Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eZBn5qLA9WnYQKDMa-XHMSrOhS0.roa
File: eZBn5qLA9WnYQKDMa-XHMSrOhS0.roa (raw, json)
Hash identifier: Iz8zXuIKWJevyMF6ow6AcszQpwGlUDV7j9ZfbCpQlEY=
Subject key identifier: 79:90:67:E6:A2:C0:F5:69:D8:40:A0:CC:6B:E5:C7:31:2A:CE:85:2D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01877045665DBC7022D3164924C9EEE2E280
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eZBn5qLA9WnYQKDMa-XHMSrOhS0.roa
Signing time: Tue 11 Apr 2023 12:23:29 +0000
ROA not before: Tue 11 Apr 2023 12:23:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 22
45.88.139.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:45:66:5d:bc:70:22:d3:16:49:24:c9:ee:e2:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 11 12:23:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=799067e6a2c0f569d840a0cc6be5c7312ace852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:de:52:ca:96:da:ee:2c:9b:02:7e:2a:2c:
55:7c:2c:d5:d6:5f:93:97:cb:4e:9e:db:f0:56:0e:
86:3a:c2:0d:35:c6:42:d9:ec:12:ee:12:d1:a5:a3:
3d:42:7c:29:4a:e0:ff:be:aa:66:ec:a4:5f:78:da:
a1:82:f4:1d:01:11:f4:d9:62:8f:24:0b:44:a0:56:
96:b9:7b:5d:72:20:92:fe:9b:37:c8:a1:cd:fe:c3:
e2:69:23:0b:3f:f6:25:9f:07:56:b6:ea:23:e5:0c:
e1:83:c1:c7:75:a0:b1:3a:7f:62:be:1c:33:08:88:
ed:25:b2:2f:40:6a:b2:d3:4e:e4:cf:1e:d7:d9:68:
2a:19:08:54:69:66:c4:7e:9e:69:9f:60:9d:17:19:
c5:2a:6d:f2:01:7c:11:ce:5e:d4:70:57:e7:96:31:
24:37:f0:47:4e:6e:7a:db:49:b8:79:d5:e1:13:b4:
5c:e8:0c:0d:46:06:c1:59:48:13:f7:ce:cd:1f:28:
4e:09:68:32:eb:14:43:e9:25:8a:08:02:bb:91:af:
7b:82:b5:32:ef:59:82:c6:43:bf:7f:42:ef:b2:40:
bf:36:91:eb:4e:d2:af:68:b7:b6:54:ff:96:ac:eb:
9b:7b:95:7a:c9:96:01:5d:83:dd:53:a0:fc:fc:c9:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:90:67:E6:A2:C0:F5:69:D8:40:A0:CC:6B:E5:C7:31:2A:CE:85:2D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eZBn5qLA9WnYQKDMa-XHMSrOhS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.13.189.0/24
45.81.112.0/22
45.88.136.0/24
45.88.139.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.38.0/23
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
06:ef:2e:b8:b4:e3:d2:01:b3:e7:54:da:8a:3f:8e:0c:e3:bc:
38:65:95:53:cc:84:49:64:ad:51:4b:9e:df:c6:e0:85:02:5c:
aa:d9:75:17:14:6b:02:cb:60:07:9b:b5:3f:c8:81:68:ed:30:
bd:d2:96:1a:a5:6d:77:a3:34:12:44:d5:2d:1d:06:d3:dc:64:
0d:45:b1:72:0f:8a:76:1f:ed:31:60:87:40:3f:4c:b7:7c:78:
a2:d2:77:9f:ae:ce:da:c9:f0:ff:15:f7:c2:3d:a7:83:c7:f3:
ea:38:fd:ed:b0:c8:87:c5:ea:4f:29:e7:15:d1:3d:ae:50:93:
63:5e:65:1c:dc:8a:bf:d5:18:2b:ab:7e:12:10:c2:1a:33:9c:
d5:d0:3a:19:38:aa:0d:74:79:01:b9:ce:80:f9:92:c4:0d:91:
bd:74:18:b4:55:bb:d6:8c:4d:e9:08:6a:0f:21:b0:85:39:64:
1e:4b:69:d7:e6:fd:e2:0f:72:02:40:7c:fb:43:c6:f2:bc:94:
50:0e:28:a4:a0:a5:28:8b:96:bb:3f:51:da:14:c5:ab:35:3d:
d4:47:42:82:36:a6:6a:d6:b6:2a:d0:43:29:f8:a3:2b:15:12:
ab:bb:01:d3:bb:b0:2c:f0:83:21:67:24:27:92:85:eb:0d:de:
7d:fa:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org