Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qEcCFypVFigzp_bNF0tTlRM7B68.roa
File: qEcCFypVFigzp_bNF0tTlRM7B68.roa (raw, json)
Hash identifier: H8LRsR8lszmd96DpO5bt5ltN0IcM/TMdjvQhrLkEeFs=
Subject key identifier: A8:47:02:17:2A:55:16:28:33:A7:F6:CD:17:4B:53:95:13:3B:07:AF
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0191C66D6199EAED5D82817083B48E207468
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qEcCFypVFigzp_bNF0tTlRM7B68.roa
Signing time: Fri 06 Sep 2024 08:22:22 +0000
ROA not before: Fri 06 Sep 2024 08:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 2.56.109.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.144.212.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a01:7120:7::/48 maxlen: 48
2a07:9200::/29 maxlen: 29
2a07:9201::/32 maxlen: 32
2a07:9206::/32 maxlen: 32
2a07:9207::/32 maxlen: 32
2a09:340::/32 maxlen: 32
2a09:c440::/32 maxlen: 32
2a0c:5d40::/32 maxlen: 32
2a0c:a580::/29 maxlen: 29
2a0c:a580::/32 maxlen: 32
2a0c:a581::/32 maxlen: 32
2a0c:a584::/32 maxlen: 32
2a0c:a586::/32 maxlen: 32
2a10:dfc0::/29 maxlen: 29
2a10:dfc0::/32 maxlen: 32
2a10:fac0::/32 maxlen: 32
2a11:580::/29 maxlen: 29
2a11:580::/32 maxlen: 32
2a11:1600::/32 maxlen: 32
2a11:2a80::/32 maxlen: 32
2a11:3900::/32 maxlen: 32
2a11:d680::/32 maxlen: 32
2a12:9f00::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 12 Sep 2024 08:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:6d:61:99:ea:ed:5d:82:81:70:83:b4:8e:20:74:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 6 08:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a84702172a55162833a7f6cd174b5395133b07af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:73:66:8b:f2:90:4e:62:bd:8d:91:70:e7:
a9:53:67:2a:5a:f1:1d:1c:5b:f9:04:7c:c6:5f:d1:
64:bf:eb:05:a6:c3:08:1f:c3:93:9c:1e:2e:b2:2a:
eb:ec:23:1c:e6:24:10:9f:01:70:e0:9d:f4:70:84:
4f:d5:e2:f1:69:08:c4:07:9f:6c:97:c1:ea:f6:01:
b5:8b:8d:bb:62:f8:3a:21:47:3e:85:74:ac:20:ca:
d8:56:9d:ba:3e:36:a5:2d:e9:8b:da:da:cf:96:86:
98:d0:d8:51:87:4d:f3:4a:88:78:ce:79:14:13:11:
a2:51:07:71:1f:b8:1e:83:4e:b7:fe:48:86:b5:05:
a0:3a:d4:93:1d:68:00:10:d2:23:c9:3b:55:f0:32:
a2:6f:3a:4e:0e:53:f4:56:6e:2f:0b:15:64:d8:de:
af:80:36:b1:f6:64:dc:d5:b4:17:65:c2:45:45:79:
be:91:af:35:6b:cb:0d:20:90:08:24:74:31:9a:03:
4e:00:fc:c2:bc:e0:84:79:29:fe:b5:f8:b1:f6:1d:
1a:23:ed:f8:99:38:25:99:2d:c8:75:f7:87:22:c9:
8c:84:47:eb:53:dc:01:da:c5:c7:88:67:6a:be:46:
cf:07:ad:63:c1:4b:a0:2a:ea:f4:6f:cf:53:7a:83:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:02:17:2A:55:16:28:33:A7:F6:CD:17:4B:53:95:13:3B:07:AF
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qEcCFypVFigzp_bNF0tTlRM7B68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.81.115.0/24
45.88.136.0/24
45.88.138.0/24
45.94.171.0/24
45.132.180.0/22
45.144.212.0/24
45.151.3.0/24
77.83.37.0/24
146.19.125.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.177.93.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a09:340::/32
2a09:c440::/32
2a0c:5d40::/32
2a0c:a580::/29
2a10:dfc0::/29
2a10:fac0::/32
2a11:580::/29
2a11:1600::/32
2a11:2a80::/32
2a11:3900::/32
2a11:d680::/32
2a12:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
5b:a3:2c:de:4e:4e:e9:50:20:52:03:d7:df:58:c3:79:ec:6b:
1d:5e:73:81:46:75:f4:e9:0c:9b:89:4c:a6:a0:59:2e:e2:80:
31:a1:71:17:3a:af:65:b0:d1:75:1a:1e:0d:d8:89:8c:5a:07:
5a:e0:4d:e1:93:38:42:25:79:91:0f:b5:4d:dc:ef:9c:64:48:
5c:f4:4f:22:2e:2b:42:f7:cf:7f:d1:0f:d7:e4:df:32:8b:e8:
54:ca:b0:73:1a:e9:ed:ee:05:a8:76:de:98:77:83:98:7c:80:
44:86:10:da:46:a1:6c:e3:8e:99:35:58:aa:8c:1a:33:21:5a:
b4:c7:18:ba:7e:48:5b:e0:d8:5f:c1:73:d2:d6:52:9b:a4:44:
ad:1e:ce:22:10:f5:e8:30:13:7b:b6:ca:1c:28:a1:d3:61:9c:
ea:47:63:72:a3:f7:27:bf:4d:0e:19:fa:9f:19:46:de:34:51:
2a:46:78:5a:fb:0e:51:8f:68:1c:3c:49:45:40:8d:c6:f3:d6:
73:71:32:be:c1:21:6f:9e:25:6e:9c:a5:50:12:9e:27:c2:d7:
20:fb:36:42:57:3a:eb:29:09:bc:5d:33:89:70:75:a4:35:a4:
d6:44:89:0c:84:89:f3:d0:7d:73:3d:ca:46:78:bf:d2:73:4e:
be:a5:75:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 12 09:32:12 2024 by rpki-client on console-ams.rpki-client.org