Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/nFqt8HDQO6R-Zv4BgX3KPHnKeqg.roa
File: nFqt8HDQO6R-Zv4BgX3KPHnKeqg.roa (raw, json)
Hash identifier: 4zb2TOmuq3Dw7nl3md5af7ebnTiv41P82KCn6CgZ6C8=
Subject key identifier: 9C:5A:AD:F0:70:D0:3B:A4:7E:66:FE:01:81:7D:CA:3C:79:CA:7A:A8
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 0186CAA540C1BBA25C994DF15939339267C5
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/nFqt8HDQO6R-Zv4BgX3KPHnKeqg.roa
Signing time: Fri 10 Mar 2023 08:31:13 +0000
ROA not before: Fri 10 Mar 2023 08:31:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48635
IP address blocks: 195.39.204.0/23 maxlen: 24
195.39.214.0/23 maxlen: 24
185.103.240.0/22 maxlen: 24
185.103.156.0/22 maxlen: 24
93.187.220.0/22 maxlen: 24
185.56.144.0/22 maxlen: 24
109.72.80.0/20 maxlen: 24
185.159.240.0/22 maxlen: 24
2.57.56.0/22 maxlen: 24
185.66.248.0/22 maxlen: 24
92.63.168.0/21 maxlen: 24
62.221.250.0/24 maxlen: 24
62.221.248.0/21 maxlen: 24
31.186.168.0/21 maxlen: 24
185.37.68.0/22 maxlen: 24
185.182.56.0/22 maxlen: 24
185.224.88.0/22 maxlen: 24
185.109.216.0/22 maxlen: 24
93.180.64.0/21 maxlen: 24
185.107.212.0/22 maxlen: 24
185.107.224.0/23 maxlen: 24
185.187.12.0/22 maxlen: 24
31.25.96.0/21 maxlen: 24
185.87.184.0/22 maxlen: 24
79.99.128.0/21 maxlen: 24
185.175.200.0/22 maxlen: 24
185.233.28.0/22 maxlen: 24
5.157.80.0/21 maxlen: 24
185.27.172.0/22 maxlen: 24
185.95.28.0/22 maxlen: 24
195.238.74.0/23 maxlen: 24
185.223.32.0/22 maxlen: 24
109.106.160.0/19 maxlen: 24
185.94.228.0/22 maxlen: 24
185.94.228.0/24 maxlen: 24
2a05:1500:500::/40 maxlen: 40
2a01:b942::/32 maxlen: 48
2a0b:8f80::/29 maxlen: 48
2a03:3060::/29 maxlen: 48
2a0b:7280::/29 maxlen: 48
2a04:6bc0::/36 maxlen: 48
2a0b:8f80::/48 maxlen: 48
2a02:40c1::/32 maxlen: 48
2a05:1500::/29 maxlen: 48
2a01:b944::/32 maxlen: 48
2a00:f10::/29 maxlen: 48
2a0c:84c0::/29 maxlen: 48
2a01:b940::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 06 Oct 2023 10:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:a5:40:c1:bb:a2:5c:99:4d:f1:59:39:33:92:67:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Mar 10 08:31:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c5aadf070d03ba47e66fe01817dca3c79ca7aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:ca:3f:b4:da:09:1c:3a:58:e8:d8:2f:33:
cf:62:12:75:ee:6c:26:4a:6b:39:26:40:81:c1:b7:
9b:5e:03:13:83:fc:06:04:9b:a8:c7:14:a4:bc:a1:
b5:12:6c:8a:89:3e:5f:25:d2:11:09:bf:73:58:c2:
