Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/c-qPy1j7kvlsC0QWbnSsUjkRhDA.roa
File: c-qPy1j7kvlsC0QWbnSsUjkRhDA.roa (raw, json)
Hash identifier: mxuQlPem6tvxTF7d9TAkMucrQR2b51AmJP9OS0igKXg=
Subject key identifier: 73:EA:8F:CB:58:FB:92:F9:6C:0B:44:16:6E:74:AC:52:39:11:84:30
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E508B872ECE00C7B38321BABF8FF342FF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/c-qPy1j7kvlsC0QWbnSsUjkRhDA.roa
Signing time: Mon 18 Mar 2024 07:51:45 +0000
ROA not before: Mon 18 Mar 2024 07:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 2.56.109.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.144.212.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a07:9200::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a10:dfc0::/29 maxlen: 29
2a11:580::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 19 Mar 2024 11:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:8b:87:2e:ce:00:c7:b3:83:21:ba:bf:8f:f3:42:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 18 07:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73ea8fcb58fb92f96c0b44166e74ac5239118430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bb:99:8d:e1:6b:6d:9f:8f:14:7f:07:46:d8:
60:6b:17:6a:8b:28:ae:07:c0:44:82:c1:34:e6:82:
68:24:6a:60:42:a1:a3:c7:3e:50:c8:6d:78:d9:bf:
29:0f:ad:64:3d:c8:22:66:41:94:8d:4a:61:96:af:
94:72:5c:f6:db:56:7a:28:e6:2a:ac:a4:70:89:18:
40:cd:78:00:62:99:c0:29:39:62:b1:8e:e5:9f:28:
d4:bc:ff:c0:6b:e9:01:19:3a:7a:70:88:c2:c5:e0:
c9:43:34:6f:e3:b7:94:c3:f8:79:51:60:bc:0c:ec:
74:05:fa:6d:4a:3f:81:35:3b:94:d6:1f:af:bf:9c:
d6:af:88:67:74:3f:0a:1e:f4:46:45:e4:70:57:7a:
fb:1e:84:65:13:68:2e:2d:62:6c:a7:72:61:25:7a:
4e:8c:c6:b6:a4:f9:8b:05:f7:29:89:7c:a2:c0:3d:
e1:34:2b:c4:b1:7b:b8:28:b0:fa:ed:59:1b:f8:1b:
12:14:69:00:3c:dd:4e:ab:b7:ae:0e:1b:ae:49:44:
9b:8a:4d:04:0b:aa:db:b6:3d:66:eb:04:0f:9a:8f:
ae:4b:7f:74:91:bd:81:bc:5a:3b:b5:f8:1f:63:79:
55:4e:15:8c:db:18:32:b1:55:52:6d:db:8b:9e:17:
4c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:8F:CB:58:FB:92:F9:6C:0B:44:16:6E:74:AC:52:39:11:84:30
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/c-qPy1j7kvlsC0QWbnSsUjkRhDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.81.115.0/24
45.88.136.0/24
45.88.138.0/23
45.94.171.0/24
45.132.180.0/22
45.144.212.0/24
45.151.3.0/24
77.83.37.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
