Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/e6cozg-455wCYQNzJztVwmKSy1U.roa
File: e6cozg-455wCYQNzJztVwmKSy1U.roa (raw, json)
Hash identifier: MYiO7n6vKoOS28pO2KSDnAXN2XQKg/OqhnugfPS+GqY=
Subject key identifier: 7B:A7:28:CE:0F:B8:E7:9C:02:61:03:73:27:3B:55:C2:62:92:CB:55
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B42C0FFA9D3F07273DB85AC7CF0DE4A96
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/e6cozg-455wCYQNzJztVwmKSy1U.roa
Signing time: Wed 18 Oct 2023 12:27:06 +0000
ROA not before: Wed 18 Oct 2023 12:27:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.94.171.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
2.56.108.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.144.213.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
45.81.114.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:c0:ff:a9:d3:f0:72:73:db:85:ac:7c:f0:de:4a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 18 12:27:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ba728ce0fb8e79c02610373273b55c26292cb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:76:aa:36:6a:12:de:d0:36:a8:b0:6e:b3:b2:
58:a4:ea:4f:10:e3:1e:20:0e:9c:ac:ad:b1:09:65:
e3:fc:79:25:03:74:bb:63:cb:99:ce:61:12:c2:6b:
b8:4a:7f:ff:bb:8a:ab:f0:da:d8:4e:55:e8:0e:43:
29:a5:e2:c2:40:df:8b:61:59:b1:81:bd:8e:64:7d:
b3:2f:9d:60:e9:1e:8b:18:9c:31:60:42:ba:11:7d:
72:4f:b6:14:69:03:42:65:9d:43:2a:51:b9:eb:6e:
02:f5:f1:e9:a0:bf:d9:fe:ee:3e:e1:fd:93:83:7e:
a0:c7:47:33:4a:bc:e5:3a:c3:92:97:64:8c:06:61:
7e:0f:90:be:13:f0:cd:0b:73:f3:74:84:05:81:3d:
16:2b:40:5f:b4:c8:bf:d6:38:ef:d0:09:1f:ab:31:
27:e0:2e:03:c8:8d:a0:ff:bc:12:7a:fb:94:1f:49:
10:a0:4d:a1:76:24:97:9f:50:85:33:3b:a3:0e:8f:
c1:89:e3:07:26:95:c4:2a:c9:3d:60:0e:aa:4a:e2:
4a:1e:4f:4b:03:79:c6:48:8a:49:ae:e9:6e:d1:7c:
e0:1e:d2:ab:25:aa:bd:7b:f3:dd:84:be:e5:49:e8:
01:6f:dc:58:41:2b:e9:3d:9d:4b:2c:7f:c8:71:b8:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A7:28:CE:0F:B8:E7:9C:02:61:03:73:27:3B:55:C2:62:92:CB:55
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/e6cozg-455wCYQNzJztVwmKSy1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0-2.56.110.255
45.81.113.0-45.81.115.255
45.88.139.0/24
45.94.171.0/24
45.138.183.0/24
45.144.213.0/24
77.83.39.0/24
85.209.120.0/23
195.62.24.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e5:9e:7f:b7:cc:a8:a5:99:59:63:c5:f7:b0:02:6b:98:98:
e6:1b:18:39:ef:a9:11:51:50:25:a4:6a:ae:94:eb:d4:64:bd:
2e:f9:e0:77:98:44:43:71:22:55:10:58:5c:a4:e5:3c:1f:d6:
e6:fe:83:58:a2:63:a9:de:4b:ec:43:31:08:3d:88:68:78:bf:
d9:b8:59:c7:87:7e:54:c8:c0:95:8b:3f:82:05:89:e0:d4:c7:
12:e2:a4:ac:a9:69:17:2b:ce:10:58:9e:58:c1:e5:ee:e3:6d:
26:1b:37:76:93:99:fd:b5:f2:fd:86:40:c5:b4:17:7b:bb:bf:
47:22:85:46:6e:40:e6:f3:ae:09:ca:f2:46:a4:8c:a3:6d:55:
99:c5:66:8d:4c:32:ea:9b:af:a0:8e:9f:72:9a:0f:86:e5:ce:
42:38:b9:42:86:f5:78:79:b0:8b:ca:e2:9a:e1:e2:fd:22:a1:
23:ea:d2:eb:95:d5:94:ba:1b:6c:1d:ff:45:68:d0:0b:0a:55:
6f:0d:3e:6e:a8:7f:e8:2b:45:6d:ee:bf:be:1e:20:88:11:8f:
66:95:30:c1:ca:04:f1:ee:44:f3:d5:a0:ab:63:13:59:7a:39:
8c:7d:75:a3:62:ba:a1:5a:77:77:4c:1c:ad:b7:b8:60:fb:17:
0d:33:f8:1c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYtCwP+p0/Byc9uFrHzw3kqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMxMDE4MTIyNzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmE3MjhjZTBmYjhlNzljMDI2MTAzNzMyNzNiNTVjMjYyOTJjYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHaqNmoS3tA2qLBus7JYpOpPEOMe
IA6crK2xCWXj/HklA3S7Y8uZzmESwmu4Sn//u4qr8NrYTlXoDkMppeLCQN+LYVmx
gb2OZH2zL51g6R6LGJwxYEK6EX1yT7YUaQNCZZ1DKlG5624C9fHpoL/Z/u4+4f2T
g36gx0czSrzlOsOSl2SMBmF+D5C+E/DNC3PzdIQFgT0WK0BftMi/1jjv0AkfqzEn
4C4DyI2g/7wSevuUH0kQoE2hdiSXn1CFMzujDo/BieMHJpXEKsk9YA6qSuJKHk9L
A3nGSIpJrulu0XzgHtKrJaq9e/PdhL7lSegBb9xYQSvpPZ1LLH/IcbjGrQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFHunKM4PuOecAmEDcyc7VcJikstVMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvZTZjb3pnLTQ1NXdDWVFOekp6dFZ3bUtTeTFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMMAwDBAICOGwD
BAACOG4wDAMEAC1RcQMEAi1RcAMEAC1YiwMEAC1eqwMEAC2KtwMEAC2Q1QMEAE1T
JwMEAVXReAMEAMM+GAMEAMOxXzANBgkqhkiG9w0BAQsFAAOCAQEAHeWef7fMqKWZ
WWPF97ACa5iY5hsYOe+pEVFQJaRqrpTr1GS9Lvngd5hEQ3EiVRBYXKTlPB/W5v6D
WKJjqd5L7EMxCD2IaHi/2bhZx4d+VMjAlYs/ggWJ4NTHEuKkrKlpFyvOEFieWMHl
7uNtJhs3dpOZ/bXy/YZAxbQXe7u/RyKFRm5A5vOuCcryRqSMo21VmcVmjUwy6puv
oI6fcpoPhuXOQji5Qob1eHmwi8rimuHi/SKhI+rS65XVlLobbB3/RWjQCwpVbw0+
bqh/6CtFbe6/vh4giBGPZpUwwcoE8e5E89Wgq2MTWXo5jH11o2K6oVp3d0wcrbe4
YPsXDTP4HA==
-----END CERTIFICATE-----
Generated at Wed Oct 18 16:10:28 2023 by rpki-client on console-ams.rpki-client.org