Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ekjsiZDImnrFBcnCjBC_9R9Vg0I.roa
File: ekjsiZDImnrFBcnCjBC_9R9Vg0I.roa (raw, json)
Hash identifier: NWjU91TQ4acwsNZaad3M965W3Bt/brG9F9wKziofpjM=
Subject key identifier: 7A:48:EC:89:90:C8:9A:7A:C5:05:C9:C2:8C:10:BF:F5:1F:55:83:42
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0185C0B5D5B34BA6FE041A652C1B9FD12766
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ekjsiZDImnrFBcnCjBC_9R9Vg0I.roa
Signing time: Tue 17 Jan 2023 17:10:20 +0000
ROA not before: Tue 17 Jan 2023 17:10:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 22
45.88.139.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c0:b5:d5:b3:4b:a6:fe:04:1a:65:2c:1b:9f:d1:27:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 17 17:10:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a48ec8990c89a7ac505c9c28c10bff51f558342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8c:ed:1b:21:f2:14:5a:c5:f7:50:88:2b:0b:
d4:0f:ec:3b:3d:ab:aa:eb:60:87:e1:53:21:34:21:
78:89:e6:6a:f3:61:e0:f9:be:2d:ea:29:85:0c:76:
20:fb:b7:48:bd:ed:9b:27:21:b2:b3:36:b2:b5:f0:
5f:88:02:ac:82:c8:7a:45:40:b1:de:0e:b9:c7:a4:
c1:a0:58:f8:5e:95:fe:03:e0:ae:75:56:32:b1:52:
b1:f7:8a:48:7c:87:d5:0a:dc:a6:17:71:d0:bb:f8:
8b:4f:e9:a3:8b:50:18:cd:1c:5f:a1:fc:03:4b:6a:
6d:02:d4:f5:1f:94:f2:61:11:79:17:6b:f3:c0:e4:
51:73:7a:6e:7c:3f:da:8b:94:a1:8f:e7:61:47:c6:
6d:bf:72:6e:2f:d2:bb:e9:82:dc:70:a0:84:a4:fa:
87:16:2d:30:84:e6:93:73:73:60:3e:b4:ec:69:74:
99:f1:64:ed:05:0d:52:06:5a:38:b4:b4:59:fb:60:
7a:b4:41:ce:c9:2f:92:ad:ca:66:60:6a:00:fe:8f:
f4:cd:ba:c7:4d:d6:48:a2:7a:e6:62:36:6e:3d:03:
60:cd:64:fa:71:63:dc:58:04:d3:e5:67:72:f9:e8:
83:d1:b4:77:9e:ea:1d:60:8c:b5:12:cd:bb:5a:0e:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:48:EC:89:90:C8:9A:7A:C5:05:C9:C2:8C:10:BF:F5:1F:55:83:42
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ekjsiZDImnrFBcnCjBC_9R9Vg0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.139.0/24
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.38.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
48:88:f6:42:db:71:e2:9c:70:fe:e1:92:90:7d:04:f7:ec:35:
0a:88:23:38:be:d7:76:34:62:83:01:ef:d8:0c:62:51:02:16:
72:1a:37:4a:06:43:2f:42:00:e4:9b:dc:a1:95:1a:5c:58:c7:
21:69:99:9e:cd:cd:21:43:ca:c4:f5:90:33:37:33:c3:78:43:
ac:29:d2:d8:b0:24:b7:ae:7a:2b:5a:08:ab:7e:ea:1a:c7:2e:
7e:cd:11:21:bb:b2:6d:53:20:8a:3f:70:d8:9b:8a:f6:70:4e:
66:d4:e0:39:65:28:a1:ef:3e:c3:ef:26:5e:c1:f2:5d:a5:ab:
31:90:92:f9:0b:2f:d8:a9:3d:6a:cd:48:ed:74:f8:22:51:62:
18:4a:c4:1f:04:09:bf:19:b9:03:29:2b:a2:2e:32:67:b5:ad:
e3:f8:b5:e3:a9:c4:ae:bf:51:cc:a7:e8:28:9a:8a:32:7f:f9:
e6:52:3d:5e:9e:57:a9:f8:26:a5:b3:3d:75:92:dd:ee:8c:1c:
47:5b:9b:51:fb:01:d0:bb:a6:d7:a3:26:54:ef:19:38:d4:43:
92:ea:ea:1b:1c:73:ac:85:7d:f3:dc:04:ee:e2:d9:1d:21:32:
50:c7:cd:0e:f2:d6:c2:79:95:22:14:bd:b9:12:cc:3f:59:98:
e7:8d:33:ae
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAYXAtdWzS6b+BBplLBuf0SdmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwMTE3MTcxMDIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTQ4ZWM4OTkwYzg5YTdhYzUwNWM5YzI4YzEwYmZmNTFmNTU4MzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYztGyHyFFrF91CIKwvUD+w7Pauq
62CH4VMhNCF4ieZq82Hg+b4t6imFDHYg+7dIve2bJyGyszaytfBfiAKsgsh6RUCx
3g65x6TBoFj4XpX+A+CudVYysVKx94pIfIfVCtymF3HQu/iLT+mji1AYzRxfofwD
S2ptAtT1H5TyYRF5F2vzwORRc3pufD/ai5Shj+dhR8Ztv3JuL9K76YLccKCEpPqH
Fi0whOaTc3NgPrTsaXSZ8WTtBQ1SBlo4tLRZ+2B6tEHOyS+SrcpmYGoA/o/0zbrH
TdZIonrmYjZuPQNgzWT6cWPcWATT5Wdy+eiD0bR3nuodYIy1Es27Wg66iQIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFHpI7ImQyJp6xQXJwowQv/UfVYNCMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvZWtqc2laREltbnJGQmNuQ2pCQ185UjlWZzBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBgAQCAAEwegMEAgI4
bAMEAAW1VwMEAC0JHQMEAi1RcAMEAC1YiAMEAC1YizAMAwQALYS1AwQDLYSwAwQA
LZDUAwQATVMmAwQCVdF4AwQBuSv4AwQAuSv7AwQBucg+AwQCwR7wAwQAwTkrAwQC
wvJgAwQAwz4YAwQCw7FcAwQCw9O8MCkEAgACMCMDBQAqAXEgAwUDKgeSAAMFAyoM
pYADBQMqEN/AAwUDKhEFgDANBgkqhkiG9w0BAQsFAAOCAQEASIj2Qttx4pxw/uGS
kH0E9+w1CogjOL7XdjRigwHv2AxiUQIWcho3SgZDL0IA5JvcoZUaXFjHIWmZns3N
IUPKxPWQMzczw3hDrCnS2LAkt656K1oIq37qGscufs0RIbuybVMgij9w2JuK9nBO
ZtTgOWUooe8+w+8mXsHyXaWrMZCS+Qsv2Kk9as1I7XT4IlFiGErEHwQJvxm5Aykr
oi4yZ7Wt4/i146nErr9RzKfoKJqKMn/55lI9Xp5XqfgmpbM9dZLd7owcR1ubUfsB
0Lum16MmVO8ZONRDkurqGxxzrIV989wE7uLZHSEyUMfNDvLWwnmVIhS9uRLMP1mY
540zrg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org