Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/F2IHiAusoeshrDvcR-xPTJR0JRg.roa
File: F2IHiAusoeshrDvcR-xPTJR0JRg.roa (raw, json)
Hash identifier: TKwBw+Els3UZb10lAKxkf1XGobFaO7QaNB4gmpcwvHE=
Subject key identifier: 17:62:07:88:0B:AC:A1:EB:21:AC:3B:DC:47:EC:4F:4C:94:74:25:18
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0190FB2020D6434CEC1FE1CEB11D8C2241AC
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/F2IHiAusoeshrDvcR-xPTJR0JRg.roa
Signing time: Sun 28 Jul 2024 20:55:05 +0000
ROA not before: Sun 28 Jul 2024 20:55:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 45.80.80.0/24 maxlen: 24
45.80.82.0/23 maxlen: 23
45.80.82.0/24 maxlen: 24
45.80.83.0/24 maxlen: 24
45.83.50.0/23 maxlen: 23
45.83.50.0/24 maxlen: 24
45.83.51.0/24 maxlen: 24
80.66.112.0/20 maxlen: 20
80.66.112.0/23 maxlen: 23
80.66.114.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.116.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.118.0/24 maxlen: 24
80.66.119.0/24 maxlen: 24
80.66.120.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.122.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
80.66.126.0/24 maxlen: 24
80.66.127.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
89.44.151.0/24 maxlen: 24
91.132.31.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
94.198.47.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
185.203.20.0/22 maxlen: 22
185.203.20.0/24 maxlen: 24
185.203.21.0/24 maxlen: 24
185.203.22.0/24 maxlen: 24
185.203.23.0/24 maxlen: 24
185.229.212.0/22 maxlen: 22
185.229.212.0/24 maxlen: 24
185.229.213.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
193.178.212.0/24 maxlen: 24
193.178.218.0/24 maxlen: 24
193.186.1.0/24 maxlen: 24
193.186.11.0/24 maxlen: 24
194.15.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 19:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fb:20:20:d6:43:4c:ec:1f:e1:ce:b1:1d:8c:22:41:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 28 20:55:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=176207880baca1eb21ac3bdc47ec4f4c94742518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:8b:d2:dd:76:32:d5:c2:3c:36:4a:fd:56:
f7:bd:39:7c:45:0a:16:91:c7:b8:5a:03:7f:96:95:
61:e0:f9:58:d4:77:9b:b8:c3:8d:57:df:fa:3f:27:
38:e3:6c:42:e9:e1:2a:49:2a:05:46:fa:18:ce:2c:
36:61:94:8f:7e:59:5a:e2:49:71:3d:13:43:e4:36:
75:0a:28:61:54:24:8d:cc:59:72:cd:d7:3a:c6:50:
fc:d9:72:86:79:1c:79:49:6f:2a:cb:26:d8:c2:50:
0f:98:b3:3e:15:ab:48:d2:e9:db:02:05:88:58:25:
cc:86:82:d5:8d:a2:11:65:a3:c4:da:b6:2e:a3:c6:
32:80:81:50:8f:c3:91:9b:8a:d5:19:57:26:fc:eb:
48:e7:06:19:2e:02:40:53:05:79:2b:65:7d:10:9d:
29:f7:be:59:ec:d3:bf:1e:91:1d:8a:d0:2d:c7:e8:
30:fb:52:0c:a1:23:53:df:a3:d2:77:da:2e:f5:fa:
cc:2e:ab:60:96:d7:dc:fb:78:a2:b5:54:74:23:38:
1d:3f:44:56:35:c3:02:bf:85:2f:82:ec:12:6c:ae:
ac:bc:9f:bb:c2:a0:0b:1f:36:d1:46:83:a0:90:13:
c4:a8:58:db:b3:d1:19:f5:3c:4f:eb:85:f5:00:e4:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:07:88:0B:AC:A1:EB:21:AC:3B:DC:47:EC:4F:4C:94:74:25:18
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/F2IHiAusoeshrDvcR-xPTJR0JRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.80.0/24
45.80.82.0/23
45.83.50.0/23
80.66.112.0/20
89.42.70.0/24
89.44.150.0/23
91.132.31.0/24
94.198.46.0/23
178.19.32.0/23
178.19.44.0/24
178.19.47.0/24
185.203.20.0/22
185.229.212.0/22
185.242.175.0/24
193.178.212.0/24
193.178.218.0/24
193.186.1.0/24
193.186.11.0/24
194.15.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:20:26:f4:49:b2:0f:ee:05:97:3e:9f:f3:54:4e:b9:31:8c:
de:94:a3:84:ae:19:6a:ce:7e:6e:45:68:c7:58:8c:84:1c:23:
d4:db:25:e5:c6:f4:99:e0:4d:2a:ab:83:ee:a7:32:d9:24:0c:
28:75:54:24:8c:69:1a:07:7d:51:9d:16:e0:3d:a3:80:b3:35:
3a:d8:eb:4d:af:f4:dc:80:da:de:8d:3d:cb:78:7b:62:9a:c3:
b8:67:c7:f3:68:75:73:2d:82:39:75:da:bc:9e:99:c7:c5:b6:
48:60:80:dd:5a:ae:d5:c8:99:19:48:52:af:f5:ed:ad:ff:b9:
11:07:84:c2:77:09:c4:75:46:9a:86:69:77:0a:ef:7f:ed:d9:
9f:ce:ff:ba:99:87:1e:4f:4d:aa:b2:93:d6:0c:54:1e:96:6d:
df:25:69:b9:50:84:3d:22:10:fa:21:aa:a6:73:dd:72:72:82:
be:b2:35:60:ad:6e:25:23:46:14:60:02:6f:98:da:17:85:fc:
0f:3f:93:4f:53:a7:a6:7d:ea:fa:ec:e7:43:45:19:5d:b8:7d:
42:39:33:1b:e9:f1:f7:5b:08:3c:5b:27:6c:7e:17:47:2b:04:
f3:06:14:92:ad:ae:37:6c:41:3e:67:16:db:e1:27:51:33:12:
43:4e:ea:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 29 21:26:06 2024 by rpki-client on console-fra.rpki-client.org