Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rZHSJbsAzwEAAN9EIAMs1-eNDsI.roa
File: rZHSJbsAzwEAAN9EIAMs1-eNDsI.roa (raw, json)
Hash identifier: rP7OblicFkmUYzYida7yNIyUeLpOx+AAm2NPTFUFC4U=
Subject key identifier: AD:91:D2:25:BB:00:CF:01:00:00:DF:44:20:03:2C:D7:E7:8D:0E:C2
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B8047A7E5EAAE9389D30305460395F2EE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rZHSJbsAzwEAAN9EIAMs1-eNDsI.roa
Signing time: Mon 30 Oct 2023 11:11:01 +0000
ROA not before: Mon 30 Oct 2023 11:11:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:47:a7:e5:ea:ae:93:89:d3:03:05:46:03:95:f2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 30 11:11:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad91d225bb00cf010000df4420032cd7e78d0ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:eb:5b:1b:5c:49:54:95:cd:c3:06:93:ac:
4f:77:60:ab:d7:d0:ec:8b:f7:9e:51:91:de:4f:8c:
f6:a3:9a:8c:16:0c:58:6e:f9:2a:77:79:7b:76:30:
40:97:8d:7b:a0:aa:e1:76:d6:e7:c6:89:cb:da:39:
ad:5e:a6:f3:2a:23:46:2a:91:ad:a8:0c:d8:f6:dd:
c1:eb:81:b1:25:f5:26:80:b3:d1:ef:e2:7a:4e:46:
c2:68:bb:56:49:6a:73:05:0f:32:47:71:ca:e9:e0:
7c:19:b0:a0:37:e1:55:95:4c:54:7f:d9:43:4a:78:
4a:96:37:a5:47:7c:90:9e:61:3a:2b:e5:28:9a:c7:
34:da:8a:d9:2d:ba:e3:c4:fb:09:88:fc:f5:bc:1e:
d6:7a:6f:a3:0e:df:46:c1:32:6a:bc:de:aa:4f:0d:
46:f8:87:97:68:ec:9b:c9:95:5d:32:2a:f8:ba:67:
97:ff:af:a3:3f:b7:99:dc:4f:21:b2:c9:fe:f7:b3:
47:e5:a3:d1:4d:81:8b:bf:9d:b0:7a:98:18:b8:49:
a8:0b:d8:b7:15:5b:5d:e5:e7:25:b7:25:55:61:93:
12:ef:73:40:cf:54:e3:1d:cf:5b:17:53:2f:b0:ec:
d6:98:9c:a9:ed:47:a6:14:96:25:2d:6b:5f:ef:f2:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:91:D2:25:BB:00:CF:01:00:00:DF:44:20:03:2C:D7:E7:8D:0E:C2
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rZHSJbsAzwEAAN9EIAMs1-eNDsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.87.0/24
45.9.29.0/24
45.81.112.0/24
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
af:33:79:bb:01:60:e4:bc:d8:57:42:6f:2d:41:e7:a3:e4:97:
22:66:b8:0f:63:04:14:c6:ef:29:18:47:dc:01:5b:e7:8e:3f:
6f:9e:29:b8:70:03:f9:c5:bd:2a:15:61:3f:84:be:c4:ba:87:
15:1c:fe:ac:05:4e:9d:d8:9f:f6:99:51:bd:61:c1:ae:8f:0f:
16:0c:4e:6c:ef:c8:38:30:23:8e:38:3e:74:43:2d:9b:06:40:
39:24:0e:43:17:22:a8:bd:8c:09:12:ea:ed:e4:a3:5e:08:be:
97:a6:7b:49:cc:dd:f4:1e:90:54:4b:fa:63:53:79:d4:ed:70:
82:24:ae:88:e7:50:21:99:97:29:84:c9:db:84:ae:4f:5c:82:
97:bd:cc:3c:f4:4c:b7:92:44:a8:22:00:9e:38:85:82:b4:0e:
31:3b:5f:1b:f2:cf:5a:7d:63:b3:d1:c3:ad:eb:d7:ef:d6:1d:
ff:81:ab:21:64:7f:fe:cc:4f:3b:89:d7:12:db:20:67:d8:cb:
2c:e0:da:d9:3f:ea:6c:fd:11:36:e7:45:2a:ad:df:dc:58:19:
96:75:28:cd:e7:52:bd:da:d3:86:a4:17:c5:97:fe:0d:c3:52:
8f:f6:89:03:35:50:af:32:5a:3b:af:2d:ca:69:31:f7:2b:24:
eb:ed:15:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 15:25:09 2023 by rpki-client on console-fra.rpki-client.org