Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/OkIRnsMOgGKCwF8kGD0bA2jMCLk.roa
File: OkIRnsMOgGKCwF8kGD0bA2jMCLk.roa (raw, json)
Hash identifier: LT2F+sZGagLFynHFPKIPcNERaRv/dy+kUU3tr4vPo7s=
Subject key identifier: 3A:42:11:9E:C3:0E:80:62:82:C0:5F:24:18:3D:1B:03:68:CC:08:B9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018EA03E0E0A394FC8443BAFBEB79F926970
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/OkIRnsMOgGKCwF8kGD0bA2jMCLk.roa
Signing time: Tue 02 Apr 2024 19:16:45 +0000
ROA not before: Tue 02 Apr 2024 19:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 2.56.109.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.144.212.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.96.0/24 maxlen: 24
194.242.97.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a07:9200::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a10:dfc0::/29 maxlen: 29
2a11:580::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 04 Apr 2024 18:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:3e:0e:0a:39:4f:c8:44:3b:af:be:b7:9f:92:69:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 2 19:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a42119ec30e806282c05f24183d1b0368cc08b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:14:f8:8b:97:7e:58:97:13:e2:52:21:8b:
90:a4:85:85:12:67:88:62:ab:10:00:98:be:74:6f:
67:d3:e6:cf:aa:b9:49:56:20:e7:b5:a7:bf:d1:c6:
89:ec:e2:57:7f:97:b7:3a:ba:d2:50:6d:93:53:87:
15:84:85:42:68:a6:15:fc:3c:46:c7:e5:11:7e:ee:
fe:9d:35:78:67:4e:74:85:8c:87:85:85:41:02:4b:
67:a9:74:bd:2e:ec:b6:b1:60:e4:36:99:30:5b:5e:
81:a4:7b:8d:9f:c6:e7:29:02:bd:3c:9a:5a:f1:46:
bd:bd:af:f1:f8:48:49:97:b5:b3:68:22:e5:e8:88:
93:00:e1:5c:16:0a:6c:6c:5b:11:d4:3e:02:19:6a:
d8:d2:77:24:d0:1d:0d:3f:67:53:6f:cb:55:71:07:
7e:eb:eb:a9:d8:f1:6c:7e:d0:2b:eb:c7:1d:77:90:
42:a3:f2:f6:6d:d2:45:9d:d7:db:28:96:eb:bf:07:
65:ab:32:3c:e3:a6:42:ef:55:bb:a9:5a:d8:27:e5:
79:c7:48:49:ee:0b:7e:03:a4:bf:ae:4c:43:89:c7:
cb:3f:55:b0:58:d2:5d:36:e9:8f:c7:af:68:e5:56:
68:bf:99:94:10:bf:04:38:99:b4:54:e7:fc:44:5c:
3e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:42:11:9E:C3:0E:80:62:82:C0:5F:24:18:3D:1B:03:68:CC:08:B9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/OkIRnsMOgGKCwF8kGD0bA2jMCLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.81.115.0/24
45.88.136.0/24
45.88.138.0/24
45.94.171.0/24
45.132.180.0/22
45.144.212.0/24
45.151.3.0/24
77.83.37.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.93.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
85:70:30:ea:d8:bd:91:5e:92:29:7c:3e:53:82:b5:bd:2c:02:
3a:c0:9f:c8:c4:d8:d8:80:c8:d7:b6:c8:0a:93:8c:bf:9d:52:
df:4d:e3:29:aa:d8:57:d7:99:c6:b3:e9:03:59:79:dd:a1:4c:
1c:6c:29:86:26:34:f7:8d:67:77:15:43:10:34:da:64:9a:2d:
86:96:b6:8e:d6:27:97:e0:5e:18:42:8a:d5:57:ed:0a:76:b5:
68:91:d9:e5:e2:cd:8f:5e:7e:f8:46:f5:0e:72:3e:d4:07:43:
88:8a:33:9a:93:77:ea:37:8a:3a:33:a1:3c:ea:7e:72:6b:09:
f8:9d:e3:78:1a:45:74:bf:41:2c:0d:d3:8f:a8:82:21:2d:3f:
df:8d:a2:1c:0a:c1:57:8c:b5:95:18:bf:c8:9e:ce:dc:91:c2:
38:17:18:e1:78:19:07:ea:a2:9c:f7:ff:b6:9e:3e:2c:f5:f7:
9b:a5:8f:7c:6d:22:6c:d8:b5:e4:9a:d5:96:03:af:f8:53:e2:
85:99:21:1e:f8:b7:dd:c9:60:23:b7:49:98:05:dd:d9:2f:4d:
07:31:b7:11:aa:c7:c7:14:af:69:7e:6a:e6:be:1e:f7:df:67:
2a:fc:d5:59:2f:9f:39:63:03:4d:f7:fc:78:a0:4a:e8:13:b2:
ec:38:29:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 22:58:14 2024 by rpki-client on console-fra.rpki-client.org