Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/irnz2Jz96BcmCe1XL0B_PJtqgTQ.roa
File: irnz2Jz96BcmCe1XL0B_PJtqgTQ.roa (raw, json)
Hash identifier: vp8DUut4+vnTghnC7B31ExxFI6S6PQ/wnekjqKHDMHc=
Subject key identifier: 8A:B9:F3:D8:9C:FD:E8:17:26:09:ED:57:2F:40:7F:3C:9B:6A:81:34
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0192D9FB98152E2F9B541FC9E448FBFB9CB1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/irnz2Jz96BcmCe1XL0B_PJtqgTQ.roa
Signing time: Tue 29 Oct 2024 20:33:17 +0000
ROA not before: Tue 29 Oct 2024 20:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205463
IP address blocks: 2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 13:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d9:fb:98:15:2e:2f:9b:54:1f:c9:e4:48:fb:fb:9c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 29 20:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ab9f3d89cfde8172609ed572f407f3c9b6a8134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:c4:60:48:67:a4:d7:18:b1:c6:9c:e3:9a:
6d:9d:ee:d5:14:1c:ff:b6:36:4b:a8:e9:86:a2:a9:
b6:e5:6e:ca:3d:b1:d5:20:83:27:d5:20:7c:32:27:
5d:ae:e7:a5:4b:88:26:ea:b3:1e:64:bd:63:33:e2:
10:62:23:f0:a6:47:9e:3c:99:c3:a2:a7:0c:63:94:
ff:95:96:de:5c:9b:31:7a:c1:28:f3:16:ef:29:e3:
53:42:72:8f:3a:96:80:2d:56:d1:15:36:9c:a7:83:
64:a6:c9:2b:b3:20:ca:e9:22:0b:a1:78:15:1e:95:
c8:17:b8:b2:c4:45:4b:d5:c8:80:1e:e1:81:8d:43:
1e:46:8c:4c:9f:ca:50:42:98:af:5a:0d:53:c9:37:
b8:bf:ac:21:db:50:94:a5:af:5d:0c:89:1f:a4:b3:
b3:c3:2d:09:56:16:da:4d:53:77:b9:c1:7b:d0:ed:
24:39:1b:06:bb:32:a3:45:4a:95:e1:9a:96:8a:d6:
7f:92:fb:62:68:3f:11:dc:2e:de:8b:01:30:1f:72:
4b:8a:12:18:5e:72:d2:a3:ae:1d:1d:0c:70:d6:36:
69:3c:b5:4b:c4:e4:ba:61:b1:1b:6e:2d:39:53:26:
59:f3:ff:bd:cd:54:3c:a2:60:cf:80:f6:1b:a6:4f:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B9:F3:D8:9C:FD:E8:17:26:09:ED:57:2F:40:7F:3C:9B:6A:81:34
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/irnz2Jz96BcmCe1XL0B_PJtqgTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/23
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.132.181.0/24
45.151.3.0/24
85.209.120.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
59:7b:59:04:3a:57:03:3c:c4:33:f6:dd:88:14:58:e4:7e:17:
ae:61:5d:d1:2f:51:2d:c4:bd:c7:64:33:85:da:02:e7:b8:00:
0b:fa:b0:b1:5e:87:0a:e4:10:42:0e:54:cc:f5:28:a4:a7:70:
c0:d2:da:ff:75:fc:12:61:13:df:db:ad:af:0f:f1:bd:4d:ab:
88:2d:2a:ae:1b:6e:59:14:75:83:df:80:68:ea:84:5c:da:72:
f8:4a:68:d1:a0:52:11:9c:2d:2b:cc:63:90:2b:0f:eb:46:71:
d7:63:16:ba:3e:be:73:a8:9b:7e:4e:62:e5:b6:ab:a5:a0:9f:
85:6d:b1:37:c6:d8:14:7e:18:0a:ea:82:a2:a1:04:a4:85:4f:
88:8c:4e:09:59:31:0b:b6:a1:7e:6b:45:1c:40:d5:4c:2e:a7:
cf:0d:df:a7:92:1f:9f:d1:50:9a:83:54:15:8c:92:b3:f6:ce:
da:13:97:4f:62:63:1c:19:b6:31:28:1e:8d:5e:69:ea:b4:41:
87:3c:fe:6c:ff:85:6d:84:d0:0a:1e:31:f7:e8:b6:11:52:e8:
34:4d:35:41:f4:02:89:c9:9b:57:32:66:b1:3b:7e:22:bb:2b:
9a:a7:2c:51:ff:00:a8:e4:80:b6:60:90:fb:ff:6e:84:26:05:
8a:69:e9:a5
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZLZ+5gVLi+bVB/J5Ej7+5yxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQxMDI5MjAzMzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWI5ZjNkODljZmRlODE3MjYwOWVkNTcyZjQwN2YzYzliNmE4MTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMDEYEhnpNcYscac45ptne7VFBz/
tjZLqOmGoqm25W7KPbHVIIMn1SB8MiddruelS4gm6rMeZL1jM+IQYiPwpkeePJnD
oqcMY5T/lZbeXJsxesEo8xbvKeNTQnKPOpaALVbRFTacp4NkpskrsyDK6SILoXgV
HpXIF7iyxEVL1ciAHuGBjUMeRoxMn8pQQpivWg1TyTe4v6wh21CUpa9dDIkfpLOz
wy0JVhbaTVN3ucF70O0kORsGuzKjRUqV4ZqWitZ/kvtiaD8R3C7eiwEwH3JLihIY
XnLSo64dHQxw1jZpPLVLxOS6YbEbbi05UyZZ8/+9zVQ8omDPgPYbpk9Y7wIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFIq589ic/egXJgntVy9AfzybaoE0MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvaXJuejJKejk2QmNtQ2UxWEwwQl9QSnRxZ1RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBAjhsAwQA
LVFxAwQALVFzAwQALViLAwQALYS1AwQALZcDAwQAVdF4AwQAwg80MA0GCSqGSIb3
DQEBCwUAA4IBAQBZe1kEOlcDPMQz9t2IFFjkfheuYV3RL1EtxL3HZDOF2gLnuAAL
+rCxXocK5BBCDlTM9Sikp3DA0tr/dfwSYRPf262vD/G9TauILSquG25ZFHWD34Bo
6oRc2nL4SmjRoFIRnC0rzGOQKw/rRnHXYxa6Pr5zqJt+TmLltquloJ+FbbE3xtgU
fhgK6oKioQSkhU+IjE4JWTELtqF+a0UcQNVMLqfPDd+nkh+f0VCag1QVjJKz9s7a
E5dPYmMcGbYxKB6NXmnqtEGHPP5s/4VthNAKHjH36LYRUug0TTVB9AKJyZtXMmax
O34iuyuapyxR/wCo5IC2YJD7/26EJgWKaeml
-----END CERTIFICATE-----
Generated at Thu Oct 31 15:31:01 2024 by rpki-client on console-fra.rpki-client.org