Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/N3biNFk84pvKGWdqx2xepg-By9A.roa
File: N3biNFk84pvKGWdqx2xepg-By9A.roa (raw, json)
Hash identifier: ljbwqipY47prVTTWnhHzxZKU5nqUOiii9WRPpR5OQH4=
Subject key identifier: 37:76:E2:34:59:3C:E2:9B:CA:19:67:6A:C7:6C:5E:A6:0F:81:CB:D0
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A180F896E612E74A56D929D67BAF1A070
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/N3biNFk84pvKGWdqx2xepg-By9A.roa
Signing time: Mon 21 Aug 2023 12:26:25 +0000
ROA not before: Mon 21 Aug 2023 12:26:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:0f:89:6e:61:2e:74:a5:6d:92:9d:67:ba:f1:a0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 21 12:26:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3776e234593ce29bca19676ac76c5ea60f81cbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:69:ef:16:76:50:2b:d9:7b:26:d2:27:76:
9c:9a:05:7b:1b:c5:b0:55:a1:bb:b7:8a:0d:42:a4:
e3:88:76:95:6b:ca:59:90:ee:02:af:87:d9:26:11:
e9:95:5c:ea:27:40:48:ba:d0:41:17:37:af:b3:ca:
6c:8a:2f:ce:0a:d4:64:aa:22:f4:ca:8b:c4:29:a1:
a7:39:70:d2:f3:3f:2b:00:df:05:98:ec:38:bd:bd:
7c:6c:dc:b0:09:f1:25:32:5a:f2:25:fa:dc:cf:4a:
94:10:6a:a3:9b:ea:40:ea:8e:5d:9b:61:6f:e3:16:
dd:87:17:f5:14:e6:a8:ad:f1:d9:ea:8c:4c:c2:ca:
90:c4:59:ee:26:54:a1:d9:20:f7:70:a3:fa:f1:ee:
b6:af:40:65:fe:db:ce:67:a7:b6:46:d3:f6:5d:16:
f0:a3:9c:2d:2e:71:79:32:f2:c1:84:a5:98:a1:06:
07:f2:34:b2:f8:df:10:e4:d2:27:a9:a4:ec:ec:35:
d5:05:24:44:73:ba:30:33:4b:d8:0d:3a:85:c3:ac:
52:e9:78:71:e6:ed:75:2f:56:c0:b3:53:d7:e5:9d:
e1:7c:f1:7c:3c:38:ea:22:99:6c:1c:e3:39:1a:e8:
95:6e:27:b7:96:8f:db:07:39:c4:bd:91:5e:84:62:
e8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:76:E2:34:59:3C:E2:9B:CA:19:67:6A:C7:6C:5E:A6:0F:81:CB:D0
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/N3biNFk84pvKGWdqx2xepg-By9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/23
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
c0:38:b1:49:b4:33:e3:0d:ce:ed:85:53:b3:19:4f:41:a7:95:
3f:b3:e1:2a:2e:11:f5:75:0e:0c:cc:4a:34:db:fd:52:05:0b:
66:09:6f:9c:8e:ff:5f:3f:38:86:28:61:a6:62:b9:72:92:93:
a2:cc:97:b8:e4:d5:3c:ae:6d:5d:29:c0:11:af:ea:28:b2:bb:
35:f2:d9:66:54:87:22:19:7d:9a:12:f1:79:f9:45:c9:08:c1:
e1:1e:40:d6:22:3a:3c:c7:59:d8:58:5c:da:cc:5c:86:87:09:
54:39:5a:d2:a8:cc:ae:b4:e2:b1:51:cf:ee:3e:9e:19:7f:57:
eb:82:67:a8:3d:c0:66:43:f4:94:21:79:56:4f:e3:7b:d1:f7:
cc:63:fa:6c:fd:ca:5d:e7:5a:8c:7f:92:27:d9:24:31:c1:28:
0c:79:29:af:34:0b:cc:16:5c:ce:83:01:bf:e2:91:82:a0:5a:
72:e8:ea:95:03:3e:bf:12:7b:1b:62:4e:69:d7:89:0e:8d:e1:
fe:fa:32:1a:69:55:f4:e8:51:75:a4:14:e4:88:71:c8:08:f9:
c9:4a:65:bc:4e:79:a9:93:26:88:0e:2b:50:fb:1c:b7:28:7b:
01:2f:34:08:9c:5c:f3:10:85:8a:56:8a:a3:dd:19:34:3e:23:
10:91:13:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 09:05:15 2023 by rpki-client on console-ams.rpki-client.org