Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/OJ_Llm6PAPy-4dawRtGZ_dCJBVY.roa
File: OJ_Llm6PAPy-4dawRtGZ_dCJBVY.roa (raw, json)
Hash identifier: tz/e/gKrWW8kSVJrcdBYTCMEnnMFvdiLNBz4Z0Dscxs=
Subject key identifier: 38:9F:CB:96:6E:8F:00:FC:BE:E1:D6:B0:46:D1:99:FD:D0:89:05:56
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018D1BF05542F89ACA8B573FFFE6AAA8510C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/OJ_Llm6PAPy-4dawRtGZ_dCJBVY.roa
Signing time: Thu 18 Jan 2024 09:39:11 +0000
ROA not before: Thu 18 Jan 2024 09:39:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 45.80.80.0/24 maxlen: 24
45.80.82.0/23 maxlen: 23
45.80.82.0/24 maxlen: 24
45.80.83.0/24 maxlen: 24
45.83.50.0/23 maxlen: 23
45.83.50.0/24 maxlen: 24
45.83.51.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
80.66.114.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.116.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.118.0/24 maxlen: 24
80.66.119.0/24 maxlen: 24
80.66.120.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
80.66.126.0/24 maxlen: 24
80.66.127.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
89.44.151.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
94.198.47.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
185.203.22.0/24 maxlen: 24
185.203.23.0/24 maxlen: 24
185.229.212.0/22 maxlen: 22
185.229.212.0/24 maxlen: 24
185.229.213.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
217.76.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 11:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1b:f0:55:42:f8:9a:ca:8b:57:3f:ff:e6:aa:a8:51:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 18 09:39:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=389fcb966e8f00fcbee1d6b046d199fdd0890556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:ad:4c:4b:4e:18:d7:07:98:ca:4a:2e:87:
46:40:d3:c4:be:82:03:2b:fe:c7:84:0d:f4:e0:b3:
3f:34:54:9d:e7:62:8d:b7:5b:b3:03:bc:ac:4a:5a:
24:ec:cf:0f:32:e9:9c:81:af:27:9d:a8:48:8e:08:
27:35:70:09:1a:b0:e0:f0:79:eb:45:45:61:b0:9f:
58:ec:82:00:9d:71:6a:47:db:50:60:45:34:a5:21:
e2:18:16:40:3b:18:f7:d6:db:9b:65:27:73:af:eb:
67:24:3a:1e:38:c9:fc:0b:d4:d1:34:63:79:45:39:
44:68:17:c3:b5:9d:43:1b:b2:09:33:6b:36:d0:b2:
36:45:90:aa:1b:aa:75:2a:1f:bc:ad:bf:8b:e0:c7:
99:55:39:6c:20:c7:89:15:1e:0d:31:0b:80:f2:14:
4d:06:c8:b4:63:d2:6d:e7:63:7c:de:3c:99:ba:84:
5c:d0:60:da:d1:28:20:7c:b8:6e:0a:d5:7b:57:4f:
7d:70:73:82:e3:05:c4:05:b6:1b:1d:3e:57:ca:66:
b1:17:74:67:e9:65:01:04:6f:07:42:12:39:9f:e9:
bd:75:c1:ea:ab:17:11:d9:b9:e9:73:1a:63:98:3b:
0b:a7:d5:c1:65:20:a3:4f:b4:29:5a:c0:13:a7:11:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9F:CB:96:6E:8F:00:FC:BE:E1:D6:B0:46:D1:99:FD:D0:89:05:56
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/OJ_Llm6PAPy-4dawRtGZ_dCJBVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.80.0/24
45.80.82.0/23
45.83.50.0/23
80.66.112.0-80.66.121.255
80.66.123.0-80.66.127.255
89.42.70.0/24
89.44.150.0/23
94.198.46.0/23
178.19.32.0/23
178.19.44.0/24
178.19.47.0/24
185.203.22.0/23
185.229.212.0/22
185.242.175.0/24
217.76.252.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6a:d0:e4:49:c1:dc:0c:ca:ab:a6:53:3d:06:03:e9:df:e8:
57:1e:58:dd:91:8c:dc:8d:31:f9:a1:a0:bd:a0:0b:f7:90:2f:
4a:44:65:b7:aa:6c:d7:2c:f7:25:3c:73:8c:97:d0:eb:f5:df:
f4:f2:09:ba:5d:c5:57:cf:0e:53:7c:c7:bd:ba:91:60:e2:97:
01:ff:4f:ed:d8:19:3d:f9:ea:c4:2d:8d:f7:86:68:c0:30:e5:
9c:db:e8:19:e7:ca:df:04:97:b3:9b:ae:4f:d2:e4:d0:2e:f8:
30:70:68:e9:9e:0d:30:83:ab:cb:25:37:ea:55:c9:88:ba:06:
25:79:94:bc:6b:0e:4a:c1:fb:cf:3c:d5:e1:b0:6c:8f:8c:a1:
62:d4:bb:41:0f:67:98:b2:ba:02:51:1d:89:26:be:d3:38:8d:
6d:20:f9:8a:9f:0f:84:63:e6:6a:1d:d1:53:e7:10:d7:08:03:
a5:dc:36:94:0e:fd:48:11:cd:9c:96:73:76:9c:77:11:19:54:
c3:41:17:ff:87:4c:0c:ae:e7:e5:fb:21:2c:1f:5e:1c:d3:a4:
7c:c1:e5:96:b1:f9:48:0b:e0:78:a1:c8:ac:fa:f7:56:22:de:
72:d4:9d:c0:65:74:69:23:ae:f4:5a:dd:7b:cf:1b:bc:1b:97:
37:48:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 16:40:16 2024 by rpki-client on console-ams.rpki-client.org