Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/7X4JY00P1Hd4io7T6dvN2CEQQrQ.roa
File: 7X4JY00P1Hd4io7T6dvN2CEQQrQ.roa (raw, json)
Hash identifier: EDqObfPimwCut5e2r9BPTe0g3qjpdFEGyXhtvRB2sh0=
Subject key identifier: ED:7E:09:63:4D:0F:D4:77:78:8A:8E:D3:E9:DB:CD:D8:21:10:42:B4
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018AC6FBFBA9258F4A1401448D5EEE92B88D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/7X4JY00P1Hd4io7T6dvN2CEQQrQ.roa
Signing time: Sun 24 Sep 2023 11:38:37 +0000
ROA not before: Sun 24 Sep 2023 11:38:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202766
IP address blocks: 94.198.47.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
45.80.82.0/23 maxlen: 23
45.80.80.0/24 maxlen: 24
45.80.83.0/24 maxlen: 24
45.80.82.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
45.83.50.0/24 maxlen: 24
45.83.51.0/24 maxlen: 24
45.83.50.0/23 maxlen: 23
178.19.47.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
185.229.212.0/22 maxlen: 22
185.229.213.0/24 maxlen: 24
185.229.212.0/24 maxlen: 24
80.66.118.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.116.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.114.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
89.44.151.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.120.0/24 maxlen: 24
80.66.119.0/24 maxlen: 24
80.66.127.0/24 maxlen: 24
80.66.126.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c6:fb:fb:a9:25:8f:4a:14:01:44:8d:5e:ee:92:b8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 24 11:38:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed7e09634d0fd477788a8ed3e9dbcdd8211042b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:c5:47:50:23:db:8d:06:50:80:e1:58:3b:
3a:13:bd:b4:42:a0:5b:8b:a2:64:2b:14:ec:ab:28:
2c:bc:4c:76:39:98:ed:86:92:91:90:80:be:38:59:
ab:65:44:28:ce:0b:30:1b:df:29:0d:a9:07:98:03:
10:21:97:0f:18:d1:2c:c0:19:d5:79:30:9e:68:e8:
e0:48:13:51:38:0a:95:3d:b4:8a:7f:37:5d:34:86:
cf:12:32:57:24:03:77:a7:53:83:6f:c7:40:dc:64:
1e:9b:e6:38:30:22:a3:14:53:3e:9d:8c:9a:09:56:
7a:e6:66:a9:6a:33:9c:e8:d4:5d:e8:d1:5c:68:b1:
a1:1e:b1:45:be:5b:10:40:26:7d:54:af:1e:6c:31:
eb:bb:15:73:54:bf:82:58:22:40:35:71:2f:ff:2d:
97:3e:8f:9e:f1:e4:e9:50:89:5b:17:e1:c0:6d:87:
31:80:e3:c6:2d:3c:30:c3:22:38:b2:94:61:10:58:
0a:bc:55:88:ff:a0:9e:7e:c5:74:6a:41:d1:be:e7:
50:41:d0:c8:95:2f:e0:99:32:b2:fb:66:5e:cd:6a:
fd:8a:ee:a0:9e:02:14:61:45:8e:80:c9:1a:15:b6:
50:c0:66:22:dd:49:7f:9f:c5:b0:54:07:a6:2c:4c:
89:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7E:09:63:4D:0F:D4:77:78:8A:8E:D3:E9:DB:CD:D8:21:10:42:B4
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/7X4JY00P1Hd4io7T6dvN2CEQQrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.80.0/24
45.80.82.0/23
45.83.50.0/23
80.66.112.0-80.66.121.255
80.66.123.0-80.66.127.255
89.42.70.0/24
89.44.150.0/23
94.198.46.0/23
178.19.32.0/23
178.19.44.0/24
178.19.47.0/24
185.229.212.0/22
185.242.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:06:cd:2c:d8:c4:97:4b:5a:c1:b3:7b:56:83:55:56:2f:20:
e8:5d:79:aa:57:77:e5:3b:ad:35:7b:ba:b7:53:99:66:4f:8d:
6e:83:d9:4b:c7:61:d8:cb:e4:4e:89:f6:dc:f1:48:c5:b2:aa:
23:b4:d8:a1:91:30:96:86:93:f1:11:85:ec:cb:46:53:7d:f8:
79:87:5d:52:2d:e3:02:22:0e:e1:28:92:00:d5:ae:e7:11:3f:
d5:06:ba:bf:b6:20:b5:ac:fe:c7:f0:c3:2b:54:be:f4:90:1a:
a4:00:6b:13:59:2e:79:1b:84:1f:2a:37:2d:fe:24:35:ee:a9:
dc:6a:1f:fc:f8:98:06:3f:c3:c6:81:98:33:5f:2a:ab:55:dc:
39:62:4a:a2:8f:e7:71:40:e3:93:c0:e5:31:ec:14:92:c1:35:
8b:61:06:06:a8:de:32:2c:e1:53:3e:a0:e8:33:66:0a:fe:dc:
d0:fb:c3:0a:a4:12:a4:c9:ae:95:2f:7d:53:d1:41:88:c5:f9:
75:3b:39:d2:ba:a4:1e:34:ea:04:d6:43:fe:4d:04:3b:4e:e0:
73:80:f1:03:bd:48:56:70:0a:69:42:f3:bb:70:93:8b:a9:1a:
75:01:39:e6:81:18:b0:a9:42:c1:6c:35:59:05:79:62:99:38:
c4:b5:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 18:59:32 2023 by rpki-client on console-fra.rpki-client.org