Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6KQlon61GgADMUnIuPx58ey57PY.roa
File: 6KQlon61GgADMUnIuPx58ey57PY.roa (raw, json)
Hash identifier: Mf9tVXN/tmJK+aw87erSdJt6CgTRI9WrS7KZkj/Za4M=
Subject key identifier: E8:A4:25:A2:7E:B5:1A:00:03:31:49:C8:B8:FC:79:F1:EC:B9:EC:F6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018BA8F9ABDA62CD9A2A16E0A146DB062A31
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6KQlon61GgADMUnIuPx58ey57PY.roa
Signing time: Tue 07 Nov 2023 08:50:16 +0000
ROA not before: Tue 07 Nov 2023 08:50:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:f9:ab:da:62:cd:9a:2a:16:e0:a1:46:db:06:2a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 7 08:50:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8a425a27eb51a00033149c8b8fc79f1ecb9ecf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:16:a6:91:4c:bc:99:5f:8a:b0:1b:9d:05:8a:
02:12:89:fe:a9:ce:84:43:4b:32:94:55:26:02:9e:
92:1f:39:a3:81:38:7a:27:e0:a8:c5:7a:84:7e:30:
79:3e:00:47:05:a6:8f:44:2e:39:e1:f1:15:1d:bd:
17:09:22:3c:9e:40:49:a6:bc:59:1a:ac:c0:7c:81:
ba:28:07:01:56:aa:dc:ea:ef:9a:4b:3a:8d:51:3a:
16:68:e2:e9:86:4e:3c:4f:a9:dd:fa:36:d2:9c:ed:
95:3e:73:12:35:05:d3:64:fc:3c:06:02:98:ad:62:
98:11:fe:80:55:b2:8e:5e:e1:8f:ac:c5:cd:95:af:
13:a1:1c:9b:34:e8:0a:1a:ea:40:7e:82:a0:86:b6:
8f:0c:04:1b:81:33:3f:45:34:31:c9:22:e8:67:09:
88:ca:75:fa:9d:e8:fe:f5:4f:78:fe:69:f6:68:85:
c3:c2:62:36:79:3e:93:89:02:25:62:47:17:8c:ff:
3c:c3:6b:a7:9a:87:8f:e5:74:3f:35:ea:ad:38:17:
b8:4f:05:96:89:f9:94:2d:10:e9:42:54:4e:92:17:
a8:51:5a:c0:92:56:83:f8:27:5e:74:67:83:7c:bf:
83:e5:4e:16:8f:0a:7a:dc:b0:4f:59:41:aa:42:8c:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A4:25:A2:7E:B5:1A:00:03:31:49:C8:B8:FC:79:F1:EC:B9:EC:F6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6KQlon61GgADMUnIuPx58ey57PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.88.136.0/24
45.88.138.0/24
45.94.168.0/22
45.132.180.0/22
45.144.212.0/23
77.83.37.0/24
77.83.39.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/22
195.177.92.0-195.177.94.255
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
35:da:44:ac:18:74:16:c4:18:5e:e0:15:21:df:59:29:d3:c6:
5c:07:9e:7e:32:e8:88:c6:06:33:5a:38:db:53:e9:06:b5:f7:
fd:71:24:7d:52:a8:53:ce:da:0e:29:a4:f8:d2:bc:db:2a:96:
84:29:5b:7a:9d:c3:53:f5:0e:5c:48:37:ff:b5:a0:d2:f7:c6:
da:7c:4e:6d:12:e2:5a:58:cf:d7:87:5d:5d:7d:99:8d:9e:80:
f7:24:fd:c2:9b:a9:e0:20:c4:bf:6a:0d:7d:31:93:81:e6:93:
a0:5e:c6:3d:c3:e7:75:67:fa:c8:2b:d7:41:ec:43:28:9d:c2:
cb:5e:fa:0f:ef:ce:55:35:54:ca:ee:2f:67:09:43:d0:67:ab:
82:e7:b5:48:b9:6b:b4:58:70:bb:e0:ce:a6:66:1d:9b:f5:03:
e2:2e:6e:89:9d:89:7d:77:06:d0:5a:06:f9:17:a6:10:8d:72:
25:db:4f:fd:39:97:98:06:5e:ad:39:26:0b:25:36:68:1f:bc:
63:15:22:24:df:11:c9:9f:b4:f8:80:0f:56:e2:84:d2:f0:26:
68:77:56:04:22:20:ed:75:eb:e3:f2:28:99:0f:47:2a:76:b6:
64:57:0d:99:2a:86:d4:8e:d7:17:1f:34:aa:0c:7e:20:cd:15:
1d:14:ef:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:32 2023 by rpki-client on console.sobornost.net