b6:59:ae:95:95:ed:c1:ea:77:07:38:dd:fd:25:92:5e:2c:6c:
0a:b8:75:56:51:b3:9d:d2:0b:c0:8c:e2:a9:ae:fd:8c:34:68:
11:6d:8f:d2:32:b0:76:49:90:4c:ca:ae:eb:5f:de:12:89:b7:
a5:1f:a4:66:7d:d6:0d:9e:0c:17:43:e4:f0:0e:c3:e8:6e:b2:
e5:30:b9:71:d3:cd:6c:24:e0:e3:56:c6:d4:90:95:ce:b8:d9:
38:e3:1e:ca:08:a6:4c:0f:16:a2:6b:ff:7c:c4:96:06:85:01:
20:4b:2e:4c:a4:c4:9e:59:10:54:4e:75:dd:04:e4:d9:f5:7a:
40:9e:fe:6e:2b:52:90:20:b7:93:a6:46:91:ba:62:46:4c:bc:
78:7a:e3:b2:96:05:46:84:34:78:f2:1f:19:0b:fc:f5:25:5a:
41:1e:d2:ee:80:c0:ad:2a:a3:2b:d8:a3:be:3f:1e:39:08:1b:
c3:af:a7:0f:e2:1f:93:06:fd:97:30:64:32:55:23:10:f1:cb:
5f:67:71:e6:af:b1:34:9a:e3:70:89:97:81:8a:ad:35:51:ea:
87:bc:3d:0c:11:ac:4e:09:b5:f9:0f:39:ea:11:1a:ac:48:75:
89:88:f2:85:d3:c0:28:d5:79:89:0a:f4:ea:78:c6:c6:86:9b:
8f:d0:fe:03
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgISAY5Qi4cuzgDHs4Mhur+P80L/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMzE4MDc1MTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2VhOGZjYjU4ZmI5MmY5NmMwYjQ0MTY2ZTc0YWM1MjM5MTE4NDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmruZjeFrbZ+PFH8HRthgaxdqiyiu
B8BEgsE05oJoJGpgQqGjxz5QyG142b8pD61kPcgiZkGUjUphlq+Uclz221Z6KOYq
rKRwiRhAzXgAYpnAKTlisY7lnyjUvP/Aa+kBGTp6cIjCxeDJQzRv47eUw/h5UWC8
DOx0BfptSj+BNTuU1h+vv5zWr4hndD8KHvRGReRwV3r7HoRlE2guLWJsp3JhJXpO
jMa2pPmLBfcpiXyiwD3hNCvEsXu4KLD67Vkb+BsSFGkAPN1Oq7euDhuuSUSbik0E
C6rbtj1m6wQPmo+uS390kb2BvFo7tfgfY3lVThWM2xgysVVSbduLnhdMRwIDAQAB
o4ICxTCCAsEwHQYDVR0OBBYEFHPqj8tY+5L5bAtEFm50rFI5EYQwMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvYy1xUHkxajdrdmxzQzBRV2JuU3NVamtSaERBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHaBggrBgEFBQcBBwEB/wSByjCBxzCBmQQCAAEwgZIDBAAC
OG0DBAAFtVQDBAAFtVcDBAAtCR0DBAAtUXMDBAAtWIgDBAEtWIoDBAAtXqsDBAIt
hLQDBAAtkNQDBAAtlwMDBABNUyUDBAJV0XgDBAG5K/gDBAC5K/sDBAG5yD4DBADB
HvADBAHBHvIDBADBOSkDBADBOSsDBALC8mAwDAMEAsOxXAMEAMOxXgMEAsPTvDAp
BAIAAjAjAwUAKgFxIAMFAyoHkgADBQMqDKWAAwUDKhDfwAMFAyoRBYAwDQYJKoZI
hvcNAQELBQADggEBALZZrpWV7cHqdwc43f0lkl4sbAq4dVZRs53SC8CM4qmu/Yw0
aBFtj9IysHZJkEzKrutf3hKJt6UfpGZ91g2eDBdD5PAOw+husuUwuXHTzWwk4ONW
xtSQlc642TjjHsoIpkwPFqJr/3zElgaFASBLLkykxJ5ZEFROdd0E5Nn1ekCe/m4r
UpAgt5OmRpG6YkZMvHh647KWBUaENHjyHxkL/PUlWkEe0u6AwK0qoyvYo74/HjkI
G8Ovpw/iH5MG/ZcwZDJVIxDxy19nceavsTSa43CJl4GKrTVR6oe8PQwRrE4JtfkP
OeoRGqxIdYmI8oXTwCjVeYkK9Op4xsaGm4/Q/gM=
-----END CERTIFICATE-----
Generated at Tue Mar 19 15:17:41 2024 by rpki-client on console-ams.rpki-client.org