e7cee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:20:5b:22:a4:c4:9e:91:92:33:71:a0:a5:b4:
c7:19:80:3c:1a:02:ca:42:bc:d6:ea:ba:5a:96:74:
31:b6:52:e2:e7:d8:a8:03:55:be:2a:3a:4e:55:8e:
c4:e7:dc:6d:6c:46:27:cd:b1:9a:c0:00:ab:0b:74:
13:26:97:27:86:a2:ef:76:e2:cc:dd:8e:71:5e:eb:
ed:d1:45:2f:40:ec:d4:be:a2:af:a9:5f:6d:49:fd:
cc:91:a0:91:3e:b5:1d:05:36:0f:44:f8:48:4d:cf:
ba:e2:5c:cb:2d:2e:cc:e5:f8:a3:12:4f:44:1e:ad:
4c:59:d8:9b:1a:24:80:eb:20:2e:54:01:0b:13:75:
6a:1a:cc:2f:93:af:b6:d8:8a:77:ee:11:46:83:be:
cb:46:0b:d9:f2:d2:d8:93:ec:62:12:3e:2d:6e:b4:
93:ae:55:3e:e7:8a:0e:b7:53:04:e4:54:06:2a:72:
9d:f3:d9:74:71:92:a5:1b:6d:78:86:ff:1c:7b:1a:
22:f5:87:cf:c5:ed:16:43:22:b2:e2:fd:90:df:b2:
f9:57:2b:3f:e9:07:a6:10:e6:b0:66:bb:28:bd:94:
6a:78:2a:d0:5d:5e:21:8e:4c:e5:0f:ab:03:b7:f9:
b3:33:82:18:98:f0:36:1e:64:af:33:5f:9d:e7:09:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:40:FD:00:A8:AD:AD:92:17:F3:46:38:FF:85:2F:44:19:E7:CE:E5
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/H0D9AKitrZIX80Y4_4UvRBnnzuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/23
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.38.0/23
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
23:27:10:83:43:b5:c6:f5:a5:20:cc:5b:6f:8b:26:80:69:fd:
15:8d:e9:5d:22:5b:9d:57:f3:7e:c4:ca:a8:65:c6:b3:f5:f4:
3e:41:66:11:b8:02:8a:21:fc:75:09:65:9c:a9:2c:a3:05:56:
c1:bc:50:fb:da:9e:a3:64:bb:c7:1f:89:ea:32:15:9d:c2:9c:
92:8f:28:23:0e:c8:c4:b1:a8:65:fe:42:f6:e0:69:6d:77:fb:
fb:a4:4b:f5:1a:1d:36:87:91:45:5c:7e:09:87:97:a8:f9:ba:
eb:5d:e5:4b:b9:74:3d:e8:04:9d:7c:44:1a:c8:ef:95:9e:ec:
77:fa:06:6c:38:a5:4f:9d:d8:1f:31:c7:64:93:f2:a9:79:b2:
3d:2f:4b:14:5e:54:f5:94:77:a8:64:1e:6e:55:be:a4:cc:df:
b0:5d:df:9c:1a:99:6d:87:25:af:6c:c7:55:10:92:8e:42:00:
ba:b4:2c:01:00:41:11:82:b0:f8:25:29:e1:a2:dc:a1:33:44:
6f:12:74:2f:f4:8c:a3:f2:23:7a:1b:94:7d:fd:26:85:62:2d:
ce:60:1f:f8:9a:73:e1:63:59:9b:60:76:ee:7a:10:27:27:33:
7b:ef:0f:43:d4:52:b1:54:4c:a5:8a:16:33:ca:65:82:73:ee:
28:b9:5e:1c
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgISAYiKpG/renMcDpMsTTrvDZy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwNjA1MDgyMDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjQwZmQwMGE4YWRhZDkyMTdmMzQ2MzhmZjg1MmY0NDE5ZTdjZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiBbIqTEnpGSM3GgpbTHGYA8GgLK
QrzW6rpalnQxtlLi59ioA1W+KjpOVY7E59xtbEYnzbGawACrC3QTJpcnhqLvduLM
3Y5xXuvt0UUvQOzUvqKvqV9tSf3MkaCRPrUdBTYPRPhITc+64lzLLS7M5fijEk9E
Hq1MWdibGiSA6yAuVAELE3VqGswvk6+22Ip37hFGg77LRgvZ8tLYk+xiEj4tbrST
rlU+54oOt1ME5FQGKnKd89l0cZKlG214hv8cexoi9YfPxe0WQyKy4v2Q37L5Vys/
6QemEOawZrsovZRqeCrQXV4hjkzlD6sDt/mzM4IYmPA2HmSvM1+d5wmHhQIDAQAB
o4ICszCCAq8wHQYDVR0OBBYEFB9A/QCora2SF/NGOP+FL0QZ587lMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvSDBEOUFLaXRyWklYODBZNF80VXZSQm5uenVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHIBggrBgEFBQcBBwEB/wSBuDCBtTCBhwQCAAEwgYADBAIC
OGwDBAAFtVcDBAAtCR0DBAItUXADBAAtWIgDBAEtWIoDBAItXqgwDAMEAC2EtQME
Ay2EsAMEAC2Q1AMEAU1TJgMEAlXReAMEAbkr+AMEALkr+wMEAbnIPgMEAsEe8AME
AME5KwMEAsLyYAMEAMM+GAMEAsOxXAMEAsPTvDApBAIAAjAjAwUAKgFxIAMFAyoH
kgADBQMqDKWAAwUDKhDfwAMFAyoRBYAwDQYJKoZIhvcNAQELBQADggEBACMnEIND
tcb1pSDMW2+LJoBp/RWN6V0iW51X837EyqhlxrP19D5BZhG4Aooh/HUJZZypLKMF
VsG8UPvanqNku8cfieoyFZ3CnJKPKCMOyMSxqGX+QvbgaW13+/ukS/UaHTaHkUVc
fgmHl6j5uutd5Uu5dD3oBJ18RBrI75We7Hf6Bmw4pU+d2B8xx2ST8ql5sj0vSxRe
VPWUd6hkHm5VvqTM37Bd35wamW2HJa9sx1UQko5CALq0LAEAQRGCsPglKeGi3KEz
RG8SdC/0jKPyI3oblH39JoViLc5gH/iac+FjWZtgdu56ECcnM3vvD0PUUrFUTKWK
FjPKZYJz7ii5Xhw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org