3d:92:a6:d9:0b:8f:41:7a:7e:78:db:79:66:5c:7e:
d0:66:a1:ae:d0:86:c0:da:6a:37:bf:71:70:63:5c:
3a:0d:9d:95:95:bb:0f:40:bf:b2:b0:c9:a8:c4:07:
64:85:2b:b4:ff:af:c4:b1:83:e7:e1:fe:f0:87:13:
3d:45:fe:4f:74:09:e6:01:bc:5c:4e:06:68:4a:7c:
a6:0f:fb:06:10:17:49:35:56:ce:9e:6c:81:81:a8:
24:04:71:ba:f9:2e:8b:52:eb:34:ef:48:5a:8e:a0:
46:3e:aa:45:02:7a:6d:18:4e:e7:8d:a7:2b:27:5a:
79:80:c0:b5:91:ed:58:f5:8e:33:30:4b:fe:c8:94:
f8:86:bd:44:3c:3d:3d:9f:3d:d9:9a:3a:4e:7d:55:
61:1b:a6:0c:94:b5:82:11:03:e3:25:ab:38:6e:63:
c8:5d:ca:a1:e2:60:87:e0:1c:7d:be:3b:2d:70:79:
08:1c:a5:34:be:1c:d9:6c:33:30:11:d4:8a:fe:c4:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5A:AD:F0:70:D0:3B:A4:7E:66:FE:01:81:7D:CA:3C:79:CA:7A:A8
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/nFqt8HDQO6R-Zv4BgX3KPHnKeqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.56.0/22
5.157.80.0/21
31.25.96.0/21
31.186.168.0/21
62.221.248.0/21
79.99.128.0/21
92.63.168.0/21
93.180.64.0/21
93.187.220.0/22
109.72.80.0/20
109.106.160.0/19
185.27.172.0/22
185.37.68.0/22
185.56.144.0/22
185.66.248.0/22
185.87.184.0/22
185.94.228.0/22
185.95.28.0/22
185.103.156.0/22
185.103.240.0/22
185.107.212.0/22
185.107.224.0/23
185.109.216.0/22
185.159.240.0/22
185.175.200.0/22
185.182.56.0/22
185.187.12.0/22
185.223.32.0/22
185.224.88.0/22
185.233.28.0/22
195.39.204.0/23
195.39.214.0/23
195.238.74.0/23
IPv6:
2a00:f10::/29
2a01:b940::/29
2a02:40c1::/32
2a03:3060::/29
2a04:6bc0::/36
2a05:1500::/29
2a0b:7280::/29
2a0b:8f80::/29
2a0c:84c0::/29
Signature Algorithm: sha256WithRSAEncryption
34:e5:e5:6b:89:08:d8:29:1c:d4:24:18:9e:29:b7:59:6b:8f:
ab:49:81:c2:c1:1a:eb:85:62:53:37:e7:3b:b9:f1:c7:f2:4a:
f1:51:b7:db:7f:8a:1a:3b:5c:fb:f6:84:29:b3:4d:9f:87:41:
44:f8:cf:81:ca:a3:cf:07:96:e6:d7:ac:f2:1b:e4:7d:16:a7:
d0:7b:19:77:5d:77:cc:6c:65:1d:3b:21:7e:4b:0b:30:32:e4:
93:00:3c:c6:e2:fb:18:d3:23:ca:50:11:82:11:41:38:3c:40:
b7:b1:f1:ad:dd:e9:5a:fa:ce:77:e2:20:2d:fd:b4:c9:a7:2c:
9e:54:7c:3c:ef:e6:d5:2b:f1:74:fb:03:b2:95:82:cf:ab:9d:
6d:ca:cb:42:86:8c:36:ab:17:ed:84:fd:03:0a:cc:1e:60:43:
d0:19:06:f0:9b:46:f9:56:ff:e1:fa:7a:60:22:f9:7f:2b:a0:
37:93:bd:c7:ab:a3:5a:bb:a9:c1:d5:7f:ba:43:27:d5:a2:59:
80:88:9b:b3:7d:2b:27:34:ce:4a:30:a9:a2:12:b3:7e:fa:13:
28:b7:45:14:9e:ff:eb:1e:2d:31:84:65:c1:8e:fb:f9:73:54:
16:69:ce:92:d2:0a:55:77:59:23:dc:d0:02:67:e2:47:04:55:
f8:7a:78:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:11 2024 by rpki-client on console-ams.rpki-client.org