Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/QMsKVXnfepm9od2MGQS5ngnYgnU.roa
File: QMsKVXnfepm9od2MGQS5ngnYgnU.roa (raw, json)
Hash identifier: eLuwFh8wcNk9HWch+soG/rd6FuFmbTnJA/3X7VLZR/g=
Subject key identifier: 40:CB:0A:55:79:DF:7A:99:BD:A1:DD:8C:19:04:B9:9E:09:D8:82:75
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C1AD9F818D31F4419B9F189C1E927C053
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/QMsKVXnfepm9od2MGQS5ngnYgnU.roa
Signing time: Wed 29 Nov 2023 11:32:21 +0000
ROA not before: Wed 29 Nov 2023 11:32:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:d9:f8:18:d3:1f:44:19:b9:f1:89:c1:e9:27:c0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 29 11:32:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40cb0a5579df7a99bda1dd8c1904b99e09d88275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:bd:0e:39:d2:6a:14:23:04:72:c4:e9:2f:
e0:b2:69:20:95:8c:c1:e9:e8:2f:a7:e1:7a:0d:4f:
eb:2a:79:c0:a3:6d:14:92:43:9b:e3:f4:dd:ab:8c:
9f:aa:d7:2e:85:44:cd:0b:98:33:f0:b8:7a:cd:86:
c6:31:b5:72:5c:43:4a:b4:14:d2:40:fd:53:25:e5:
2d:71:cf:33:86:ca:0c:33:1b:5f:13:ea:6f:79:c4:
c9:4e:62:9c:19:cd:a0:c5:7f:51:c6:7f:92:85:60:
e5:9f:20:24:b2:95:07:0f:76:2a:92:3e:4e:51:6b:
8b:d7:5f:31:27:30:86:8c:e5:6c:0b:9b:b0:52:4a:
a9:da:08:e5:62:1a:8e:14:2f:e0:21:54:f9:14:d6:
2b:50:75:7a:1d:f8:af:0d:b5:f4:32:ac:27:e8:2a:
9b:d7:44:ea:02:b7:ef:6a:ef:30:61:23:ce:5a:f6:
65:36:ae:95:89:5b:17:07:ba:36:06:36:a9:5e:0e:
2a:07:76:1e:31:19:c1:c1:2b:4c:f0:b7:d5:99:2a:
03:27:61:68:f8:48:8f:1e:aa:c0:74:2e:70:7f:25:
aa:86:b1:18:2f:2a:3c:0f:17:64:52:ca:45:ef:40:
6b:16:e3:f9:77:7f:83:f6:19:94:71:6c:6b:2d:c2:
31:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CB:0A:55:79:DF:7A:99:BD:A1:DD:8C:19:04:B9:9E:09:D8:82:75
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/QMsKVXnfepm9od2MGQS5ngnYgnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
98:85:51:a6:73:d5:c9:4d:3e:d9:27:19:46:64:05:39:fd:22:
1e:d1:8d:2c:fb:b8:2a:12:03:36:99:7c:35:bd:07:9a:73:1f:
a9:fe:d4:c9:5e:8b:c2:a5:c5:5d:cf:67:0d:a1:1a:f0:5c:7f:
69:7c:90:e2:fb:4a:c4:41:89:0b:34:21:8a:30:ee:59:90:40:
55:52:b4:23:8f:47:0b:e9:ea:33:cf:7f:88:67:ed:94:62:50:
6f:ba:3d:e6:52:08:8b:49:4e:17:6f:21:56:36:fa:76:c7:21:
f3:2a:1b:ea:33:cd:bc:c2:d7:5c:ae:e7:b5:c9:a7:33:fe:4b:
6a:f5:08:ee:c0:db:d3:24:bc:09:3e:94:82:7d:27:e0:74:db:
20:3e:a4:c1:00:e5:f7:5a:d6:2d:01:3d:7a:39:0f:65:13:51:
61:f6:a8:d4:16:6e:06:01:21:18:6d:73:af:52:2a:0c:7b:e1:
a1:c0:ab:aa:fc:4d:64:e3:bb:93:b1:17:a2:7b:6d:14:27:11:
a8:f8:34:c9:08:76:05:1a:f9:53:c7:a1:68:f4:7d:99:5b:b6:
55:85:03:b3:f9:7f:97:b3:fe:7d:40:20:b8:68:69:a0:cb:1c:
e2:0c:b1:2e:a4:56:6a:cd:78:1f:93:70:a9:ae:7d:e4:f0:97:
14:85:8b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 12:36:42 2023 by rpki-client on console-ams.rpki-client.org