Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zO-uLn9Xr6sKgATgKffwX2dzgDc.roa
File: zO-uLn9Xr6sKgATgKffwX2dzgDc.roa (raw, json)
Hash identifier: 7vYXNt0j6NcuwNihWvrQ4RNjrKMvUgECo1tMGjxp7jM=
Subject key identifier: CC:EF:AE:2E:7F:57:AF:AB:0A:80:04:E0:29:F7:F0:5F:67:73:80:37
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F43DF423F931D255B167F9D082D85
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zO-uLn9Xr6sKgATgKffwX2dzgDc.roa
Signing time: Tue 02 Jan 2024 04:29:44 +0000
ROA not before: Tue 02 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:43:df:42:3f:93:1d:25:5b:16:7f:9d:08:2d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccefae2e7f57afab0a8004e029f7f05f67738037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0c:89:5d:e3:44:c3:47:e5:4e:25:c6:fc:39:
bd:c5:28:bc:b9:00:61:07:be:50:fa:4b:f9:75:65:
9e:c4:db:1d:33:29:a9:c0:a0:05:f2:0e:24:16:72:
91:0c:51:aa:09:34:a9:60:ed:c0:64:6a:bb:de:56:
a9:77:09:49:e0:bc:f7:0b:61:d2:65:e3:2b:80:c0:
c6:60:3f:4e:bd:2a:37:e7:ee:07:f4:fa:26:4d:54:
3f:43:49:a9:c3:e2:50:be:f5:c1:77:65:44:0f:c3:
f7:d1:b4:99:38:6b:e1:75:33:48:a2:4d:b2:f9:5f:
d0:ff:86:79:2e:e9:c5:e6:e3:c1:77:4a:c8:cf:43:
7b:d2:2f:16:53:51:05:77:ab:aa:9c:93:20:09:62:
ca:f1:09:bb:9a:1e:67:8d:3d:10:b1:45:af:08:e4:
f0:8e:e6:05:20:37:f5:76:e3:bb:aa:8b:51:d4:a1:
d5:19:74:7d:4c:d4:59:45:1c:5d:8e:ca:24:24:e1:
d5:0c:d8:db:6f:ea:0f:66:bf:fd:ed:6f:1d:34:49:
8d:6a:81:f3:94:48:7e:5b:95:9b:1c:31:fe:1c:fc:
3a:3d:4c:80:86:f4:b0:73:78:ca:85:22:f9:bd:0b:
00:76:ff:45:cd:3a:b7:8d:38:10:ce:3f:f8:f4:8c:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EF:AE:2E:7F:57:AF:AB:0A:80:04:E0:29:F7:F0:5F:67:73:80:37
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zO-uLn9Xr6sKgATgKffwX2dzgDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
5.181.87.0/24
45.9.29.0/24
45.81.112.0/24
45.88.136.0/24
45.88.138.0/23
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
5f:4b:10:73:a8:1a:ba:a9:f9:94:fe:2b:17:26:64:4e:2e:a2:
e0:64:64:ca:33:59:d1:bc:28:16:6e:f8:b3:8c:c1:af:3a:c3:
63:01:ad:01:ad:c0:1b:b3:dc:4e:72:02:a0:e1:88:88:b4:20:
ab:2a:07:b5:02:3f:60:63:a7:1c:8c:af:31:24:a0:f1:66:54:
02:3c:93:23:7f:c3:0d:f4:62:30:d0:c3:31:54:8d:3c:87:41:
ef:1d:f7:89:ac:7b:fa:15:24:91:98:d8:bb:6e:c1:b3:86:46:
5b:a1:f0:ce:af:57:2a:62:f5:89:64:17:0f:47:e0:a1:7b:41:
95:84:ca:7f:e2:98:61:91:18:aa:04:78:a8:85:6c:58:d0:c6:
e1:92:c8:a7:21:d9:c4:e2:81:0b:d3:fa:20:b1:35:77:2a:4e:
bd:a0:46:10:2c:8e:01:1d:54:ca:60:00:be:e8:ef:e2:8c:94:
96:41:df:4e:47:d2:27:ac:00:88:10:4d:3e:5f:f7:b4:8c:c2:
b7:13:4d:96:32:6a:80:ae:70:a2:c5:49:da:cf:30:71:69:23:
00:1f:16:c4:93:7e:75:23:84:fd:76:23:7a:d4:1a:8f:fc:bc:
c3:ab:e1:9a:f3:6d:02:cc:04:b9:a9:33:d0:a5:1e:b2:97:b8:
8c:87:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 18:36:44 2024 by rpki-client on console-ams.rpki-client.org