Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/bOJxZjHeKI3eW_AACiLYGcHfF48.roa
File: bOJxZjHeKI3eW_AACiLYGcHfF48.roa (raw, json)
Hash identifier: kWPmafXr0h2ypp9TDrgXZ8ZzrQaR3Uq8TvHf+++lPEw=
Subject key identifier: 6C:E2:71:66:31:DE:28:8D:DE:5B:F0:00:0A:22:D8:19:C1:DF:17:8F
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 018A44AC699CE031800AAEBFBBAC5A747E8D
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/bOJxZjHeKI3eW_AACiLYGcHfF48.roa
Signing time: Wed 30 Aug 2023 04:21:04 +0000
ROA not before: Wed 30 Aug 2023 04:21:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25255
IP address blocks: 91.141.0.0/20 maxlen: 20
91.141.0.0/17 maxlen: 17
94.245.192.0/24 maxlen: 24
94.245.192.0/18 maxlen: 18
213.94.64.0/21 maxlen: 21
213.94.64.0/18 maxlen: 18
213.94.78.0/24 maxlen: 24
213.94.76.0/24 maxlen: 24
213.94.77.0/24 maxlen: 24
91.141.32.0/19 maxlen: 19
91.141.64.0/20 maxlen: 20
77.119.224.0/19 maxlen: 19
77.116.128.0/17 maxlen: 17
77.119.160.0/20 maxlen: 20
178.113.0.0/17 maxlen: 17
77.119.192.0/19 maxlen: 19
77.117.0.0/17 maxlen: 17
46.220.0.0/16 maxlen: 16
178.112.0.0/17 maxlen: 17
194.24.128.0/19 maxlen: 19
178.112.0.0/14 maxlen: 14
178.115.128.0/20 maxlen: 20
77.116.0.0/17 maxlen: 17
77.116.0.0/14 maxlen: 14
77.119.128.0/20 maxlen: 20
109.126.64.0/18 maxlen: 18
178.112.128.0/17 maxlen: 17
178.115.224.0/19 maxlen: 19
81.3.192.0/24 maxlen: 24
81.3.192.0/18 maxlen: 18
213.94.79.0/24 maxlen: 24
213.94.80.0/22 maxlen: 22
213.94.96.0/21 maxlen: 21
213.94.95.0/24 maxlen: 24
178.165.192.0/20 maxlen: 20
178.115.64.0/20 maxlen: 20
81.3.204.0/23 maxlen: 23
81.3.206.0/23 maxlen: 23
81.3.201.0/24 maxlen: 24
81.3.211.0/24 maxlen: 24
81.3.210.0/24 maxlen: 24
178.165.128.0/17 maxlen: 17
178.165.128.0/20 maxlen: 20
178.165.160.0/19 maxlen: 19
178.115.32.0/19 maxlen: 19
2a02:2861:d::/48 maxlen: 48
2a02:2864::/30 maxlen: 30
2a02:2861::/32 maxlen: 32
2a02:2861:e::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 Sep 2023 14:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:44:ac:69:9c:e0:31:80:0a:ae:bf:bb:ac:5a:74:7e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Aug 30 04:21:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ce2716631de288dde5bf0000a22d819c1df178f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:ea:56:18:15:a3:31:69:91:7b:83:f6:e3:
b0:73:bf:2d:6b:df:75:d2:07:b7:36:e8:47:3f:81:
4a:c4:5a:0b:1e:72:54:ce:28:82:e4:82:8b:1b:57:
f7:5f:33:b5:d5:5c:db:19:65:90:49:de:ee:0c:07:
52:a7:1c:49:97:cf:12:aa:28:97:5d:62:18:9c:81:
be:b3:8b:5d:3b:1f:ba:58:ba:98:93:d8:5b:33:8a:
09:46:c6:a2:a3:4e:8d:fb:2f:e5:83:4f:1b:61:db:
48:fb:d6:89:d5:03:c5:5e:65:5b:85:4e:15:f1:a4:
23:93:f9:c3:8a:f1:27:0b:dc:82:f9:db:e1:b1:f1:
86:dd:6a:05:b8:e7:eb:ce:4e:9a:05:87:15:b1:55:
96:7e:48:ae:d2:df:6f:05:10:58:16:ea:1d:f5:59:
db:d7:94:a4:9b:6f:2e:f5:e0:de:a7:2e:6b:47:e7:
19:c3:f3:e1:34:94:b0:20:bf:a0:f3:0a:c1:11:58:
33:99:a5:ad:5f:a4:3c:62:77:b7:00:a9:8f:9f:49:
cf:fa:6f:f3:09:f7:29:a5:74:a5:06:dd:59:ac:6b:
63:b9:77:da:07:95:a3:ee:0d:b4:f8:1d:10:90:62:
86:ae:89:84:44:9f:6e:bc:78:89:fe:df:93:fa:5a:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E2:71:66:31:DE:28:8D:DE:5B:F0:00:0A:22:D8:19:C1:DF:17:8F
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/bOJxZjHeKI3eW_AACiLYGcHfF48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.220.0.0/16
77.116.0.0/14
81.3.192.0/18
91.141.0.0/17
94.245.192.0/18
109.126.64.0/18
178.112.0.0/14
178.165.128.0/17
194.24.128.0/19
213.94.64.0/18
IPv6:
2a02:2861::/32
2a02:2864::/30
Signature Algorithm: sha256WithRSAEncryption
18:c3:1f:8c:21:bb:3f:0b:94:c7:e6:ae:fb:8f:ef:dd:5c:c6:
23:ef:b6:40:21:ff:aa:73:6e:36:08:ca:6a:e6:78:44:30:62:
7a:20:82:6a:06:da:db:f9:32:09:cb:fd:bf:e8:98:a2:6a:2c:
43:09:53:37:fb:62:2e:52:88:2e:db:de:6b:ab:89:c7:9e:33:
01:15:c3:13:04:01:e8:d5:ef:65:9b:12:a7:3d:f8:1e:db:5b:
cd:09:a8:35:f5:53:be:da:94:b6:1d:bd:74:9b:0f:a3:c9:3b:
46:1a:0d:e7:60:27:3c:38:55:41:47:4f:25:53:f7:21:25:58:
f5:65:81:46:7e:18:e8:9a:dd:89:3e:b4:b2:99:47:6f:16:4a:
cc:a9:f3:10:cf:56:fc:86:2c:7c:c4:65:b8:a8:27:6c:a6:4d:
d9:a6:74:99:60:55:08:4d:78:4d:1e:b1:6e:bc:0e:98:2b:33:
0b:40:67:9c:15:b2:1c:ad:26:e2:ba:a9:b7:8c:56:01:e3:b3:
3b:7d:e9:35:aa:d4:a3:29:e4:9b:ee:14:2b:52:05:6e:9f:98:
ac:b0:9f:29:9d:46:e7:68:df:b2:f6:6e:87:46:b8:1b:ef:95:
db:3a:58:fe:1b:2b:1e:65:a0:d5:03:c6:5c:aa:c4:47:be:54:
35:ed:2d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:39 2024 by rpki-client on console-ams.rpki-client.org