Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ONCR9blH41cXMIntxcYl960Q9Es.roa
File: ONCR9blH41cXMIntxcYl960Q9Es.roa (raw, json)
Hash identifier: KECF6jByj7AtxiLQE2cdNS18UGfTTnFkPr+ztKc5VxY=
Subject key identifier: 38:D0:91:F5:B9:47:E3:57:17:30:89:ED:C5:C6:25:F7:AD:10:F4:4B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018ED6C56F0AD8694F3305668A092ACF2A4F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ONCR9blH41cXMIntxcYl960Q9Es.roa
Signing time: Sat 13 Apr 2024 09:24:06 +0000
ROA not before: Sat 13 Apr 2024 09:24:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 2.56.109.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.28.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.144.212.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.96.0/24 maxlen: 24
194.242.97.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a07:9200::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a10:dfc0::/29 maxlen: 29
2a11:580::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 15 Apr 2024 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d6:c5:6f:0a:d8:69:4f:33:05:66:8a:09:2a:cf:2a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 13 09:24:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38d091f5b947e357173089edc5c625f7ad10f44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ae:75:77:c8:00:fb:93:af:fa:12:00:ae:9e:
bb:ee:af:f4:1a:2a:f7:92:91:5b:4f:ef:62:5b:fc:
5d:3b:be:51:d2:97:ff:4c:63:29:78:9a:6b:ff:a7:
c1:e9:d7:26:e0:19:d7:3d:ed:1a:2a:46:29:70:8a:
4e:8d:ce:d4:98:91:bd:c2:6b:53:38:dd:13:92:12:
62:e5:e4:e0:ab:f1:1a:b8:50:87:06:c4:1f:16:bd:
25:6a:7b:c2:9d:f5:1e:c2:9b:3e:87:11:ec:66:32:
f8:80:8a:af:ed:30:d0:fb:37:01:f4:85:fd:bb:50:
7b:f1:58:04:a6:8c:26:dd:e5:48:e2:cc:f2:4e:3d:
6b:9d:b2:ce:d5:1b:f3:12:b3:fb:9a:0c:09:e3:04:
d8:c1:34:1e:d0:80:09:d7:38:0d:bf:4f:75:5b:df:
ce:91:35:c6:3c:df:42:c7:a8:09:77:91:e4:b3:8c:
5a:f1:cf:63:7c:f0:54:a0:86:2f:58:53:a1:c5:be:
08:93:98:4c:d0:9f:61:cf:bf:53:da:9c:f3:35:99:
f4:7c:4a:eb:e8:74:15:48:b8:d7:d9:2d:14:52:1a:
9b:b3:e8:24:60:03:08:8a:4b:ef:e7:94:ea:18:05:
05:80:2c:2e:ca:4c:2c:7b:12:cf:a6:c5:d3:9f:58:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:91:F5:B9:47:E3:57:17:30:89:ED:C5:C6:25:F7:AD:10:F4:4B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ONCR9blH41cXMIntxcYl960Q9Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.84.0/24
5.181.87.0/24
45.9.28.0/23
45.81.115.0/24
45.88.136.0/24
45.88.138.0/24
45.94.171.0/24
45.132.180.0/22
45.144.212.0/24
45.151.3.0/24
77.83.37.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.177.93.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
a2:03:6c:87:e5:8b:f8:c8:a5:74:3e:8e:fe:5e:21:a2:55:26:
d6:83:7d:e4:d8:5d:c3:15:75:df:96:bb:ea:34:37:7d:ab:a6:
d1:86:7c:e7:38:fa:09:57:4a:39:3d:4b:fe:a0:c4:b3:b1:2f:
0c:65:14:93:6e:93:2a:63:b6:87:96:74:3a:ae:1f:70:68:40:
63:05:b1:59:a1:91:9e:5a:3a:bf:3d:68:1d:e8:ab:91:db:91:
4f:bf:82:4a:aa:4d:ee:94:f9:06:ce:59:31:e9:70:3d:e4:fb:
a9:ec:74:ea:e5:b9:4a:5b:9d:d5:3b:38:af:c0:6f:a5:31:2a:
06:a3:ed:72:98:3b:d3:1b:44:c9:a8:e0:d1:f7:83:c0:b7:04:
2c:5c:1b:f1:58:41:b0:22:f8:10:a5:4b:4a:2c:8f:3c:f0:78:
f2:67:30:af:01:ab:e3:3b:7b:a2:c0:be:ff:f2:a7:ba:56:2d:
e8:e7:2d:f6:6c:0a:01:2d:71:4d:68:3b:df:de:ea:c1:8a:09:
da:d8:b0:27:23:2a:e8:53:de:5e:15:6a:f8:69:fb:4c:df:d1:
a0:cc:5f:b7:01:27:a5:c5:7c:b3:62:11:05:a1:12:36:d5:dd:
02:7e:00:7c:ff:01:f8:1e:f3:65:25:1f:0e:99:8f:20:ee:3f:
55:7e:8d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org