Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HYIUfiHKJa5juNYj1NWtBxXpXlE.roa
File: HYIUfiHKJa5juNYj1NWtBxXpXlE.roa (raw, json)
Hash identifier: m71j7aNc77bmavSJLsM7bf+gMrUFgoQX+V5SMRinAoc=
Subject key identifier: 1D:82:14:7E:21:CA:25:AE:63:B8:D6:23:D4:D5:AD:07:15:E9:5E:51
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018EAA7984E7106F09BC7CA68644EB00F3C9
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HYIUfiHKJa5juNYj1NWtBxXpXlE.roa
Signing time: Thu 04 Apr 2024 18:57:54 +0000
ROA not before: Thu 04 Apr 2024 18:57:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 2.56.109.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.144.212.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.96.0/24 maxlen: 24
194.242.97.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a07:9200::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a10:dfc0::/29 maxlen: 29
2a11:580::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 13 Apr 2024 09:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:aa:79:84:e7:10:6f:09:bc:7c:a6:86:44:eb:00:f3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 4 18:57:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d82147e21ca25ae63b8d623d4d5ad0715e95e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8d:0e:f4:52:b3:c7:d9:8f:9c:38:e5:8e:1c:
be:59:7f:a0:f6:d8:ed:19:09:b6:93:bf:86:81:2a:
a6:49:a5:c5:a5:e3:2b:22:ff:10:e7:3f:ff:a5:08:
06:7d:1a:81:17:f5:f1:43:a3:8a:ad:ce:98:a6:fc:
e1:fb:6a:3d:2f:5a:d4:62:6d:1a:78:fe:b5:ce:f0:
e5:43:77:8c:ef:12:54:fe:c5:48:ec:a5:f1:e5:4b:
23:ef:2e:cd:88:3e:63:5e:7e:13:1c:f5:9c:49:44:
b3:7c:c0:08:c9:bc:dc:0a:4b:db:e5:20:df:d0:1c:
bc:2d:ec:41:d7:8c:1f:75:1b:89:3b:82:02:98:7f:
ce:11:f8:ee:c5:0a:f7:df:c0:e5:50:a3:a6:a5:5e:
e8:b4:c3:66:4d:89:4a:77:af:c5:2b:a7:e6:ee:bc:
42:db:3a:d4:1d:f1:16:53:51:0f:d7:24:52:e1:44:
3a:f3:b9:5b:b9:98:b7:2d:ab:77:04:7b:23:58:89:
68:ea:69:04:05:b2:90:38:ff:f9:3c:dc:17:c9:8b:
95:41:88:23:63:02:6c:54:74:79:26:07:74:12:41:
a2:b0:7f:6c:6c:d5:cf:7a:23:40:23:8f:05:2c:04:
e6:40:af:c0:7a:4c:a7:ec:7e:e9:5b:c3:1b:97:dd:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:82:14:7E:21:CA:25:AE:63:B8:D6:23:D4:D5:AD:07:15:E9:5E:51
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HYIUfiHKJa5juNYj1NWtBxXpXlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.81.115.0/24
45.88.136.0/24
45.88.138.0/24
45.94.171.0/24
45.132.180.0/22
45.144.212.0/24
45.151.3.0/24
77.83.37.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.177.93.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
0e:49:e5:2b:d2:d7:83:35:9d:3d:dc:79:8c:d1:93:0b:b4:fd:
a2:97:5c:c4:45:e2:90:57:73:04:85:60:9f:f2:a0:0c:68:95:
b4:74:9a:01:45:d7:c7:d6:9d:2f:80:75:ea:ce:72:ad:60:5e:
29:4f:b9:b5:e3:1a:66:35:eb:cc:8e:80:ca:3f:76:5d:0f:a2:
e5:ed:29:dc:d9:a8:e8:ff:12:01:9d:9e:b2:3f:61:6a:33:5f:
83:49:9f:e4:c2:ee:a0:3f:1b:e8:91:81:dd:01:7d:7f:ab:96:
5f:24:19:7d:40:0a:ec:7f:ca:08:fd:cc:5b:1c:34:b8:f1:aa:
ff:17:d5:56:77:e0:6f:97:03:f2:1e:29:51:e5:d2:7d:d5:e5:
24:ac:c4:73:80:17:14:32:b7:a1:eb:8d:9b:7c:b5:c2:5c:ae:
a5:e7:26:7a:d3:44:69:1e:d2:d4:50:d0:ec:b8:56:c9:69:2a:
6c:1a:ef:15:2b:c1:9f:8d:90:be:fd:75:4c:64:ed:c6:15:30:
f5:a8:05:57:e3:97:47:4a:15:a1:d8:f1:3f:a5:e5:06:3c:68:
35:e7:9b:ef:85:02:b5:f3:e8:95:48:17:0e:ee:22:3b:19:de:
f3:79:64:fd:73:80:0b:17:ae:17:31:d3:d0:b3:35:4e:94:2a:
43:50:98:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 10:12:31 2024 by rpki-client on console-fra.rpki-client.org