Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/v-O18ChROuUDDpZMSCGMVSkaDwg.roa
File: v-O18ChROuUDDpZMSCGMVSkaDwg.roa (raw, json)
Hash identifier: lr/c1b9ZoDjvbeBTG1TZhDYPpb2hYcVCQr3WxhNY9gM=
Subject key identifier: BF:E3:B5:F0:28:51:3A:E5:03:0E:96:4C:48:21:8C:55:29:1A:0F:08
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018D115D9012A82329715B52DD5AB7FE2705
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/v-O18ChROuUDDpZMSCGMVSkaDwg.roa
Signing time: Tue 16 Jan 2024 08:22:40 +0000
ROA not before: Tue 16 Jan 2024 08:22:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 16 Feb 2024 22:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:5d:90:12:a8:23:29:71:5b:52:dd:5a:b7:fe:27:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 16 08:22:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfe3b5f028513ae5030e964c48218c55291a0f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:17:0e:a8:85:ef:c3:fa:e3:23:88:96:db:
96:a2:61:d7:d7:2c:09:f7:15:cc:58:e4:25:98:de:
e6:b6:bf:f7:06:b8:7a:4b:47:94:c5:91:3a:d5:59:
25:53:de:2e:38:65:b1:5b:66:66:41:64:87:e4:eb:
bf:f0:86:c5:5f:b5:35:2e:32:a7:b2:39:53:6c:ab:
8b:f0:9c:48:b4:33:5f:f3:ef:df:16:f4:ba:2c:63:
80:bd:1d:b7:bd:25:3a:01:01:f8:ae:9e:91:35:31:
4c:e1:05:55:7d:bc:d4:0c:77:35:e1:19:12:e6:ab:
13:29:5c:a8:22:85:87:72:35:87:c4:b0:49:4b:e7:
1d:ad:8e:57:57:6c:6d:88:2a:44:a0:03:cb:17:40:
b4:48:e3:ae:e4:1b:60:e9:75:90:1e:b7:e5:ee:13:
64:71:e3:22:6c:1e:e7:58:13:7d:ed:f6:af:63:73:
4d:79:04:f1:cb:88:bc:da:46:98:d9:57:6a:da:dc:
43:a8:ff:18:86:ae:89:85:1e:49:be:1d:ce:0f:24:
29:dd:7d:ae:3f:e3:50:2a:24:06:b7:94:9a:d1:96:
b1:0e:58:90:59:9e:3f:95:f6:6c:ca:ba:f2:f9:a8:
91:dd:fe:78:50:91:10:a0:27:77:69:16:38:05:18:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E3:B5:F0:28:51:3A:E5:03:0E:96:4C:48:21:8C:55:29:1A:0F:08
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/v-O18ChROuUDDpZMSCGMVSkaDwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.87.0/24
45.9.29.0/24
45.81.113.0/24
45.81.115.0/24
45.88.136.0/24
45.88.138.0/23
45.94.170.0/23
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
56:71:45:81:08:d5:82:20:d6:54:54:21:f5:b1:46:c6:53:b1:
1e:1d:b2:e6:76:95:ca:50:12:c7:0f:06:9c:7c:b7:48:2b:fa:
69:f6:15:bc:7e:41:e7:62:9b:83:c3:0f:51:73:4a:fe:bd:03:
58:42:df:e8:ad:78:6d:d7:de:1f:54:21:79:13:8c:70:d4:ea:
0e:43:a7:c0:69:ed:16:c0:5f:85:ce:f6:1b:2c:2f:a7:17:e0:
f2:3d:2a:81:e8:ff:4b:05:1f:be:6e:41:29:1d:fe:b2:b0:55:
cd:62:bc:31:4c:4c:06:86:a8:ee:99:60:bf:9f:53:c1:1c:b1:
85:79:49:cc:89:21:a2:82:77:4b:0a:75:81:76:f5:ec:c7:77:
c9:86:48:11:df:8e:17:71:a5:ec:7f:69:2c:da:f9:30:9a:34:
c6:9a:64:8f:68:8c:ea:6d:11:65:27:76:62:6e:cd:c5:29:51:
f3:59:bf:0f:3c:c6:ab:b6:19:5a:c4:ab:67:33:93:92:4c:0f:
78:58:14:4a:43:36:0c:0a:d9:27:dc:24:5f:85:8a:36:ae:6f:
af:d0:50:f9:40:9c:a0:f7:9b:cb:5f:37:ac:93:14:a1:10:f9:
e3:02:6f:24:07:13:71:3f:4c:fb:71:e4:06:79:ce:ab:21:42:
15:8a:e8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 23:32:21 2024 by rpki-client on console-ams.rpki-client.org