Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/hFXDBSB1iEE4tpqvmnGwHXJbQdw.roa
File: hFXDBSB1iEE4tpqvmnGwHXJbQdw.roa (raw, json)
Hash identifier: nzL7DswxsWVwWjYnbXAS1zPBLnebUabWmA29B66gpj4=
Subject key identifier: 84:55:C3:05:20:75:88:41:38:B6:9A:AF:9A:71:B0:1D:72:5B:41:DC
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 018B4CA83D010E3A17D6BA9A72D898199508
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/hFXDBSB1iEE4tpqvmnGwHXJbQdw.roa
Signing time: Fri 20 Oct 2023 10:36:15 +0000
ROA not before: Fri 20 Oct 2023 10:36:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 45.145.40.0/22 maxlen: 22
185.219.84.0/24 maxlen: 24
194.48.217.0/24 maxlen: 24
185.254.96.0/22 maxlen: 22
185.94.29.0/24 maxlen: 24
193.41.237.0/24 maxlen: 24
94.143.231.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
45.157.232.0/22 maxlen: 22
176.96.136.0/22 maxlen: 24
2.59.132.0/22 maxlen: 24
193.41.226.0/24 maxlen: 24
62.192.153.0/24 maxlen: 24
2a0d:5940::/29 maxlen: 29
2a0c:4ac0:1200::/40 maxlen: 40
2a0c:4ac0:1100::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 20 Oct 2023 16:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:a8:3d:01:0e:3a:17:d6:ba:9a:72:d8:98:19:95:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Oct 20 10:36:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8455c3052075884138b69aaf9a71b01d725b41dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:c0:b6:a3:dd:03:be:36:5c:35:e3:ea:be:
13:49:29:3b:d0:2b:97:54:79:f7:6f:57:d1:b7:af:
43:26:90:c3:83:22:cd:29:ca:0c:48:96:32:16:26:
e3:18:68:cc:b5:e2:53:1c:7b:33:aa:57:20:e9:8f:
5d:6c:ec:ed:24:8d:7d:df:4d:bb:1e:50:42:86:e9:
e7:16:45:80:8f:ed:68:0e:ee:e6:6d:1c:e9:ea:8b:
27:5d:05:cf:f0:f4:46:51:59:b8:2b:65:74:17:6d:
c2:52:a4:e3:a8:be:62:ac:39:17:2a:a0:37:e8:fe:
a5:bd:7d:7a:5b:50:a3:19:2a:8a:60:68:a0:70:c2:
c6:7e:45:b3:23:03:0c:45:38:c0:b8:b7:36:5c:72:
ed:c8:e0:fc:13:80:c4:7d:d1:ae:08:51:85:12:21:
96:1b:37:9e:5b:93:38:85:63:9c:a8:06:70:c6:7d:
d8:b2:f3:9f:1c:b5:3c:e0:ba:13:53:4b:68:f4:64:
81:ed:55:5b:8b:54:bb:47:36:2f:25:31:19:47:4d:
e0:95:87:65:5f:3a:a1:d4:60:4c:6f:60:22:96:c8:
b7:61:92:1a:d2:7b:b1:f8:e4:b0:25:51:e1:b1:74:
a1:66:ba:76:9c:cf:20:c8:fc:71:07:9d:10:98:96:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:55:C3:05:20:75:88:41:38:B6:9A:AF:9A:71:B0:1D:72:5B:41:DC
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/hFXDBSB1iEE4tpqvmnGwHXJbQdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
45.145.40.0/22
45.157.232.0/22
62.192.153.0/24
94.143.231.0/24
176.96.136.0/22
185.94.29.0/24
185.219.84.0/24
185.254.96.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
194.48.217.0/24
IPv6:
2a0c:4ac0:1100::-2a0c:4ac0:12ff:ffff:ffff:ffff:ffff:ffff
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
74:09:f4:83:73:90:a8:31:0c:89:60:89:ef:34:cc:dc:cd:54:
19:83:99:e0:78:e2:a0:b2:a6:0f:18:ff:57:a4:37:2c:53:95:
45:13:fa:e8:a0:fa:58:01:ca:68:bd:0c:9e:1a:44:f4:c4:d4:
8b:fe:e7:b5:78:81:18:02:85:67:17:1c:8d:d0:64:c0:42:ad:
ac:25:3b:ec:30:d3:f6:7d:49:a2:63:4a:a1:03:41:08:3b:f3:
09:27:7f:a4:94:48:50:b7:ed:bf:07:16:b7:86:04:d2:71:03:
1f:b6:01:65:c0:18:5b:32:c0:33:c3:df:d7:5e:b6:40:60:12:
3c:5f:e5:35:4a:7e:da:a5:1c:52:34:fe:6b:46:0f:98:77:c9:
d3:ef:77:1b:16:75:af:73:e1:d9:d8:19:c5:bb:2d:34:99:62:
54:a6:85:5e:b8:93:04:67:86:b0:1b:d6:da:49:b7:d4:b3:80:
81:b8:33:c7:ae:ad:06:c0:93:43:73:fa:a6:96:dc:1c:b0:cc:
64:66:5a:e5:0e:43:fe:44:39:fd:8c:ae:37:6a:de:eb:28:c4:
e6:a3:5f:b8:dd:0f:c3:be:e1:a5:fd:d1:60:1c:ac:dc:a3:f6:
70:2a:66:f8:b9:4f:2b:47:33:72:c3:56:f6:30:6f:4e:3a:18:
32:f2:ee:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:43 2024 by rpki-client on console-ams.rpki-client.org