Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/5jp5mvUaR_DwJKrotUfW1YhrP9U.roa
File: 5jp5mvUaR_DwJKrotUfW1YhrP9U.roa (raw, json)
Hash identifier: 4aWBlddUhtB3mjNzRKyTrCWSB/QA5Tb2CG9ypYt5WzY=
Subject key identifier: E6:3A:79:9A:F5:1A:47:F0:F0:24:AA:E8:B5:47:D6:D5:88:6B:3F:D5
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018D3874BEC29BFBB4F6BAE63D47D4F46179
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/5jp5mvUaR_DwJKrotUfW1YhrP9U.roa
Signing time: Tue 23 Jan 2024 22:33:11 +0000
ROA not before: Tue 23 Jan 2024 22:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.149.87.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 30 Jan 2024 10:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:38:74:be:c2:9b:fb:b4:f6:ba:e6:3d:47:d4:f4:61:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 23 22:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e63a799af51a47f0f024aae8b547d6d5886b3fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:39:b2:92:8b:7d:2c:77:6d:82:16:3f:6e:
64:2e:1c:45:92:29:b9:f3:15:e5:c6:3e:3f:65:57:
4b:6b:3c:c3:b3:e2:71:9c:dc:04:88:58:09:9f:78:
a8:a6:a8:93:fd:48:93:8c:b9:85:52:33:37:d3:12:
70:70:e2:84:51:8a:6e:d2:09:cd:36:63:8a:c2:3e:
fe:c0:b8:e8:36:7f:97:f8:fc:d0:22:84:3d:08:f5:
6e:af:b8:6a:a4:1d:31:7f:1e:03:f7:cb:c8:c8:33:
67:3c:a7:cd:f3:da:4b:79:1e:94:16:ce:92:ad:1d:
97:cb:04:18:70:f2:a2:6c:53:1b:f4:63:23:b0:7b:
fe:6c:db:20:cd:6b:a0:09:8c:57:8b:a3:e0:99:fd:
a5:34:8e:17:b5:74:fe:e6:95:12:cc:94:ce:67:51:
54:43:a5:47:6c:82:77:ec:cb:62:a6:bb:99:f3:76:
43:a2:d7:b7:cc:c8:5d:ea:6f:57:40:c0:73:e0:69:
10:22:27:c2:d2:90:ea:12:91:87:c0:22:30:b1:94:
83:c5:dd:28:c3:01:18:8c:54:12:d8:d5:52:1a:33:
cb:6c:da:49:0a:18:a4:0d:3e:20:0e:0b:9a:8c:57:
e2:cf:39:f6:ea:79:d8:22:f9:56:6c:b7:37:81:b2:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3A:79:9A:F5:1A:47:F0:F0:24:AA:E8:B5:47:D6:D5:88:6B:3F:D5
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/5jp5mvUaR_DwJKrotUfW1YhrP9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.234.64.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/23
195.149.87.0/24
IPv6:
2a09:7c40::/29
2a11:3c02::/31
Signature Algorithm: sha256WithRSAEncryption
2b:49:1a:75:70:a1:47:d8:99:c1:ae:e2:80:9c:5d:67:3d:67:
b3:dd:e8:c1:f5:ba:d4:d1:29:3e:a4:b3:7d:57:85:01:6c:00:
8c:be:a7:c8:49:a6:91:ec:fc:7a:3f:e2:38:ea:9d:58:55:61:
f0:e9:87:98:0b:a4:da:e0:c7:30:4e:57:7f:fe:91:2f:4a:52:
e3:16:16:ae:56:b8:0a:cf:1d:6e:03:de:41:71:ba:f1:43:4c:
92:51:69:d1:81:d6:42:c1:97:8a:7f:e1:7a:04:43:f7:91:06:
68:b4:0a:22:19:11:ab:08:5f:b9:54:82:07:d6:ae:53:55:b9:
c8:aa:2b:1a:a4:73:96:17:f7:6e:3d:72:3e:a2:a0:49:d2:24:
5d:41:b8:85:f5:dc:c5:e8:94:99:25:e5:dd:5e:04:30:76:1c:
56:a6:b7:a9:c7:5b:52:b8:7e:85:ea:57:37:26:42:14:aa:d1:
08:8f:0b:04:f2:1f:00:9e:86:40:4a:38:e7:2b:83:23:06:6c:
31:cd:fd:e9:f3:da:33:a8:3c:b6:0a:32:e4:65:ba:26:b6:ae:
2d:bb:36:5b:ba:3c:ba:62:41:5b:0e:cc:00:0c:2c:b7:17:3b:
1b:6d:d0:2e:eb:1e:34:e6:1f:54:23:f3:06:d6:ef:e6:76:4d:
06:c0:51:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:28 2024 by rpki-client on console-ams.rpki-client.org