Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hNZPJx0hO0cYh6pLGBat-cBcZBk.roa
File: hNZPJx0hO0cYh6pLGBat-cBcZBk.roa (raw, json)
Hash identifier: c+6ntID2zMgsWfmw5k/3SN0u5Uu4/+YNc4SJkfGAQZE=
Subject key identifier: 84:D6:4F:27:1D:21:3B:47:18:87:AA:4B:18:16:AD:F9:C0:5C:64:19
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B68E0ABBA94D9BA4687D47FBAC2E9B9EE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hNZPJx0hO0cYh6pLGBat-cBcZBk.roa
Signing time: Wed 25 Oct 2023 22:07:16 +0000
ROA not before: Wed 25 Oct 2023 22:07:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:e0:ab:ba:94:d9:ba:46:87:d4:7f:ba:c2:e9:b9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 25 22:07:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84d64f271d213b471887aa4b1816adf9c05c6419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:d3:28:45:53:66:51:3a:88:59:f6:b4:a5:
7e:48:cc:77:04:13:84:05:5e:ae:2e:a3:27:f3:e2:
48:ae:08:fe:ab:a1:14:c9:7e:25:c6:2f:8a:67:32:
66:c1:18:a1:bc:42:f6:0a:5a:67:c8:a9:66:2d:b9:
e9:29:96:d5:90:d6:88:8c:0c:0b:0a:37:06:fc:ce:
a3:96:e8:d5:e3:d9:00:fc:9f:e6:0e:72:74:1f:6b:
d4:b9:c9:4c:94:f2:24:bf:b3:05:42:91:8d:cd:72:
96:94:08:f4:3c:aa:49:ae:3d:c8:73:c4:7f:8c:c5:
9c:73:65:02:e4:76:54:da:4e:95:6a:e2:2f:8b:17:
3c:35:a2:37:14:65:9e:9d:c2:6a:36:2a:80:0c:db:
e8:34:d4:2e:aa:46:eb:56:79:fd:28:5e:92:11:61:
d5:8a:69:65:f1:1e:34:8c:b4:aa:2f:d1:7c:1c:2c:
14:20:c3:dd:59:70:45:df:d5:5c:73:59:0f:51:06:
29:7a:57:6c:2a:ac:3b:83:95:a5:8b:70:0b:9a:d1:
e7:9c:0e:a1:ec:8b:98:d6:57:00:1a:fd:e9:3d:76:
3b:76:4c:1d:f2:0d:b3:0b:a9:6f:d9:b6:a4:01:60:
20:f3:33:e8:b6:42:79:16:d2:db:34:55:11:c4:d3:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D6:4F:27:1D:21:3B:47:18:87:AA:4B:18:16:AD:F9:C0:5C:64:19
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hNZPJx0hO0cYh6pLGBat-cBcZBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.81.112.0/24
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
41:b5:41:1c:6d:57:3a:9d:2f:a4:e8:0e:8f:91:91:b0:9d:dc:
d5:3e:2b:fa:32:80:9d:a2:ff:b9:f6:6e:9c:9a:d7:44:60:2c:
d6:07:df:37:26:c1:5d:7a:e1:95:11:40:bc:1f:c8:a6:fc:8c:
b0:e1:f5:b9:a4:7b:f5:5a:7d:fe:41:fe:7d:42:72:08:67:66:
c1:5a:c3:d2:eb:bb:2d:2a:96:90:1d:fc:cb:25:c6:26:8a:bd:
5d:d9:79:bd:46:e8:5d:55:49:5c:56:eb:d0:4b:c8:d5:7d:d0:
ab:7e:0d:01:e0:b5:3c:91:0f:90:c5:2f:06:7c:53:d2:3d:1d:
5d:43:08:f5:9c:6e:25:19:e1:80:ce:f7:6c:8b:4a:5d:3f:8c:
0d:f0:6f:03:be:4e:01:9d:b5:54:42:59:96:a8:7e:ca:7f:ef:
24:75:4e:57:ae:fa:f6:33:2f:b3:d0:58:b2:c7:95:a4:85:3f:
b6:08:5c:0c:df:23:49:6d:3e:4e:ea:39:fd:d0:b4:a1:2a:9b:
be:c4:2b:82:41:b5:f7:64:eb:e8:e9:a6:b3:9c:ce:02:cb:d0:
17:50:ad:f1:7a:78:be:b7:c4:4e:5b:c4:16:8a:d1:c3:8e:5a:
d0:9f:76:f5:7f:e6:80:cd:40:af:ef:d1:59:a7:b0:18:3e:ca:
2d:9d:de:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 12:02:50 2023 by rpki-client on console-ams.rpki-client.org