Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ck4e3MKW-twU378p6cqCSffXQ6o.roa
File: ck4e3MKW-twU378p6cqCSffXQ6o.roa (raw, json)
Hash identifier: OFtVmg2cHfCu+A0vvM/uQ5f0I/NvnROjDO32/6XZ1wY=
Subject key identifier: 72:4E:1E:DC:C2:96:FA:DC:14:DF:BF:29:E9:CA:82:49:F7:D7:43:AA
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01877E7EA661CA5E68E5D310B32E8EBF4C3D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ck4e3MKW-twU378p6cqCSffXQ6o.roa
Signing time: Fri 14 Apr 2023 06:40:41 +0000
ROA not before: Fri 14 Apr 2023 06:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 22
45.88.139.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:7e:a6:61:ca:5e:68:e5:d3:10:b3:2e:8e:bf:4c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 14 06:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=724e1edcc296fadc14dfbf29e9ca8249f7d743aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:bc:c6:0c:cf:9f:93:be:7d:ff:a3:05:d6:
05:ad:9d:bc:1b:ae:5c:c3:ba:b5:27:e1:3a:25:8a:
4b:1b:12:00:41:03:d1:e2:00:03:dc:ee:43:9a:67:
63:f6:f9:31:62:42:9a:dd:b7:7f:c4:7e:3b:b8:a2:
29:bb:ce:2d:dc:1d:11:09:a7:fe:06:fb:65:a8:62:
ab:4a:f4:66:e7:61:38:5e:9c:e7:78:b0:08:bc:c8:
1f:1a:1c:c9:0b:39:f9:05:1b:d9:b1:1d:c9:b9:25:
df:5c:38:37:df:3e:f3:7b:20:92:68:4a:c2:eb:e4:
d7:57:81:f8:d7:18:e2:14:2c:1f:1b:67:e5:23:fb:
58:d4:d7:1f:98:3a:cb:0b:8c:c7:3f:58:ce:d6:c4:
43:0e:75:3d:b8:25:bf:88:07:b5:63:75:77:4e:25:
16:7a:cb:c5:a3:58:2d:12:fe:13:4f:16:be:9c:f7:
2f:30:f8:25:eb:dc:c0:21:01:c0:35:78:f5:0a:5c:
71:f4:e0:55:24:0e:b8:ac:6e:c7:ce:29:fa:a2:12:
1b:35:b1:24:a1:3e:ae:69:3b:31:21:84:74:27:97:
01:47:1a:19:13:6f:4f:16:9c:06:7a:ff:a6:f2:96:
25:de:43:ab:8f:ca:c5:2b:78:d6:fc:ad:90:b6:0a:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4E:1E:DC:C2:96:FA:DC:14:DF:BF:29:E9:CA:82:49:F7:D7:43:AA
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ck4e3MKW-twU378p6cqCSffXQ6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.139.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.38.0/23
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
a1:87:a5:8c:1d:41:b6:0e:8b:0f:7d:56:36:ad:e1:a9:c0:03:
e4:4d:07:1e:1b:e7:10:b2:db:53:54:28:1f:8a:bd:d0:93:60:
81:48:af:4b:ac:e1:d9:cc:43:21:b9:5c:d8:1b:63:d6:6a:e2:
b4:63:ba:82:a5:5e:bc:66:35:3b:0b:54:2b:cf:bf:4c:0e:9a:
91:67:34:d8:cd:f6:61:57:db:8a:98:0e:ef:c4:dc:12:fe:48:
b4:6a:49:30:66:b3:10:0b:3e:fc:27:82:6c:f0:09:4a:ad:58:
59:2c:f8:f9:0f:9d:d3:1b:70:a5:69:ff:87:24:bc:c8:d6:72:
9a:dd:e9:28:5a:b8:5f:fd:7a:f2:30:30:b9:54:72:fc:1c:3d:
0a:41:26:13:b1:a4:78:11:77:b2:c4:5f:2a:3a:1b:ba:1e:10:
d7:3e:a2:4d:66:9a:ee:06:af:cd:ce:af:de:27:30:36:e6:f5:
fd:e3:3c:93:d1:6f:27:3d:31:95:a2:27:dc:14:6a:91:e9:80:
88:f9:c3:83:66:93:bd:90:0b:4b:93:de:de:83:74:fb:c4:bb:
33:b7:ec:88:76:f5:24:96:80:af:29:a7:2e:a8:a0:72:06:f3:
7c:f4:af:c7:8c:eb:02:72:78:5a:0b:34:06:5d:8d:98:1e:30:
c1:cc:f6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org