Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ezcTDn-rpOaa7Wi91sk46bTHFYk.roa
File: ezcTDn-rpOaa7Wi91sk46bTHFYk.roa (raw, json)
Hash identifier: wDrabyIGn4WTXbPAAnf0Z1JFkzygx8HxnVdplt2EBao=
Subject key identifier: 7B:37:13:0E:7F:AB:A4:E6:9A:ED:68:BD:D6:C9:38:E9:B4:C7:15:89
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B94F489AF75901BE05248D1953992A819
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ezcTDn-rpOaa7Wi91sk46bTHFYk.roa
Signing time: Fri 03 Nov 2023 11:32:15 +0000
ROA not before: Fri 03 Nov 2023 11:32:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 06 Nov 2023 20:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:f4:89:af:75:90:1b:e0:52:48:d1:95:39:92:a8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 3 11:32:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b37130e7faba4e69aed68bdd6c938e9b4c71589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:81:06:08:68:a4:5f:dd:5f:76:b6:c9:c0:
4c:3c:1c:02:cd:94:85:d8:0d:4c:6e:89:71:0a:89:
7d:30:a6:37:2f:51:7f:a0:fd:87:1b:be:d6:b5:87:
03:83:77:33:2a:fe:d6:3d:b5:16:86:3c:34:bb:22:
79:39:1e:59:84:97:ba:ff:10:da:00:35:e0:ad:6e:
0a:b9:de:ab:13:86:9c:41:49:ce:27:c0:45:3f:17:
52:e4:8e:16:45:f8:71:7c:10:28:12:32:31:5b:79:
d7:df:61:b8:47:aa:d0:9d:8a:21:bd:a8:69:96:7c:
9a:0c:c3:85:af:18:21:ac:05:85:e3:77:1e:4f:a6:
92:f5:4d:f9:2c:59:ac:43:57:48:ee:40:fd:0b:04:
87:1d:0b:e4:86:c4:19:82:08:14:b1:ef:47:16:48:
27:e8:0b:00:2b:a8:b9:dd:37:96:7a:98:42:20:d4:
99:92:da:84:63:46:18:41:4e:a2:4f:7f:6d:94:08:
23:8f:6f:47:17:12:d8:b1:d4:fd:a9:90:de:a5:13:
b7:40:f7:b3:d5:45:26:ca:83:11:95:cd:38:ef:14:
7a:58:d2:aa:41:18:94:4a:09:14:36:8f:3a:21:96:
1a:1c:ed:25:c8:d1:18:89:68:2d:3e:a4:0f:11:ea:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:37:13:0E:7F:AB:A4:E6:9A:ED:68:BD:D6:C9:38:E9:B4:C7:15:89
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ezcTDn-rpOaa7Wi91sk46bTHFYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
c0:41:59:c9:b4:56:8e:40:eb:d1:31:3d:81:55:a0:f9:39:2c:
ca:b3:f0:48:bc:b9:c1:6a:c3:22:d4:85:1f:07:19:66:01:c6:
72:df:1a:05:b4:c9:30:be:14:e1:bc:6a:e7:31:e9:06:c3:0a:
7b:a1:cc:5f:13:c1:68:a2:0e:96:de:05:38:87:4f:bb:4d:9c:
db:a5:51:e3:2d:8f:25:1f:f0:3e:d3:68:6a:6c:c6:1d:65:80:
13:01:78:79:05:8f:f6:cc:18:e6:44:51:7d:7d:5e:f1:df:f7:
81:7e:74:f5:a2:49:87:d9:f2:63:ff:8c:04:a1:ff:78:a3:54:
b2:09:f4:27:0a:f5:cc:10:c4:c1:5f:6a:8d:eb:35:d0:e5:8e:
df:87:44:79:a0:1d:28:33:a4:f2:80:06:a7:bb:e1:52:3d:fa:
25:14:e5:03:50:8d:99:b4:44:11:fa:db:ee:f6:ec:fd:76:08:
e4:34:4f:50:36:17:22:9b:d9:73:17:4d:ac:cd:ac:c7:f0:50:
2a:77:11:dc:95:1b:c1:37:52:ac:bf:bc:94:11:8c:8b:f9:3d:
71:46:7d:9f:a2:13:e2:e3:3d:da:30:11:75:96:90:bf:39:37:
bb:a3:73:7d:ac:28:28:07:81:72:fc:23:f3:74:99:6f:79:c7:
fe:78:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org