Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HjYvCM5Z76-lbXROlSVUYFuHdkw.roa
File: HjYvCM5Z76-lbXROlSVUYFuHdkw.roa (raw, json)
Hash identifier: Av8Dc/azI7DUyi6KnhOBz813CAHqtjLHgnkmSIQjvlY=
Subject key identifier: 1E:36:2F:08:CE:59:EF:AF:A5:6D:74:4E:95:25:54:60:5B:87:76:4C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0191C3D4B4DAA3BB0EDAD97489A1B942C677
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HjYvCM5Z76-lbXROlSVUYFuHdkw.roa
Signing time: Thu 05 Sep 2024 20:16:22 +0000
ROA not before: Thu 05 Sep 2024 20:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 2.56.109.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.144.212.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a01:7120:7::/48 maxlen: 48
2a07:9200::/29 maxlen: 29
2a07:9201::/32 maxlen: 32
2a07:9206::/32 maxlen: 32
2a07:9207::/32 maxlen: 32
2a09:340::/32 maxlen: 32
2a09:c440::/32 maxlen: 32
2a0c:5d40::/32 maxlen: 32
2a0c:a580::/29 maxlen: 29
2a0c:a580::/32 maxlen: 32
2a0c:a581::/32 maxlen: 32
2a0c:a584::/32 maxlen: 32
2a0c:a586::/32 maxlen: 32
2a10:dfc0::/29 maxlen: 29
2a10:dfc0::/32 maxlen: 32
2a10:fac0::/32 maxlen: 32
2a11:580::/29 maxlen: 29
2a11:580::/32 maxlen: 32
2a11:1600::/32 maxlen: 32
2a11:2a80::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 06 Sep 2024 08:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c3:d4:b4:da:a3:bb:0e:da:d9:74:89:a1:b9:42:c6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 5 20:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e362f08ce59efafa56d744e952554605b87764c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:21:e8:be:aa:16:9f:53:26:cd:ba:77:cd:
49:49:83:74:44:56:56:9e:4b:39:8c:9c:c2:c9:a8:
f8:f7:93:93:e2:a6:9e:4c:e7:69:56:08:b3:dc:af:
ca:3d:4e:a8:d0:d7:e0:cd:79:09:10:22:1b:a7:ae:
13:bd:5b:ca:10:b4:25:86:fd:bf:20:54:f4:cf:87:
3d:8e:3a:eb:23:10:51:40:ec:18:c3:1e:f7:ce:c4:
8e:ac:ec:16:37:d2:3a:53:16:02:92:74:17:f8:05:
bb:7a:0b:41:b0:45:e1:e4:a0:01:cb:2e:91:e7:4b:
d8:14:97:e1:ed:60:e6:8a:e7:13:54:bc:9c:2e:e0:
d5:49:55:7d:de:f4:1f:2b:1b:2b:4b:ff:cd:9f:f5:
9f:23:0e:79:e9:c1:b7:9b:3c:d8:77:f6:eb:3a:17:
61:5d:b6:ba:99:21:cb:2a:4c:c0:e6:de:9f:79:67:
3b:bb:76:76:02:2a:71:8b:9a:59:4a:2d:06:22:8e:
a6:bb:e3:0a:45:51:22:aa:6d:5b:df:eb:93:e2:73:
55:68:6a:b8:6c:75:9b:3c:a1:e6:c1:f6:62:35:83:
2c:c0:ec:2c:c0:d6:c7:7a:3c:88:cd:c4:33:4f:1f:
e4:b3:a5:a8:ab:3d:bd:48:1d:ba:d8:78:71:a1:76:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:36:2F:08:CE:59:EF:AF:A5:6D:74:4E:95:25:54:60:5B:87:76:4C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HjYvCM5Z76-lbXROlSVUYFuHdkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.81.115.0/24
45.88.136.0/24
45.88.138.0/24
45.94.171.0/24
45.132.180.0/22
45.144.212.0/24
45.151.3.0/24
77.83.37.0/24
146.19.125.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.177.93.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a09:340::/32
2a09:c440::/32
2a0c:5d40::/32
2a0c:a580::/29
2a10:dfc0::/29
2a10:fac0::/32
2a11:580::/29
2a11:1600::/32
2a11:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
9e:6f:12:c5:6a:54:60:c6:69:f7:ac:b2:55:4b:7e:af:5c:f5:
81:03:71:5a:bb:26:3d:4a:a6:81:33:a5:79:4b:5b:29:4f:b6:
56:93:88:44:fc:10:f2:63:bc:c8:f2:c5:50:5a:b3:22:6a:55:
ad:56:b0:ae:61:c3:35:01:34:2e:b6:6d:07:db:6d:93:06:52:
ff:49:2b:22:14:0f:65:fd:26:0e:1b:3a:c4:96:fd:00:f5:dc:
c0:e0:83:43:f4:23:da:21:05:c1:7c:0e:93:4d:a4:92:42:cc:
f9:f7:81:8c:6d:5a:b2:10:be:0c:89:1c:ff:fb:49:a7:01:db:
c6:a6:8d:84:6a:41:a9:61:38:55:16:84:fa:61:5b:01:31:5b:
71:01:a2:0e:25:9d:41:b4:98:7e:de:7c:a7:80:ad:2c:47:01:
f1:88:0c:fb:c0:db:a1:1b:7b:fd:25:0b:0e:3b:a6:26:67:24:
9e:07:b1:e3:56:95:16:46:6a:b6:69:56:6f:31:02:5a:f6:bb:
c0:6d:a8:0b:d3:ec:8e:14:d2:45:81:4d:a4:30:6b:be:42:a6:
7e:f8:b4:7d:4e:d2:42:6e:41:00:d9:59:1f:af:55:fe:c3:f6:
01:fe:06:eb:12:e0:1d:fd:9b:02:1b:78:a6:74:bc:9f:50:1c:
0b:7f:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 09:29:23 2024 by rpki-client on console-fra.rpki-client.org