Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/hGAvtTBegCJ74gYsUfm6nV9BpkM.roa
File: hGAvtTBegCJ74gYsUfm6nV9BpkM.roa (raw, json)
Hash identifier: QzwCRq5Px4rWA+UH/71SOHuUBBQ/jzL29z01ODzKxu0=
Subject key identifier: 84:60:2F:B5:30:5E:80:22:7B:E2:06:2C:51:F9:BA:9D:5F:41:A6:43
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 01938686EECF056B02B6FEC71EF0F5322D8C
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/hGAvtTBegCJ74gYsUfm6nV9BpkM.roa
Signing time: Mon 02 Dec 2024 08:40:10 +0000
ROA not before: Mon 02 Dec 2024 08:40:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62005
IP address blocks: 45.86.228.0/24 maxlen: 24
45.86.229.0/24 maxlen: 24
45.86.231.0/24 maxlen: 24
45.129.199.0/24 maxlen: 24
45.143.166.0/23 maxlen: 23
62.106.66.0/24 maxlen: 24
77.72.85.0/24 maxlen: 24
91.235.234.0/24 maxlen: 24
91.242.241.0/24 maxlen: 24
146.19.143.0/24 maxlen: 24
146.19.254.0/24 maxlen: 24
176.124.32.0/24 maxlen: 24
176.124.33.0/24 maxlen: 24
185.39.18.0/24 maxlen: 24
185.123.53.0/24 maxlen: 24
193.109.120.0/24 maxlen: 24
193.200.16.0/24 maxlen: 24
193.200.17.0/24 maxlen: 24
194.26.141.0/24 maxlen: 24
194.61.120.0/24 maxlen: 24
194.61.121.0/24 maxlen: 24
195.54.160.0/24 maxlen: 24
212.46.38.0/24 maxlen: 24
213.109.147.0/24 maxlen: 24
213.109.192.0/24 maxlen: 24
2a10:1fc0:1::/48 maxlen: 48
2a10:1fc0:2::/48 maxlen: 48
2a10:1fc0:3::/48 maxlen: 48
2a10:1fc0:4::/48 maxlen: 48
2a10:1fc0:5::/48 maxlen: 48
2a10:1fc0:6::/48 maxlen: 48
2a10:1fc0:8::/48 maxlen: 48
2a10:1fc0:9::/48 maxlen: 48
2a10:1fc0:b::/48 maxlen: 48
2a10:1fc0:c::/48 maxlen: 48
2a10:1fc0:d::/48 maxlen: 48
2a10:1fc0:e::/48 maxlen: 48
2a10:1fc0:f::/48 maxlen: 48
2a10:1fc0:10::/48 maxlen: 48
2a10:1fc0:11::/48 maxlen: 48
2a10:1fc0:12::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:86:ee:cf:05:6b:02:b6:fe:c7:1e:f0:f5:32:2d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Dec 2 08:40:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84602fb5305e80227be2062c51f9ba9d5f41a643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:56:51:eb:cc:99:0e:5a:a3:53:23:00:46:64:
b9:5e:ca:4d:dd:4b:e7:07:16:e6:e7:11:9b:ec:4e:
f8:13:11:a9:c2:74:62:09:be:86:a8:ce:c7:b4:cd:
49:22:33:4b:eb:4f:05:80:ac:ba:12:1c:d3:5a:d9:
2f:26:86:60:69:01:1a:09:2c:8b:31:aa:75:f6:a2:
52:cf:36:a5:91:6e:74:c6:db:fb:16:69:58:0b:30:
31:f6:b8:0e:46:ac:6e:4c:9a:5a:9c:38:97:11:ad:
cf:82:80:3b:c0:26:3a:fa:45:0b:7f:dc:26:fe:de:
1a:dd:61:eb:c5:53:80:94:2d:c3:0e:51:9f:6f:09:
7c:ec:a6:7c:c1:70:13:ca:d0:d1:2c:d9:9c:ac:7b:
42:08:c6:a8:82:fe:4c:ee:b0:a2:e5:72:89:18:65:
9e:5c:8c:49:1c:db:6f:62:3f:0b:9d:e8:78:dd:7f:
21:a0:46:1f:62:f7:51:04:15:7b:df:aa:b5:d7:9a:
94:b7:0d:8b:55:82:cd:15:fc:b9:ee:d5:2d:1f:95:
01:6f:a7:71:1b:59:36:4a:01:b0:9c:30:bd:09:ee:
2e:e2:15:59:c9:0f:a9:fa:4c:b5:78:51:08:aa:ed:
5b:a9:50:76:39:57:3d:72:b8:eb:a6:8e:c3:bf:2f:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:60:2F:B5:30:5E:80:22:7B:E2:06:2C:51:F9:BA:9D:5F:41:A6:43
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/hGAvtTBegCJ74gYsUfm6nV9BpkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.228.0/23
45.86.231.0/24
45.129.199.0/24
45.143.166.0/23
62.106.66.0/24
77.72.85.0/24
91.235.234.0/24
91.242.241.0/24
146.19.143.0/24
146.19.254.0/24
176.124.32.0/23
185.39.18.0/24
185.123.53.0/24
193.109.120.0/24
193.200.16.0/23
194.26.141.0/24
194.61.120.0/23
195.54.160.0/24
212.46.38.0/24
213.109.147.0/24
213.109.192.0/24
IPv6:
2a10:1fc0:1::-2a10:1fc0:6:ffff:ffff:ffff:ffff:ffff
2a10:1fc0:8::/47
2a10:1fc0:b::-2a10:1fc0:12:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:b6:de:99:f8:c1:af:91:4b:e4:6f:36:d9:dc:6b:bb:07:c9:
82:c2:a4:24:a1:48:10:84:6d:7a:62:7e:41:61:06:5c:df:2a:
75:43:41:49:e7:a4:7a:c6:95:20:67:91:51:3f:76:48:f2:f3:
2e:da:fe:45:e9:57:5a:d7:c7:08:6e:82:dc:8a:d4:bd:c7:f4:
21:e3:3b:38:be:57:3f:5c:ac:c8:ae:6d:15:3f:3f:1c:7e:ab:
02:06:05:48:8a:89:35:e3:8f:9d:66:1b:b6:00:db:52:16:f1:
ef:c7:1b:e3:41:91:5b:fc:f5:ed:9e:a9:5f:f6:0a:c0:12:13:
f8:ae:b7:26:1b:70:a5:f1:14:b3:a6:00:8e:ac:36:fb:b2:c5:
8c:32:1a:7d:bf:0b:c5:f4:3c:7e:e6:02:b5:e7:37:29:bf:02:
d8:26:1c:21:a4:a6:9c:bd:85:bc:79:a9:48:14:cc:42:1c:fa:
a5:1e:34:c9:b0:d9:72:d2:53:19:45:77:7b:9a:49:d4:fc:9e:
50:b2:95:2a:9a:d4:dc:61:69:93:01:8f:27:9c:7d:e7:76:69:
6c:0d:05:bd:6e:5b:10:48:79:cd:c1:fc:18:82:10:25:5e:5b:
e4:8d:a6:c7:68:35:85:24:d6:a1:5f:85:eb:4c:0f:9a:3c:2a:
4c:8f:a3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:40:30 2025 by rpki-client