Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NdB1ecFI5ywb_GY62S3rpxfamJA.roa
File: NdB1ecFI5ywb_GY62S3rpxfamJA.roa (raw, json)
Hash identifier: LOKApCxe9DIxV1ipf0wJKJXg5ysmmJ0PYj74HzKFUpU=
Subject key identifier: 35:D0:75:79:C1:48:E7:2C:1B:FC:66:3A:D9:2D:EB:A7:17:DA:98:90
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018AFF1BACDB82F7AD472AFB54D6EEC518AF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NdB1ecFI5ywb_GY62S3rpxfamJA.roa
Signing time: Thu 05 Oct 2023 09:11:58 +0000
ROA not before: Thu 05 Oct 2023 09:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.57.41.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:1b:ac:db:82:f7:ad:47:2a:fb:54:d6:ee:c5:18:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 5 09:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35d07579c148e72c1bfc663ad92deba717da9890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:eb:23:db:9d:88:f0:1f:71:9b:00:ae:cb:
aa:72:ee:82:ca:ce:c5:7c:65:0c:76:b3:65:7d:f4:
50:b5:5b:cc:54:b1:6c:21:56:a9:ec:e8:66:34:62:
3a:e6:06:53:9f:f5:f4:71:2a:54:02:c1:88:25:c1:
4c:6a:25:5a:1c:6a:a1:c3:0a:15:85:f6:89:6b:45:
a9:15:e0:bc:71:0a:d8:de:f5:e3:9e:60:2a:91:fa:
d1:c9:6b:b6:16:04:26:bf:dd:ac:41:21:72:66:7d:
eb:c1:52:77:e8:0d:6c:d9:58:65:24:2d:4d:7b:72:
d8:41:07:3e:1a:40:13:cb:a2:d2:24:9f:a7:da:02:
b3:bf:20:ee:40:a8:69:a6:4e:47:48:44:ae:ff:0f:
73:55:82:be:4c:40:0d:38:24:fd:44:97:b2:97:e9:
97:6a:15:21:d1:96:a5:15:36:1c:2c:d4:90:4f:68:
e1:a7:a8:21:a0:b1:13:1e:2e:a2:15:0c:85:c1:66:
21:43:b9:4b:ce:39:eb:ad:61:51:66:df:e8:cf:62:
8d:94:aa:a5:31:08:6d:a6:ee:ce:d4:fb:ae:33:f5:
82:1c:fc:33:58:a6:5b:e3:e9:31:15:b8:1c:b0:6e:
dd:39:45:45:00:04:8a:f8:e1:86:6a:a1:cb:f5:a4:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D0:75:79:C1:48:E7:2C:1B:FC:66:3A:D9:2D:EB:A7:17:DA:98:90
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NdB1ecFI5ywb_GY62S3rpxfamJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0-2.56.110.255
45.81.113.0/24
45.81.115.0/24
45.94.171.0/24
45.138.183.0/24
45.144.213.0/24
77.83.39.0/24
85.209.120.0/23
193.57.41.0/24
195.62.24.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
25:bc:45:4c:25:e2:63:33:24:8e:ec:19:c1:c7:03:86:7c:2d:
30:fe:43:20:72:34:55:7c:b4:61:e3:07:da:27:80:cc:c8:65:
1a:39:7f:36:6e:97:c7:48:ac:97:27:4d:1e:f1:08:63:dd:48:
07:a8:1d:76:ed:e4:3e:7d:d2:e0:c5:db:86:3d:4a:25:9a:fb:
aa:83:4a:b7:aa:b9:18:20:ce:90:62:65:0f:f6:6a:40:6d:93:
01:ad:23:d5:65:8d:ca:cd:2e:41:92:d2:b5:65:de:db:99:12:
09:a1:cb:e8:95:3e:dc:42:0d:f2:bf:c0:c9:77:d6:10:39:8c:
66:dd:e9:a7:ea:10:8b:90:0d:9b:d3:7e:ba:0c:34:42:64:68:
7f:97:1f:db:e4:94:35:ab:cb:21:20:d8:c0:fa:31:e0:6a:12:
0b:8d:0d:70:5b:a7:c6:39:13:92:fb:f4:de:af:fd:9e:d2:ce:
9b:17:5d:cb:c0:bd:e4:45:2d:b6:0d:e6:5e:77:23:41:52:2e:
5d:87:72:84:64:11:d5:e7:a2:5d:31:7c:6f:11:54:cd:8f:45:
bd:41:6a:ec:8e:94:13:7d:02:3a:b6:12:74:cd:12:b5:cd:c9:
3e:70:63:3f:0b:12:fd:d5:e1:c4:e3:bd:bc:52:d0:87:7f:98:
c3:ab:f2:0f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAYr/G6zbgvetRyr7VNbuxRivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMxMDA1MDkxMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWQwNzU3OWMxNDhlNzJjMWJmYzY2M2FkOTJkZWJhNzE3ZGE5ODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnafrI9udiPAfcZsArsuqcu6Cys7F
fGUMdrNlffRQtVvMVLFsIVap7OhmNGI65gZTn/X0cSpUAsGIJcFMaiVaHGqhwwoV
hfaJa0WpFeC8cQrY3vXjnmAqkfrRyWu2FgQmv92sQSFyZn3rwVJ36A1s2VhlJC1N
e3LYQQc+GkATy6LSJJ+n2gKzvyDuQKhppk5HSESu/w9zVYK+TEANOCT9RJeyl+mX
ahUh0ZalFTYcLNSQT2jhp6ghoLETHi6iFQyFwWYhQ7lLzjnrrWFRZt/oz2KNlKql
MQhtpu7O1PuuM/WCHPwzWKZb4+kxFbgcsG7dOUVFAASK+OGGaqHL9aRDlQIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFDXQdXnBSOcsG/xmOtkt66cX2piQMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvTmRCMWVjRkk1eXdiX0dZNjJTM3JweGZhbUpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKMAwDBAACOG0D
BAACOG4DBAAtUXEDBAAtUXMDBAAtXqsDBAAtircDBAAtkNUDBABNUycDBAFV0XgD
BADBOSkDBADDPhgDBADDsV8wDQYJKoZIhvcNAQELBQADggEBACW8RUwl4mMzJI7s
GcHHA4Z8LTD+QyByNFV8tGHjB9ongMzIZRo5fzZul8dIrJcnTR7xCGPdSAeoHXbt
5D590uDF24Y9SiWa+6qDSrequRggzpBiZQ/2akBtkwGtI9VljcrNLkGS0rVl3tuZ
Egmhy+iVPtxCDfK/wMl31hA5jGbd6afqEIuQDZvTfroMNEJkaH+XH9vklDWryyEg
2MD6MeBqEguNDXBbp8Y5E5L79N6v/Z7SzpsXXcvAveRFLbYN5l53I0FSLl2HcoRk
EdXnol0xfG8RVM2PRb1BauyOlBN9Ajq2EnTNErXNyT5wYz8LEv3V4cTjvbxS0Id/
mMOr8g8=
-----END CERTIFICATE-----
Generated at Fri Oct 6 12:51:59 2023 by rpki-client on console-ams.rpki-client.org