Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UyfbmV1t9gAsLBhrDbpgsDbH8Zk.roa
File: UyfbmV1t9gAsLBhrDbpgsDbH8Zk.roa (raw, json)
Hash identifier: MHJQZvD5pTllbxnB9i2mwDpRF0qhsa/tgOcuJZDT3WA=
Subject key identifier: 53:27:DB:99:5D:6D:F6:00:2C:2C:18:6B:0D:BA:60:B0:36:C7:F1:99
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018DDC1AEC8C0B188A4F97DEF9C206968908
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UyfbmV1t9gAsLBhrDbpgsDbH8Zk.roa
Signing time: Sat 24 Feb 2024 17:12:48 +0000
ROA not before: Sat 24 Feb 2024 17:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 2.56.109.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.144.212.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a07:9200::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a10:dfc0::/29 maxlen: 29
2a11:580::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 09 Mar 2024 09:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:dc:1a:ec:8c:0b:18:8a:4f:97:de:f9:c2:06:96:89:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 24 17:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5327db995d6df6002c2c186b0dba60b036c7f199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:08:e4:8c:de:4e:b7:d3:36:40:66:0e:a5:
9c:3d:f0:63:36:a5:2b:72:15:d2:65:32:a8:70:7f:
d2:09:5c:3e:3d:1b:4c:41:bf:84:ab:15:ef:c9:74:
3f:a0:2f:58:ff:a9:1d:93:c4:cf:7e:01:de:75:d2:
cf:c6:d9:30:bd:15:68:d7:36:bb:53:e2:55:71:fc:
c9:11:bf:74:8c:a8:a3:bc:70:9d:96:1d:b1:ff:0c:
71:51:d1:13:ad:fa:00:08:a1:85:0a:03:54:23:e8:
3e:ae:d8:71:c4:b5:03:10:a2:cc:d1:04:cb:8f:0f:
72:e4:8f:c5:b0:82:6a:76:d1:d4:ef:d0:4f:57:88:
ac:b1:b6:b9:67:13:ab:fc:98:5e:cd:63:4c:fc:c1:
08:29:e4:ec:c3:3e:49:78:92:7a:f1:f1:cb:e3:63:
47:4b:b6:98:e6:c2:8b:49:79:7d:29:2c:d9:0c:68:
47:4a:35:61:e2:a5:17:11:68:e7:aa:ee:ee:d0:56:
7f:69:24:b3:c4:9f:6f:38:69:73:2e:40:14:db:4e:
38:e9:26:a4:f9:8d:dd:78:eb:9c:a2:6e:4c:f9:06:
20:a2:33:cc:7c:ab:88:5c:fb:85:2c:b4:68:94:4f:
43:d4:61:33:5b:01:63:58:3c:d9:a4:24:78:5e:cd:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:27:DB:99:5D:6D:F6:00:2C:2C:18:6B:0D:BA:60:B0:36:C7:F1:99
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UyfbmV1t9gAsLBhrDbpgsDbH8Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.87.0/24
45.9.29.0/24
45.81.113.0/24
45.81.115.0/24
45.88.136.0/24
45.88.138.0/23
45.94.171.0/24
45.132.180.0/22
45.144.212.0/24
77.83.37.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
