Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/udd2teDjydw5CqY8XChXiwFQ9RA.roa
File: udd2teDjydw5CqY8XChXiwFQ9RA.roa (raw, json)
Hash identifier: DKiHnk8ovHOhbVVQlE2nOQIXzOXeXHe2/ddiJL68rUw=
Subject key identifier: B9:D7:76:B5:E0:E3:C9:DC:39:0A:A6:3C:5C:28:57:8B:01:50:F5:10
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018AD165D7E2D346555E5D53DEED45AAFD50
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/udd2teDjydw5CqY8XChXiwFQ9RA.roa
Signing time: Tue 26 Sep 2023 12:10:27 +0000
ROA not before: Tue 26 Sep 2023 12:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.223.110.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:65:d7:e2:d3:46:55:5e:5d:53:de:ed:45:aa:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 26 12:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9d776b5e0e3c9dc390aa63c5c28578b0150f510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:19:f0:d3:c5:04:aa:5d:df:eb:80:7f:e5:
36:5a:0a:e0:e4:55:34:b9:e1:a6:b2:6b:34:53:4d:
2f:07:80:90:31:3a:3c:4d:3a:13:8f:50:6f:ed:42:
69:03:bb:55:2a:cb:2a:e1:2e:3a:f0:b2:ab:97:7d:
25:a1:ff:ad:ae:82:26:3c:ea:c0:9d:84:94:5a:c8:
0c:b2:a5:45:05:b4:88:95:96:b2:13:c3:80:4e:9a:
3c:bb:8b:17:38:cc:ef:d8:6d:ab:7a:71:b7:d7:15:
23:c8:ee:bd:54:c5:c4:94:9b:10:66:bb:d3:f1:db:
b3:e6:60:4c:bc:bd:8c:f3:36:4f:b1:f4:db:8f:b4:
81:bf:a4:f8:9e:72:7e:2a:a1:a2:f1:ab:0d:38:29:
53:ba:8c:cf:05:48:27:3a:a3:ca:5d:c0:cb:9a:a3:
88:15:86:29:ef:d1:8d:78:48:10:75:24:50:97:a1:
4d:52:93:6a:7d:99:94:5d:d0:80:68:fb:01:6d:d0:
91:d4:af:f2:b3:ef:d4:93:07:6d:ad:65:cd:0f:f3:
de:5b:4f:e3:ad:c2:ab:5b:4c:22:0b:26:0d:19:59:
9a:41:ee:9d:97:dc:eb:b0:17:94:25:f7:e6:68:29:
56:be:8c:51:8c:57:00:d6:8a:33:ab:07:e2:83:a8:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D7:76:B5:E0:E3:C9:DC:39:0A:A6:3C:5C:28:57:8B:01:50:F5:10
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/udd2teDjydw5CqY8XChXiwFQ9RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
91.223.110.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
20:c1:5d:c5:49:5d:17:62:23:85:3e:19:1d:fc:39:1f:8c:e3:
45:06:88:b5:b0:3a:0d:7f:da:4b:70:61:b5:bb:3b:d7:07:69:
49:f0:ed:61:b0:f4:9c:f8:6c:ab:2e:40:82:29:27:5b:f3:27:
f4:65:b7:9b:2c:23:61:7f:0d:b3:4c:13:0d:dc:62:c8:4f:5e:
51:f0:4f:e7:93:a4:c4:ea:dc:14:14:46:ff:27:1f:8b:fe:69:
4a:80:85:4e:1a:dc:a4:bf:28:40:4c:6a:c4:a2:8b:b9:e9:d1:
f6:61:9f:87:5e:3e:95:d7:86:7c:e1:2a:e3:6c:8c:e6:ae:da:
85:b7:33:8b:0a:65:ff:71:be:21:70:e6:b9:83:31:0f:71:61:
ab:a4:a9:be:c5:0f:87:d6:7d:0c:8d:4e:f9:08:73:40:7a:57:
17:c9:f3:a4:9c:dd:7e:f6:0f:40:07:d9:03:3e:3c:af:0c:5e:
d0:b8:28:df:fe:4e:5a:78:c1:4a:65:98:e4:91:6f:15:a5:07:
0b:f2:b3:38:ee:7a:94:fa:de:31:4c:fb:74:78:47:ab:f2:62:
79:77:ad:67:13:59:cf:f1:38:5c:c5:f5:ed:e3:0b:0e:95:da:
7c:87:46:32:6c:b4:3e:99:b0:c7:9a:47:c7:c9:ad:71:a8:f6:
2a:3b:8b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 13:28:50 2023 by rpki-client on console-fra.rpki-client.org