Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/bh3j2g3_OqVzqLG4YVec_aDM7Ug.roa
File: bh3j2g3_OqVzqLG4YVec_aDM7Ug.roa (raw, json)
Hash identifier: xSpiUKoGcWBPV9UGOPD4S/yTRaF5teRnvpCTDt50o9g=
Subject key identifier: 6E:1D:E3:DA:0D:FF:3A:A5:73:A8:B1:B8:61:57:9C:FD:A0:CC:ED:48
Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial: 0192B2C5BF0BFA834890F323DFE610D78ADD
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/bh3j2g3_OqVzqLG4YVec_aDM7Ug.roa
Signing time: Tue 22 Oct 2024 05:49:16 +0000
ROA not before: Tue 22 Oct 2024 05:49:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39120
IP address blocks: 45.80.172.0/23 maxlen: 23
78.138.32.0/22 maxlen: 24
83.229.8.0/22 maxlen: 22
89.21.192.0/23 maxlen: 23
89.21.194.0/23 maxlen: 23
89.21.196.0/23 maxlen: 23
89.21.198.0/23 maxlen: 23
89.21.200.0/21 maxlen: 21
89.21.208.0/20 maxlen: 20
93.88.96.0/20 maxlen: 20
94.101.48.0/22 maxlen: 22
94.101.52.0/22 maxlen: 22
94.101.56.0/22 maxlen: 22
94.101.60.0/22 maxlen: 22
185.9.208.0/22 maxlen: 22
185.104.124.0/22 maxlen: 22
185.105.92.0/22 maxlen: 22
185.105.104.0/22 maxlen: 22
185.105.128.0/22 maxlen: 22
185.105.212.0/22 maxlen: 22
185.195.8.0/22 maxlen: 22
185.217.228.0/22 maxlen: 22
195.60.190.0/23 maxlen: 23
213.167.232.0/21 maxlen: 21
217.28.68.0/22 maxlen: 22
2a01:9a80::/32 maxlen: 32
2a01:9a81::/32 maxlen: 32
2a01:9a82::/32 maxlen: 32
2a01:9a83::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 01 Nov 2024 01:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b2:c5:bf:0b:fa:83:48:90:f3:23:df:e6:10:d7:8a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
Validity
Not Before: Oct 22 05:49:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e1de3da0dff3aa573a8b1b861579cfda0cced48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:a3:0c:cd:8e:ba:9b:fa:8d:9d:ea:33:d1:
3d:95:f4:91:ea:c7:b0:3d:db:e2:fd:34:0e:7b:0b:
37:3f:7c:8d:5f:a7:fa:27:7e:43:6e:61:46:36:4e:
6d:1d:76:2b:8f:1d:8f:fe:cd:2d:0b:39:4b:a1:69:
64:14:30:b4:ad:df:a1:97:43:2d:50:d8:e1:89:41:
20:87:a5:26:20:2e:42:b9:1b:27:e2:67:ca:f9:e3:
fe:54:0e:af:78:15:e3:77:7b:3b:4e:46:76:de:63:
f5:c4:80:3f:d6:3e:18:cd:b3:35:55:c4:c3:01:00:
b2:cb:cc:2b:62:52:5f:12:47:89:dc:44:38:53:5f:
f9:24:47:f3:64:7b:cc:a8:46:b8:98:e0:7c:12:6d:
9a:10:53:08:75:1a:89:b2:98:4e:37:3a:26:29:a0:
f6:da:c0:33:d1:1a:99:9f:75:c0:d5:34:93:3e:32:
45:13:e9:1d:fa:d7:f8:7a:79:69:88:83:66:3a:c4:
33:26:55:3b:51:50:7f:51:c3:65:6a:9b:19:e9:f5:
7d:63:f5:d8:e3:ba:17:00:40:bc:33:a5:88:09:59:
ce:98:9b:6d:5c:54:db:1f:2b:17:07:66:4a:a1:9a:
f7:6c:ee:dd:fd:22:27:08:bd:b1:4d:e1:53:20:43:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1D:E3:DA:0D:FF:3A:A5:73:A8:B1:B8:61:57:9C:FD:A0:CC:ED:48
X509v3 Authority Key Identifier:
keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/bh3j2g3_OqVzqLG4YVec_aDM7Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.172.0/23
78.138.32.0/22
83.229.8.0/22
89.21.192.0/19
93.88.96.0/20
94.101.48.0/20
185.9.208.0/22
185.104.124.0/22
185.105.92.0/22
185.105.104.0/22
185.105.128.0/22
185.105.212.0/22
185.195.8.0/22
185.217.228.0/22
195.60.190.0/23
213.167.232.0/21
217.28.68.0/22
IPv6:
2a01:9a80::/30
Signature Algorithm: sha256WithRSAEncryption
50:e0:91:37:24:94:12:69:d4:2c:78:de:f3:d2:97:e2:a3:4d:
94:4f:56:73:0f:81:73:83:25:9d:82:da:bf:58:cc:fe:bf:ad:
d4:8f:76:a1:01:37:c9:93:5a:a2:38:4c:10:79:1c:43:de:7d:
08:df:90:e0:1c:3a:f4:79:f6:c0:aa:56:1a:25:c4:6a:51:86:
51:8b:0a:bd:0d:6a:da:18:4e:dd:de:e4:d0:71:c2:7f:0f:71:
89:f7:e1:e6:b4:0d:e6:02:a5:47:a4:4a:f9:02:16:ba:48:c5:
70:f7:c1:e9:52:eb:43:ac:7b:ce:3d:14:89:3b:2f:d0:10:97:
53:d9:55:e6:34:c9:58:cc:3e:ba:ae:dd:a5:e2:5d:b0:90:4b:
67:93:0e:2a:42:c3:ce:d4:55:e3:f4:de:44:90:e5:3e:0e:0f:
50:8c:86:96:40:21:a8:b6:85:3a:0c:b9:e3:2c:7d:6e:8b:ec:
49:a2:e3:9d:92:7e:8e:9a:23:79:a8:f4:fa:16:d7:da:ca:13:
ea:3f:1e:60:2b:1d:94:77:36:0c:73:ac:4a:68:e1:78:02:fb:
6e:cf:bf:cf:6a:f4:cf:4d:30:b7:59:f0:2c:70:93:02:88:6d:
4a:bc:55:54:41:bc:b3:32:f6:dd:66:dc:43:2e:60:c5:6d:2c:
6d:a1:46:36
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 1 04:03:57 2024 by rpki-client on console-fra.rpki-client.org