Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/taR6ml8cUc7iw48GUX0XgsbLLMM.roa
File: taR6ml8cUc7iw48GUX0XgsbLLMM.roa (raw, json)
Hash identifier: Zh6cDze/rO6OXvyZdLWxvhUAVMhYtsGCy/Z1OUAJpr8=
Subject key identifier: B5:A4:7A:9A:5F:1C:51:CE:E2:C3:8F:06:51:7D:17:82:C6:CB:2C:C3
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B8FF1E680797AC208DC58A42D3D52273D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/taR6ml8cUc7iw48GUX0XgsbLLMM.roa
Signing time: Thu 02 Nov 2023 12:11:16 +0000
ROA not before: Thu 02 Nov 2023 12:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:f1:e6:80:79:7a:c2:08:dc:58:a4:2d:3d:52:27:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 2 12:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5a47a9a5f1c51cee2c38f06517d1782c6cb2cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:8e:82:f1:43:21:75:74:14:c9:08:b7:8e:
43:1a:99:31:60:ad:2f:38:0b:c3:f5:58:93:6f:0c:
5c:7d:af:38:6e:a9:71:3d:38:78:5f:94:61:5b:07:
c6:e4:e9:15:0e:8d:4c:76:5e:b8:6a:0c:15:c4:e0:
60:24:f4:7f:78:40:dc:9b:ff:0f:db:e3:2a:43:60:
9d:6c:07:c7:46:7b:3a:14:e4:af:25:31:fb:8f:57:
ff:d3:69:19:c4:1e:42:c0:8c:b1:ed:e5:94:b6:fe:
74:6e:6a:ca:40:7e:47:ad:20:53:7c:4b:e0:b6:5b:
d5:94:02:4b:1f:a1:7f:b7:0e:1f:a6:ea:a1:1d:ee:
1b:9c:38:04:d4:c3:e8:02:23:fc:71:8a:a1:74:1a:
e7:ee:54:7d:e9:38:f0:3d:7e:a8:ed:4a:bd:d0:f3:
bb:00:c4:d0:4a:d9:f9:1b:44:e6:eb:a2:41:3e:06:
3d:dc:74:55:f5:11:18:08:08:2c:67:09:e7:f6:d3:
d4:39:30:28:41:dd:b3:b3:25:0c:f7:c9:3e:4e:65:
ae:00:cc:29:2b:12:b8:f9:bd:18:85:32:e7:1b:88:
32:10:a4:2f:85:8e:b9:1f:c5:29:cc:6c:8e:3b:77:
2d:1f:c1:11:c4:14:86:c5:aa:39:d6:8d:23:42:76:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A4:7A:9A:5F:1C:51:CE:E2:C3:8F:06:51:7D:17:82:C6:CB:2C:C3
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/taR6ml8cUc7iw48GUX0XgsbLLMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
70:d4:10:b8:40:79:e7:72:67:af:a6:35:c4:d4:e3:4d:bc:6f:
81:14:d8:a5:03:ba:1b:bf:c6:58:f6:39:aa:63:f6:2d:3e:9c:
53:83:1a:70:ec:25:d7:5e:52:14:36:1c:45:66:31:d9:57:ec:
47:3b:ee:07:bb:10:b0:2d:23:63:8e:61:f0:45:7d:eb:7c:67:
78:db:89:e5:3d:a2:7d:60:55:25:be:00:60:96:cd:77:e1:af:
9a:3b:1c:58:36:1a:94:45:ed:35:b4:d6:e4:f9:a3:67:8e:bb:
e6:dd:e6:96:da:62:e5:61:bf:3a:dc:26:a5:3a:ad:9d:4d:e8:
3d:91:f5:7f:7a:31:68:2a:6c:b1:1d:81:51:2e:b8:82:5e:3a:
30:9d:21:a8:98:a7:fd:61:15:30:86:1f:1c:35:bd:8b:3c:a2:
42:19:98:4f:4c:d9:19:d6:21:3f:94:3e:51:fb:a4:b7:2a:5a:
bb:4f:2c:4d:0f:fd:cd:b7:5d:c2:46:90:bb:4a:07:d3:d3:2a:
9a:11:4d:a6:32:7e:4d:94:a3:ba:93:7e:34:fc:07:aa:02:16:
3c:04:0f:30:ef:e9:fc:68:87:00:3d:8b:ce:4a:fd:c8:4e:8a:
60:33:e0:a2:fd:09:11:b2:1d:74:30:f5:9d:a7:2d:91:67:f4:
a2:1d:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 12:00:16 2023 by rpki-client on console-fra.rpki-client.org