Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gxp7m3CgYApP2dW8jBtM1pg6Ums.roa
File: gxp7m3CgYApP2dW8jBtM1pg6Ums.roa (raw, json)
Hash identifier: 9EX3dYw7kD8I6QfSAl8QVYnDI6bGInJUv/55h7aeRKQ=
Subject key identifier: 83:1A:7B:9B:70:A0:60:0A:4F:D9:D5:BC:8C:1B:4C:D6:98:3A:52:6B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E76506972180846B47A42E1057681B1F7
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gxp7m3CgYApP2dW8jBtM1pg6Ums.roa
Signing time: Mon 25 Mar 2024 15:52:45 +0000
ROA not before: Mon 25 Mar 2024 15:52:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 2.56.109.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.144.212.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.96.0/24 maxlen: 24
194.242.97.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a07:9200::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a10:dfc0::/29 maxlen: 29
2a11:580::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Apr 2024 10:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:76:50:69:72:18:08:46:b4:7a:42:e1:05:76:81:b1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 25 15:52:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=831a7b9b70a0600a4fd9d5bc8c1b4cd6983a526b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:18:00:c1:8f:f7:a3:f0:e0:8a:12:18:bd:56:
0d:b8:a0:eb:f2:98:7f:ca:c0:19:e3:fa:d2:43:2c:
8f:62:2c:09:ab:36:f8:62:39:5e:f3:d7:93:27:cc:
20:71:d5:de:b0:5c:b9:34:d7:3c:10:84:2d:02:34:
7a:bd:3d:c5:34:97:25:25:03:05:86:a8:e0:b6:88:
7b:00:50:20:a7:b4:e0:4c:05:ca:d7:aa:81:52:82:
99:53:b5:88:14:15:64:ad:a3:cf:3c:75:ea:1b:16:
55:93:3d:5c:b7:bd:31:53:e3:db:1a:bf:7e:bc:28:
7a:b1:04:79:aa:44:73:6d:2b:65:7a:fb:24:88:54:
e1:d2:d0:93:e6:d7:2c:d1:83:2b:e8:bd:74:34:9c:
06:76:2a:43:08:fb:e6:2f:e8:40:50:5e:1a:e2:8b:
42:0a:a8:d3:9e:e7:3f:c1:a5:37:b2:f1:d5:cd:3c:
36:45:5d:76:c4:9b:4f:7d:a2:a3:5e:45:e0:77:fb:
26:2a:1f:d9:56:b2:25:1c:96:f0:60:1e:65:78:84:
3f:15:fa:53:a5:03:8c:98:71:d2:33:27:4b:9b:92:
f0:35:bd:26:15:14:41:46:a3:43:9b:e2:a4:92:e7:
e3:c5:a6:ec:5f:39:a5:05:41:8c:21:5c:c4:c1:ac:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1A:7B:9B:70:A0:60:0A:4F:D9:D5:BC:8C:1B:4C:D6:98:3A:52:6B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gxp7m3CgYApP2dW8jBtM1pg6Ums.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.81.115.0/24
45.88.136.0/24
45.88.138.0/24
45.94.171.0/24
45.132.180.0/22
45.144.212.0/24
45.151.3.0/24
77.83.37.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.93.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
55:73:ee:f4:3f:fe:e0:8d:75:cd:ad:5e:45:40:96:af:17:0f:
56:ad:a6:42:d1:1a:3c:ef:c0:21:d8:22:97:a8:08:f0:52:e8:
35:d2:bf:fb:eb:8f:c5:53:e5:28:a8:2e:09:16:9c:b9:5b:28:
f8:62:34:e1:70:0e:a9:2b:4b:42:94:f9:aa:6e:d2:31:a2:25:
93:22:8f:7a:ab:c8:2f:27:06:80:2b:e7:94:27:f6:2a:73:09:
c9:57:87:02:1e:0a:86:b4:4b:0a:ed:dc:7b:48:1c:f3:48:d4:
46:02:e1:24:b5:00:6b:b5:25:f3:c1:a8:90:ec:51:f5:7d:1e:
1a:0a:06:83:3c:c4:89:ed:31:a7:72:4f:f9:5c:66:66:6b:7d:
8c:aa:20:6b:29:56:6c:b9:79:8e:0d:0a:6d:84:01:b8:5c:69:
b2:0a:30:c0:ae:36:f2:83:e0:47:8f:07:5a:31:5c:cc:7c:d6:
9e:5f:b4:0f:d2:89:42:0d:80:7f:11:af:c1:46:6f:1b:f3:5f:
2c:6c:13:95:e4:b6:ab:b3:a4:06:cc:06:f2:c5:ba:bf:96:74:
f0:cc:20:0e:da:93:91:68:14:68:8e:47:9d:ea:18:75:42:24:
0b:38:57:17:a5:dd:18:d7:57:01:fc:f6:dd:30:c6:fe:b4:08:
c6:5c:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 11:21:45 2024 by rpki-client on console-fra.rpki-client.org