Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/j7FkRiIqDKh8RoYx8U2OUU6h1I8.roa
File: j7FkRiIqDKh8RoYx8U2OUU6h1I8.roa (raw, json)
Hash identifier: FlXpFjr/GsgTk4BSPrVrfMnYZrvHoCva37sLB9fhSlU=
Subject key identifier: 8F:B1:64:46:22:2A:0C:A8:7C:46:86:31:F1:4D:8E:51:4E:A1:D4:8F
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01896553B6E797619F638AD090F8C5117C50
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/j7FkRiIqDKh8RoYx8U2OUU6h1I8.roa
Signing time: Mon 17 Jul 2023 19:28:52 +0000
ROA not before: Mon 17 Jul 2023 19:28:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.149.80.0/24 maxlen: 24
45.149.82.0/24 maxlen: 24
45.149.81.0/24 maxlen: 24
195.245.111.0/24 maxlen: 24
185.179.198.0/24 maxlen: 24
45.140.171.0/24 maxlen: 24
45.139.29.0/24 maxlen: 24
45.139.28.0/24 maxlen: 24
45.139.31.0/24 maxlen: 24
213.139.192.0/24 maxlen: 24
213.139.195.0/24 maxlen: 24
213.139.193.0/24 maxlen: 24
45.149.134.0/24 maxlen: 24
45.152.227.0/24 maxlen: 24
45.137.188.0/24 maxlen: 24
45.137.191.0/24 maxlen: 24
194.156.95.0/24 maxlen: 24
45.150.63.0/24 maxlen: 24
45.150.62.0/24 maxlen: 24
45.145.2.0/24 maxlen: 24
45.145.161.0/24 maxlen: 24
45.133.219.0/24 maxlen: 24
45.137.52.0/24 maxlen: 24
45.137.55.0/24 maxlen: 24
77.83.4.0/24 maxlen: 24
77.83.7.0/24 maxlen: 24
77.83.6.0/24 maxlen: 24
77.83.5.0/24 maxlen: 24
45.145.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Aug 2023 08:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:53:b6:e7:97:61:9f:63:8a:d0:90:f8:c5:11:7c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 17 19:28:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fb16446222a0ca87c468631f14d8e514ea1d48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2e:08:1f:77:41:d2:17:5b:fc:98:a2:d1:77:
9e:b5:0d:f0:c5:62:94:d7:b5:ae:f8:b4:22:2c:46:
49:08:1b:c7:e3:3e:ae:16:62:26:f0:f9:56:5d:4a:
80:c5:d9:59:b3:15:a8:0b:25:2c:89:e2:94:5c:dd:
f5:67:4b:d8:db:d3:3a:82:a0:ae:32:68:db:b1:8e:
7f:44:3d:7d:6e:62:b8:77:69:4d:b6:41:17:eb:95:
2c:71:8d:b5:89:3d:41:77:1c:b0:ca:fa:a2:85:f5:
eb:03:9e:53:e2:58:06:8a:dc:53:cf:55:22:60:8e:
2a:56:a4:83:df:77:27:8e:bd:7e:44:16:8d:27:7d:
99:3c:96:6c:64:2e:92:4b:53:a7:00:0c:df:bc:f6:
c0:45:38:9a:0b:bd:a6:3d:94:07:9f:16:e7:66:cd:
63:36:fe:f4:0c:07:12:2a:65:6b:b2:7d:93:e4:4d:
8e:7b:76:e4:70:59:7d:14:3d:be:1d:76:67:e9:ea:
40:ba:7d:c7:e3:d5:19:5e:6e:ac:77:eb:f2:48:09:
1e:6a:61:a9:28:f7:16:d1:33:6e:36:3d:d8:e3:1d:
be:cd:e8:48:79:aa:0c:31:9a:f5:e8:b0:fc:fa:09:
77:93:fb:c9:66:b9:e2:86:25:48:05:42:39:9c:4c:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B1:64:46:22:2A:0C:A8:7C:46:86:31:F1:4D:8E:51:4E:A1:D4:8F
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/j7FkRiIqDKh8RoYx8U2OUU6h1I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.219.0/24
45.137.52.0/24
45.137.55.0/24
45.137.188.0/24
45.137.191.0/24
45.139.28.0/23
45.139.31.0/24
45.140.171.0/24
45.145.2.0/24
45.145.90.0/24
45.145.161.0/24
45.149.80.0-45.149.82.255
45.149.134.0/24
45.150.62.0/23
45.152.227.0/24
77.83.4.0/22
185.179.198.0/24
194.156.95.0/24
195.245.111.0/24
213.139.192.0/23
213.139.195.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8f:4c:8c:63:c4:3c:45:22:57:c3:39:61:7d:31:67:ba:88:
2d:8e:53:5c:ff:ac:ea:bf:66:be:81:c3:73:73:dc:b6:b0:e9:
9b:1e:e1:44:31:75:fa:ea:b7:95:8e:7e:0e:17:24:04:8d:64:
25:e0:7e:18:b7:34:a7:0c:45:94:1b:b9:2c:42:69:e5:92:ee:
ee:c4:4b:83:8c:2f:f1:4d:b9:ad:ec:1c:3e:3f:ad:1b:ec:5b:
cd:e5:bd:d1:7e:7c:eb:11:a9:80:ab:39:af:4f:07:69:95:24:
81:44:ff:3d:bd:6f:f2:b2:bd:ab:9d:13:45:0d:10:50:f0:ff:
cf:48:ae:cc:49:b5:de:75:b8:d6:3b:7d:68:cd:52:90:b4:a4:
b1:ee:36:c9:1f:7f:16:35:35:83:22:ee:ee:ba:ea:c5:d5:86:
8f:ea:ca:68:4a:fe:76:2e:76:e8:46:89:93:bd:1c:cc:7c:81:
16:dd:40:b5:d4:ae:89:f4:ac:ef:5b:dc:ac:d9:27:52:76:5f:
1b:b8:02:48:16:a7:ab:4e:70:e5:2a:d0:4b:2f:30:ab:43:4c:
f0:24:a9:fe:c0:c3:84:52:1c:b6:fc:53:1d:fb:6d:2e:ac:06:
67:dc:b3:ce:17:9a:cf:5c:2a:a1:62:ed:52:58:54:5f:7a:38:
34:7f:35:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org