Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/tBGjz-lFDVnhYvBNmo8NwMS7J5o.roa
File: tBGjz-lFDVnhYvBNmo8NwMS7J5o.roa (raw, json)
Hash identifier: NYDCuIFsLIKpPilljggn+yyA24S8VeqjkY9RxxonWsQ=
Subject key identifier: B4:11:A3:CF:E9:45:0D:59:E1:62:F0:4D:9A:8F:0D:C0:C4:BB:27:9A
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 018CC7273565253BDFBFE674AD7828FDB548
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/tBGjz-lFDVnhYvBNmo8NwMS7J5o.roa
Signing time: Mon 01 Jan 2024 22:31:24 +0000
ROA not before: Mon 01 Jan 2024 22:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 185.45.94.0/24 maxlen: 24
171.22.60.0/23 maxlen: 23
5.183.240.0/23 maxlen: 23
92.119.24.0/23 maxlen: 23
171.22.62.0/23 maxlen: 23
5.183.242.0/23 maxlen: 23
92.119.26.0/23 maxlen: 23
45.14.80.0/24 maxlen: 24
45.86.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 08 Feb 2024 22:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:35:65:25:3b:df:bf:e6:74:ad:78:28:fd:b5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b411a3cfe9450d59e162f04d9a8f0dc0c4bb279a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:62:0e:f0:35:b2:36:cc:1e:95:e7:0b:fa:
12:8b:bd:17:cd:a1:bf:cb:bd:ca:62:27:07:10:e5:
00:a5:af:85:2a:a4:b1:53:a6:50:2f:55:22:41:38:
75:3e:0d:89:59:5c:c8:83:43:a8:24:09:9f:8f:2b:
ea:da:27:ec:8e:42:75:cc:ae:b1:5d:b5:86:c5:f4:
a9:3d:03:69:f3:b6:0e:c1:c6:28:9b:4e:10:8a:8f:
56:b3:5c:77:ad:a2:98:ce:80:78:73:15:20:d6:59:
5e:da:d0:ab:a3:34:d5:cc:3d:c3:f8:f8:d7:5d:e8:
9c:59:d9:3e:9a:70:ec:73:ff:ae:79:7e:80:ba:b8:
11:5d:3c:b6:50:2a:e1:36:3d:cc:97:d4:9b:4d:62:
5b:2b:c6:79:54:b5:ee:1b:2d:81:4f:27:27:62:92:
8f:40:20:a4:80:e8:2c:ed:7c:30:a4:82:23:10:5e:
dc:ff:70:6f:55:89:74:ee:23:16:2c:b9:9a:45:13:
19:10:43:91:a6:96:7e:b6:7c:f5:96:28:87:98:02:
fb:24:93:15:18:dc:9f:fe:5e:81:98:91:d0:d5:b3:
bb:62:7d:1b:9c:34:d5:6b:9a:55:19:03:1d:8c:75:
80:81:f5:03:b4:7b:10:43:d9:40:50:90:e1:f6:82:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:11:A3:CF:E9:45:0D:59:E1:62:F0:4D:9A:8F:0D:C0:C4:BB:27:9A
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/tBGjz-lFDVnhYvBNmo8NwMS7J5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.240.0/22
45.14.80.0/24
45.86.24.0/22
92.119.24.0/22
171.22.60.0/22
185.45.94.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:8e:3f:6b:88:15:9c:c1:13:ff:d4:08:6b:cf:30:2b:be:cd:
a4:b0:0e:c9:1f:a0:21:d0:b4:7c:a5:d6:45:ed:4d:7f:04:9a:
45:91:02:46:b0:44:7c:35:1c:c3:9a:ce:21:6b:dd:19:d6:db:
19:79:fd:1f:3f:07:ec:08:64:17:89:63:3f:e4:9a:a4:43:fa:
a5:ab:87:9a:ff:e4:10:6a:72:57:54:ac:82:ab:78:0b:1e:17:
69:e7:45:6b:44:0a:5e:89:7b:7e:80:f2:98:75:8d:aa:b8:be:
5a:7e:c9:0a:3f:a1:da:0e:24:59:6e:bc:61:19:6f:ab:6d:03:
e0:62:51:57:79:96:ae:af:a1:ae:91:e7:ae:fa:eb:97:14:e2:
6e:bd:01:f7:3b:52:dd:af:d2:a1:03:4a:d1:3a:49:7f:cb:4b:
f2:3f:19:7e:ce:f8:b2:25:10:33:22:19:b2:2e:c1:55:e8:c2:
08:21:0f:b8:0a:8e:5e:b7:3f:72:a6:39:28:9b:14:4b:44:eb:
0c:ae:90:da:ff:15:7e:76:b4:6b:d9:c8:15:ba:6b:eb:0b:a7:
86:41:31:ca:63:74:9f:2c:b0:e0:01:d8:35:7a:c6:9d:fb:53:
ed:2e:32:13:c0:a2:11:a9:4b:2f:71:b0:70:e0:f7:24:a1:ee:
38:71:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 00:31:02 2024 by rpki-client on console-ams.rpki-client.org