88:8f:9e:ec:ed:d6:b9:ff:08:ab:d2:18:26:f4:e5:79:be:54:
88:35:b5:d4:a9:8d:3c:92:31:e8:bb:b4:43:81:09:fa:d5:83:
21:e9:a9:5d:0e:6b:25:33:17:ec:e0:3f:da:e4:c6:eb:57:3b:
de:5c:cb:b0:47:e6:ff:d0:6c:de:6e:5d:42:42:40:9f:ec:30:
86:66:97:b5:b1:38:0c:ff:01:04:9f:ec:06:7e:52:7b:82:23:
42:c0:38:2d:64:ea:dc:37:d1:65:d2:d5:2a:55:6a:64:fb:fb:
f6:9e:8b:b1:2a:4b:41:63:f9:1d:0f:06:a7:81:c0:d4:a6:2c:
f0:2f:7e:4b:d9:44:c3:0d:38:eb:aa:70:23:7b:4e:0d:a0:f9:
da:74:bd:f7:49:c6:c3:9f:e3:04:ce:ac:39:7e:ce:05:0b:d2:
64:8e:3d:9a:3d:4b:59:6c:21:57:46:27:10:f5:84:f6:8d:a6:
cc:c4:21:8b:77:ff:dd:58:a0:fc:3e:5e:60:fc:3a:32:03:87:
c4:65:77:8f:f8:7e:94:00:9e:22:84:be:c9:d3:9f:ef:a4:64:
f5:e5:45:df:0a:b7:f6:00:b2:0f:14:28:3a:d5:32:a7:eb:1f:
d7:21:d6:0a:20:22:5d:da:2a:d1:91:0c:43:ac:f7:b1:a4:f5:
71:92:6f:92
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgISAY3cGuyMCxiKT5fe+cIGlokIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMjI0MTcxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzI3ZGI5OTVkNmRmNjAwMmMyYzE4NmIwZGJhNjBiMDM2YzdmMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPEI5IzeTrfTNkBmDqWcPfBjNqUr
chXSZTKocH/SCVw+PRtMQb+EqxXvyXQ/oC9Y/6kdk8TPfgHeddLPxtkwvRVo1za7
U+JVcfzJEb90jKijvHCdlh2x/wxxUdETrfoACKGFCgNUI+g+rthxxLUDEKLM0QTL
jw9y5I/FsIJqdtHU79BPV4issba5ZxOr/JhezWNM/MEIKeTswz5JeJJ68fHL42NH
S7aY5sKLSXl9KSzZDGhHSjVh4qUXEWjnqu7u0FZ/aSSzxJ9vOGlzLkAU20446Sak
+Y3deOucom5M+QYgojPMfKuIXPuFLLRolE9D1GEzWwFjWDzZpCR4Xs3r+wIDAQAB
o4ICvzCCArswHQYDVR0OBBYEFFMn25ldbfYALCwYaw26YLA2x/GZMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvVXlmYm1WMXQ5Z0FzTEJockRicGdzRGJIOFprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHUBggrBgEFBQcBBwEB/wSBxDCBwTCBkwQCAAEwgYwDBAAC
OG0DBAAFtVcDBAAtCR0DBAAtUXEDBAAtUXMDBAAtWIgDBAEtWIoDBAAtXqsDBAIt
hLQDBAAtkNQDBABNUyUDBAJV0XgDBAG5K/gDBAC5K/sDBAG5yD4DBADBHvADBAHB
HvIDBADBOSkDBADBOSsDBALC8mAwDAMEAsOxXAMEAMOxXgMEAsPTvDApBAIAAjAj
AwUAKgFxIAMFAyoHkgADBQMqDKWAAwUDKhDfwAMFAyoRBYAwDQYJKoZIhvcNAQEL
BQADggEBAIiPnuzt1rn/CKvSGCb05Xm+VIg1tdSpjTySMei7tEOBCfrVgyHpqV0O
ayUzF+zgP9rkxutXO95cy7BH5v/QbN5uXUJCQJ/sMIZml7WxOAz/AQSf7AZ+UnuC
I0LAOC1k6tw30WXS1SpVamT7+/aei7EqS0Fj+R0PBqeBwNSmLPAvfkvZRMMNOOuq
cCN7Tg2g+dp0vfdJxsOf4wTOrDl+zgUL0mSOPZo9S1lsIVdGJxD1hPaNpszEIYt3
/91YoPw+XmD8OjIDh8Rld4/4fpQAniKEvsnTn++kZPXlRd8Kt/YAsg8UKDrVMqfr
H9ch1gogIl3aKtGRDEOs97Gk9XGSb5I=
-----END CERTIFICATE-----
Generated at Sat Mar 9 11:30:55 2024 by rpki-client on console-fra.rpki-client.org