Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/9YtxDra69zVMEkw9r_P53NBuuT4.roa
File: 9YtxDra69zVMEkw9r_P53NBuuT4.roa (raw, json)
Hash identifier: 3NLRSwMVcV537/sNLwMjm8yvjr3EmQ/81ase7LzNUlQ=
Subject key identifier: F5:8B:71:0E:B6:BA:F7:35:4C:12:4C:3D:AF:F3:F9:DC:D0:6E:B9:3E
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 018B389A934ED8F20247B2DC853CFA36F108
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/9YtxDra69zVMEkw9r_P53NBuuT4.roa
Signing time: Mon 16 Oct 2023 13:08:56 +0000
ROA not before: Mon 16 Oct 2023 13:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48011
IP address blocks: 87.236.161.0/24 maxlen: 24
5.172.177.0/24 maxlen: 24
45.93.168.0/22 maxlen: 24
213.217.31.0/24 maxlen: 24
77.87.122.0/24 maxlen: 24
193.163.72.0/24 maxlen: 24
185.217.143.0/24 maxlen: 24
213.232.203.0/24 maxlen: 24
45.252.180.0/24 maxlen: 24
45.252.182.0/24 maxlen: 24
45.252.183.0/24 maxlen: 24
45.252.181.0/24 maxlen: 24
185.227.139.0/24 maxlen: 24
185.227.137.0/24 maxlen: 24
185.227.138.0/24 maxlen: 24
185.227.136.0/24 maxlen: 24
45.89.236.0/22 maxlen: 24
185.211.79.0/24 maxlen: 24
62.204.58.0/24 maxlen: 24
185.182.105.0/24 maxlen: 24
2a0c:6600:6::/48 maxlen: 48
2a0c:6600:1::/48 maxlen: 48
2a0c:6600:3::/48 maxlen: 48
2a0c:6600:8::/48 maxlen: 48
2a0c:6600:5::/48 maxlen: 48
2a0c:6600:1000::/48 maxlen: 48
2a0c:6600:6000::/48 maxlen: 48
2a0c:6600:6600::/48 maxlen: 48
2a0c:6600::/48 maxlen: 48
2a0c:6600:4000::/48 maxlen: 48
2a0c:6600:3000::/48 maxlen: 48
2a0c:6600:2000::/48 maxlen: 48
2a0c:6600:9::/48 maxlen: 48
2a0c:6600:4::/48 maxlen: 48
2a0c:6600:7::/48 maxlen: 48
2a0c:6600:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 17 Oct 2023 17:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:9a:93:4e:d8:f2:02:47:b2:dc:85:3c:fa:36:f1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Oct 16 13:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f58b710eb6baf7354c124c3daff3f9dcd06eb93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:60:31:ff:e6:b4:17:cc:20:ae:29:b7:ee:a0:
2a:4c:4a:4b:9f:4d:4f:3b:1e:70:ca:4c:b9:68:43:
ff:84:79:c7:14:c6:75:47:12:d7:06:0d:ee:cf:06:
b4:66:f0:a2:b7:a7:14:74:6e:e5:f2:05:e3:8b:83:
d9:18:62:20:68:df:fb:10:2c:2f:6b:5f:7a:a3:db:
35:53:0a:08:f8:e5:5c:71:80:37:5e:1f:c4:a7:00:
5d:e7:15:e4:64:27:72:df:8c:a6:d6:7d:e1:f9:d2:
27:85:d4:d3:f4:60:1a:72:4f:d1:51:0a:a1:45:27:
a9:90:ee:21:f0:55:d3:41:fc:85:53:06:ce:f1:25:
dc:17:86:be:a5:40:30:5f:e7:db:3c:91:fd:6e:65:
11:93:79:8d:b8:2a:e1:36:b8:33:3e:2d:1d:8d:20:
fa:2b:13:98:2f:0f:27:cf:52:85:70:6e:dd:47:46:
78:57:b4:38:c6:50:c0:c2:89:53:54:37:26:41:dd:
a5:75:7d:86:e6:75:95:22:e1:62:5c:cd:c6:80:e4:
7a:dd:95:8c:70:99:86:ac:d8:30:87:89:e5:ea:52:
c6:4e:0a:0b:86:2e:8e:15:5d:87:8f:ee:9f:e0:c4:
bb:66:a6:30:1c:3f:05:38:69:f7:70:41:cd:ec:c0:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:71:0E:B6:BA:F7:35:4C:12:4C:3D:AF:F3:F9:DC:D0:6E:B9:3E
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/9YtxDra69zVMEkw9r_P53NBuuT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.177.0/24
45.89.236.0/22
45.93.168.0/22
45.252.180.0/22
62.204.58.0/24
77.87.122.0/24
87.236.161.0/24
185.182.105.0/24
185.211.79.0/24
185.217.143.0/24
185.227.136.0/22
193.163.72.0/24
213.217.31.0/24
213.232.203.0/24
IPv6:
2a0c:6600::-2a0c:6600:9:ffff:ffff:ffff:ffff:ffff
2a0c:6600:1000::/48
2a0c:6600:2000::/48
2a0c:6600:3000::/48
2a0c:6600:4000::/48
2a0c:6600:6000::/48
2a0c:6600:6600::/48
Signature Algorithm: sha256WithRSAEncryption
15:e8:a6:26:7f:b5:2f:b1:ef:8f:3d:f6:67:7d:90:d3:53:74:
64:ad:6a:0c:a8:5a:fb:6c:51:fe:d7:b9:2b:da:29:79:2d:03:
2a:e7:2f:65:77:47:b5:41:5b:6b:41:46:2d:a8:5a:ec:5a:f8:
a4:40:11:39:96:ff:01:3f:19:9f:c1:d2:b6:14:e7:86:d5:44:
d7:87:e5:8d:60:da:8f:da:1c:3c:86:01:8d:7b:fd:8b:3e:25:
93:dc:fb:be:b9:99:36:a7:a0:b5:47:d9:92:cc:d5:57:78:95:
4f:55:ac:57:a0:4e:a8:80:dc:8f:23:cd:b9:09:c4:7e:63:34:
79:0e:ff:be:a6:ef:bf:c6:6c:89:0f:1e:a4:92:6a:b9:c0:96:
a4:bb:17:25:78:1e:73:99:06:60:72:0e:55:ff:0a:8a:8c:84:
8e:7f:ad:7f:b9:8a:66:95:11:df:b1:97:26:24:91:0f:8e:25:
ed:79:dd:e6:ef:d8:d9:f1:f0:05:bb:2f:1b:3c:19:48:3e:0f:
7b:f2:34:a6:9e:c3:2b:ff:96:16:11:1e:2f:17:45:80:3c:8e:
fd:d2:69:a8:6a:60:84:7d:e1:b7:b6:82:ee:57:57:cb:f7:17:
49:1c:43:bc:0e:ba:8b:f1:63:0c:aa:d3:1e:f7:c8:ed:4b:3d:
1e:cd:69:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:13 2024 by rpki-client on console-ams.rpki-client.org