Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HWfN8REVOcabhh3ob7eaPagejC8.roa
File: HWfN8REVOcabhh3ob7eaPagejC8.roa (raw, json)
Hash identifier: gl64n1Afxh2ihsc+ut6H9dpfs079CaJf7z1DIVMFI5k=
Subject key identifier: 1D:67:CD:F1:11:15:39:C6:9B:86:1D:E8:6F:B7:9A:3D:A8:1E:8C:2F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A50C94E5157495CF4BE70A6280F4F092B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HWfN8REVOcabhh3ob7eaPagejC8.roa
Signing time: Fri 01 Sep 2023 12:48:04 +0000
ROA not before: Fri 01 Sep 2023 12:48:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.37.0/24 maxlen: 24
45.81.114.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:50:c9:4e:51:57:49:5c:f4:be:70:a6:28:0f:4f:09:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 1 12:48:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d67cdf1111539c69b861de86fb79a3da81e8c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:f7:1f:32:88:92:92:fc:1e:f2:68:07:ee:
97:a1:42:fc:d1:60:7b:c7:6f:9d:d7:a3:a6:8f:34:
8e:fa:1d:f6:81:07:a9:12:11:c4:c4:ec:67:54:bb:
af:f9:42:da:0d:9f:76:50:3b:06:51:05:80:1a:d2:
7b:dc:52:be:b3:75:8b:61:70:56:40:d0:04:f7:d8:
11:70:f7:19:ed:65:f8:e2:93:5b:bb:e1:40:5c:29:
de:e2:76:a6:d0:16:10:9a:96:36:9f:ca:d0:72:d0:
ba:22:6f:44:e9:10:fd:67:b9:39:32:1d:80:06:6a:
59:ad:d4:1b:47:07:8b:ca:c2:f2:bf:f4:a0:d8:05:
99:79:f5:ce:3c:3c:1b:33:70:18:a2:cc:c1:90:97:
18:ef:da:b1:b0:ac:ed:f1:c3:88:b6:cd:f5:94:97:
50:c7:db:63:94:76:97:59:77:c3:0d:cd:cb:a3:17:
0f:f2:c2:5d:fe:7a:75:f3:59:95:ff:07:4b:19:44:
5c:d6:18:d4:f8:68:16:c6:18:e1:e3:46:f7:b6:57:
82:0c:94:3f:b5:c4:54:28:ca:8f:b8:18:b3:e8:b3:
90:1d:14:44:40:d3:84:2e:2f:4d:89:e3:ab:79:72:
a0:c7:41:91:ce:f8:05:b6:d7:aa:7a:dc:80:3f:92:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:67:CD:F1:11:15:39:C6:9B:86:1D:E8:6F:B7:9A:3D:A8:1E:8C:2F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HWfN8REVOcabhh3ob7eaPagejC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/23
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/23
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
7e:b8:a6:ce:c1:03:1b:34:b8:92:0e:61:22:e3:38:c4:72:e1:
bd:61:86:64:4e:38:b9:6b:22:52:d2:54:90:12:9f:71:21:ea:
14:7a:70:60:81:b5:45:7c:62:af:ba:fd:43:3f:35:10:38:db:
d6:0c:c6:56:da:5b:62:01:2b:b8:20:f9:3d:9c:86:b3:07:c0:
08:0e:ab:2b:5b:0e:db:5b:33:3f:94:39:5b:83:84:37:6a:50:
a6:c8:a3:25:72:fc:6d:52:05:ff:60:8d:58:5e:db:b7:0e:19:
1d:73:f6:f4:d6:1a:8c:06:19:bf:33:ed:aa:b3:9d:bf:e9:08:
8f:f4:e5:3c:98:e5:36:db:c1:4a:cc:e0:18:03:93:1b:cc:4f:
89:cf:5d:16:a0:62:5b:f9:72:db:33:ee:53:83:ce:17:59:b8:
e2:2f:ab:99:44:4e:08:14:59:1b:f0:2c:47:80:98:ce:59:56:
04:8b:bd:4c:52:97:44:e7:c4:c4:eb:3e:b8:1c:d1:87:20:d5:
6b:6a:d4:69:d2:6c:42:da:09:0e:03:1d:5b:46:5c:a8:7f:28:
76:f4:f4:6a:bb:0c:7a:cb:40:d1:3a:43:6d:77:e0:9a:b4:01:
2e:82:11:3d:4e:5c:1b:8d:e7:ae:cb:b9:98:29:df:b6:b3:ec:
83:aa:38:97
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAYpQyU5RV0lc9L5wpigPTwkrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwOTAxMTI0ODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDY3Y2RmMTExMTUzOWM2OWI4NjFkZTg2ZmI3OWEzZGE4MWU4YzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj/3HzKIkpL8HvJoB+6XoUL80WB7
x2+d16OmjzSO+h32gQepEhHExOxnVLuv+ULaDZ92UDsGUQWAGtJ73FK+s3WLYXBW
QNAE99gRcPcZ7WX44pNbu+FAXCne4nam0BYQmpY2n8rQctC6Im9E6RD9Z7k5Mh2A
BmpZrdQbRweLysLyv/Sg2AWZefXOPDwbM3AYoszBkJcY79qxsKzt8cOIts31lJdQ
x9tjlHaXWXfDDc3LoxcP8sJd/np181mV/wdLGURc1hjU+GgWxhjh40b3tleCDJQ/
tcRUKMqPuBiz6LOQHRREQNOELi9NieOreXKgx0GRzvgFtteqetyAP5J+9wIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFB1nzfERFTnGm4Yd6G+3mj2oHowvMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvSFdmTjhSRVZPY2FiaGgzb2I3ZWFQYWdlakM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHcBggrBgEFBQcBBwEB/wSBzDCByTCBmwQCAAEwgZQDBAAF
tVcDBAAtCR0DBAItUXADBAAtWIgDBAEtWIoDBAItXqgwDAMEAC2EtQMEAy2EsAME
AS2Q1AMEAE1TJQMEAE1TJwMEAlXReAMEAFvfbgMEAbkr+AMEALkr+wMEAbnIPgME
AMEe8AMEAcEe8gMEAME5KQMEAME5KwMEAsLyYDAMAwQCw7FcAwQAw7FeAwQCw9O8
MCkEAgACMCMDBQAqAXEgAwUDKgeSAAMFAyoMpYADBQMqEN/AAwUDKhEFgDANBgkq
hkiG9w0BAQsFAAOCAQEAfrimzsEDGzS4kg5hIuM4xHLhvWGGZE44uWsiUtJUkBKf
cSHqFHpwYIG1RXxir7r9Qz81EDjb1gzGVtpbYgEruCD5PZyGswfACA6rK1sO21sz
P5Q5W4OEN2pQpsijJXL8bVIF/2CNWF7btw4ZHXP29NYajAYZvzPtqrOdv+kIj/Tl
PJjlNtvBSszgGAOTG8xPic9dFqBiW/ly2zPuU4POF1m44i+rmUROCBRZG/AsR4CY
zllWBIu9TFKXROfExOs+uBzRhyDVa2rUadJsQtoJDgMdW0ZcqH8odvT0arsMestA
0TpDbXfgmrQBLoIRPU5cG43nrsu5mCnftrPsg6o4lw==
-----END CERTIFICATE-----
Generated at Tue Sep 5 13:00:14 2023 by rpki-client on console-fra.rpki-client.org