Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/dVhJhu_FYLot4b16BR_tPA9Mubs.roa
File: dVhJhu_FYLot4b16BR_tPA9Mubs.roa (raw, json)
Hash identifier: TvVmfyG9MjdO/g0QIA6K8EfgaG5ruv4mF+jBXGuANO4=
Subject key identifier: 75:58:49:86:EF:C5:60:BA:2D:E1:BD:7A:05:1F:ED:3C:0F:4C:B9:BB
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CB230E68B8915547C74975B29433FD6EF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/dVhJhu_FYLot4b16BR_tPA9Mubs.roa
Signing time: Thu 28 Dec 2023 20:49:58 +0000
ROA not before: Thu 28 Dec 2023 20:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b2:30:e6:8b:89:15:54:7c:74:97:5b:29:43:3f:d6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 28 20:49:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75584986efc560ba2de1bd7a051fed3c0f4cb9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cd:fe:8c:c1:7b:14:5a:80:23:11:de:2d:e0:
ba:38:34:b3:f1:df:6d:b0:2c:cc:22:d5:ec:f3:82:
08:f4:ea:91:46:86:de:ca:cf:1e:9d:7c:64:9d:76:
4e:8d:ac:28:45:93:b1:48:e2:e0:fb:37:14:0e:35:
a1:c6:1d:d5:e9:1b:89:e9:2b:73:68:8a:bf:a7:82:
50:6b:c1:30:96:1d:06:0d:35:05:9a:a9:74:3c:b5:
56:86:66:0e:af:ee:fe:29:7a:0f:9d:fa:e8:72:3c:
f0:34:2a:ca:68:09:df:ca:a9:e3:2d:c5:eb:1f:27:
a2:8c:b8:61:08:51:3d:56:56:00:47:14:e5:c8:5a:
de:40:51:2a:4f:ca:0e:d4:aa:ff:24:ff:0e:18:0c:
bd:6d:41:e1:e9:01:c7:f6:d8:98:0f:75:78:c4:a0:
9c:10:67:71:5d:e2:db:37:52:46:97:8f:95:e1:a4:
cf:e7:2b:8c:2d:49:d4:9d:23:54:2f:4f:26:af:97:
10:a7:99:0b:f9:69:d6:f1:59:be:4d:5b:c7:98:65:
fd:56:2b:72:b8:ee:0a:5d:99:f0:14:7e:50:0f:9a:
94:52:22:59:95:a0:88:46:d5:df:2a:5e:eb:2a:28:
fd:97:4c:22:3f:ba:0d:e9:e2:86:b0:57:d1:18:dc:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:58:49:86:EF:C5:60:BA:2D:E1:BD:7A:05:1F:ED:3C:0F:4C:B9:BB
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/dVhJhu_FYLot4b16BR_tPA9Mubs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.87.0/24
45.9.29.0/24
45.81.112.0/24
45.88.136.0/24
45.88.138.0/23
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
25:0d:dd:33:34:cc:ef:22:4a:af:6d:52:8e:ac:e8:57:19:c2:
27:3b:cf:b3:7b:f9:2f:ac:3a:64:55:65:2f:6a:02:33:15:53:
9c:04:7a:f4:44:0e:2c:8d:2c:94:1e:7e:a5:e0:f5:40:51:6d:
eb:e7:ab:92:d7:37:ff:c4:6e:90:e6:50:5d:84:d6:10:46:76:
b9:a5:4e:8e:c4:cf:b5:99:43:d3:ba:a2:a6:ab:f3:7d:9e:b6:
eb:b4:aa:13:49:f4:79:f1:39:d6:ca:98:3a:e6:1a:df:a0:5c:
bd:f1:14:f8:c2:4b:1b:cb:3b:ce:64:f9:c3:81:5c:2d:fd:a8:
d1:83:76:d8:be:b7:34:1c:26:a0:1d:9a:49:6e:c2:69:38:c7:
9b:0a:bf:99:fb:46:e8:23:1c:65:53:39:c3:b6:79:54:6b:91:
3b:30:eb:49:88:bd:11:a5:1e:fd:4f:32:5d:10:0b:d3:47:97:
e8:78:b6:e4:c6:08:0a:57:32:60:49:24:81:7d:4f:68:e3:3c:
1f:9e:53:5a:9f:55:2f:84:47:f9:bd:40:6c:b5:d3:da:e2:5d:
99:58:6b:47:f5:5b:37:ba:8e:be:02:34:04:1d:21:f0:0c:56:
ea:e5:0f:da:8b:4c:79:51:ac:4d:82:df:fa:5a:10:26:32:60:
65:49:9a:59
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAYyyMOaLiRVUfHSXWylDP9bvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMxMjI4MjA0OTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTU4NDk4NmVmYzU2MGJhMmRlMWJkN2EwNTFmZWQzYzBmNGNiOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic3+jMF7FFqAIxHeLeC6ODSz8d9t
sCzMItXs84II9OqRRobeys8enXxknXZOjawoRZOxSOLg+zcUDjWhxh3V6RuJ6Stz
aIq/p4JQa8Ewlh0GDTUFmql0PLVWhmYOr+7+KXoPnfrocjzwNCrKaAnfyqnjLcXr
HyeijLhhCFE9VlYARxTlyFreQFEqT8oO1Kr/JP8OGAy9bUHh6QHH9tiYD3V4xKCc
EGdxXeLbN1JGl4+V4aTP5yuMLUnUnSNUL08mr5cQp5kL+WnW8Vm+TVvHmGX9Vity
uO4KXZnwFH5QD5qUUiJZlaCIRtXfKl7rKij9l0wiP7oN6eKGsFfRGNz0fQIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFHVYSYbvxWC6LeG9egUf7TwPTLm7MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvZFZoSmh1X0ZZTG90NGIxNkJSX3RQQTlNdWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHcBggrBgEFBQcBBwEB/wSBzDCByTCBmwQCAAEwgZQDBAAC
OG0DBAAFtVcDBAAtCR0DBAAtUXADBAAtWIgDBAEtWIoDBAItXqgwDAMEAC2EtQME
Ay2EsAMEAC2Q1AMEAE1TJQMEAE1TJwMEAlXReAMEAbkr+AMEALkr+wMEAbnIPgME
AMEe8AMEAcEe8gMEAME5KQMEAME5KwMEAsLyYDAMAwQCw7FcAwQAw7FeAwQCw9O8
MCkEAgACMCMDBQAqAXEgAwUDKgeSAAMFAyoMpYADBQMqEN/AAwUDKhEFgDANBgkq
hkiG9w0BAQsFAAOCAQEAJQ3dMzTM7yJKr21SjqzoVxnCJzvPs3v5L6w6ZFVlL2oC
MxVTnAR69EQOLI0slB5+peD1QFFt6+erktc3/8RukOZQXYTWEEZ2uaVOjsTPtZlD
07qipqvzfZ6267SqE0n0efE51sqYOuYa36BcvfEU+MJLG8s7zmT5w4FcLf2o0YN2
2L63NBwmoB2aSW7CaTjHmwq/mftG6CMcZVM5w7Z5VGuROzDrSYi9EaUe/U8yXRAL
00eX6Hi25MYIClcyYEkkgX1PaOM8H55TWp9VL4RH+b1AbLXT2uJdmVhrR/VbN7qO
vgI0BB0h8AxW6uUP2otMeVGsTYLf+loQJjJgZUmaWQ==
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:45 2024 by rpki-client on console-fra.rpki-client.org