Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/oPrSY_JSH7dlFF3MTcVWqxyKztA.roa
File: oPrSY_JSH7dlFF3MTcVWqxyKztA.roa (raw, json)
Hash identifier: Wvga53KFQe5xTy6vIc3Kx3IWFKzV//AuSl4FLO1SdIs=
Subject key identifier: A0:FA:D2:63:F2:52:1F:B7:65:14:5D:CC:4D:C5:56:AB:1C:8A:CE:D0
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018769EF4B17679363DB8D15B00C81A28D27
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/oPrSY_JSH7dlFF3MTcVWqxyKztA.roa
Signing time: Mon 10 Apr 2023 06:51:42 +0000
ROA not before: Mon 10 Apr 2023 06:51:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 22
45.88.139.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:69:ef:4b:17:67:93:63:db:8d:15:b0:0c:81:a2:8d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 10 06:51:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0fad263f2521fb765145dcc4dc556ab1c8aced0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:f8:f4:75:c1:fc:32:51:76:d6:fd:dd:ab:
90:20:ed:4a:a0:86:cf:79:e1:ea:83:c6:ee:e4:21:
c7:34:db:8f:04:f2:e6:f3:b3:18:4b:17:e9:62:4d:
a8:bb:28:37:87:05:9b:34:dd:dd:8d:18:14:95:39:
ae:6c:1f:db:1f:83:83:ef:b1:d6:80:8f:da:62:7b:
dd:de:0d:6e:f7:65:d0:59:41:9d:ca:f9:48:ac:f8:
2e:4b:9f:4d:93:30:a4:7a:c2:b4:86:ed:be:e3:09:
64:85:ca:bd:eb:fc:b9:22:68:77:ec:96:85:6e:3e:
18:e3:95:f3:83:c9:e9:19:83:8b:9a:12:cf:a5:b2:
aa:eb:ce:6c:a9:3d:df:b6:89:f3:f3:2e:f6:35:fa:
05:07:58:d6:64:79:07:7e:e8:0d:12:4c:85:51:db:
52:3c:25:28:5b:d0:bb:d7:2e:88:47:67:ab:23:8d:
64:ae:b3:6c:b6:42:93:64:a8:a5:dc:19:f2:45:65:
78:c9:7c:b4:e6:9c:d3:80:13:91:fd:44:a1:56:1c:
6d:b6:82:16:25:8a:31:88:40:c0:e9:6d:55:a8:98:
05:74:30:9c:7c:9f:2e:d3:a5:47:b4:1c:af:0c:22:
89:2b:c3:d7:f6:e3:ee:ea:26:f7:d0:87:6b:be:f3:
e7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FA:D2:63:F2:52:1F:B7:65:14:5D:CC:4D:C5:56:AB:1C:8A:CE:D0
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/oPrSY_JSH7dlFF3MTcVWqxyKztA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.139.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.38.0/23
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
0c:26:1c:75:d3:39:20:79:b5:79:ae:c3:b8:01:d6:cf:df:cf:
54:9d:dd:16:96:73:64:df:3d:32:f3:dc:b0:f4:9d:4d:04:be:
6c:f0:4b:d3:18:c6:f9:1c:16:b0:5c:65:fe:46:c5:92:13:fe:
b7:24:1f:26:bd:81:65:91:5c:45:97:94:b0:4f:05:1a:ec:7b:
b4:d8:9a:15:f4:58:bb:6f:df:8c:df:83:36:43:3c:85:49:06:
52:7b:b6:c7:02:0f:bb:29:f3:d0:bd:96:7d:6b:af:c7:e5:64:
1c:8f:69:b3:6d:25:ab:14:72:9f:db:c9:2b:3a:c2:55:6f:18:
9c:12:2d:cc:fc:7e:8c:1d:f7:2e:eb:40:b7:3f:bf:49:89:e9:
5d:e9:1a:6a:69:17:66:34:4a:d2:a0:78:cb:e3:bc:da:c0:de:
3c:5a:2d:7a:b6:9c:b0:85:5e:43:c9:8f:f9:60:c1:76:ee:25:
7b:5c:31:24:83:26:b7:40:f4:e5:42:02:60:a1:b9:4d:88:ad:
87:41:fc:a2:08:9e:03:ac:fe:7b:76:ae:77:98:78:0c:ee:3a:
75:23:68:d1:4e:33:4a:9b:9d:df:ce:79:11:4c:7b:5b:73:d9:
6e:04:70:4d:6f:30:60:f8:04:7b:bf:7a:17:de:08:07:86:bf:
65:32:c1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org