Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/6I8707WvLvB6s0_jJBey57T4cV0.roa
File: 6I8707WvLvB6s0_jJBey57T4cV0.roa (raw, json)
Hash identifier: mGdl60oiS5M1PY5n4CIJAD0XPLpfFLrA0F9jA3DT7/Q=
Subject key identifier: E8:8F:3B:D3:B5:AF:2E:F0:7A:B3:4F:E3:24:17:B2:E7:B4:F8:71:5D
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018DC48DC5A0493B9DCF0FB36F51ADE87517
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/6I8707WvLvB6s0_jJBey57T4cV0.roa
Signing time: Tue 20 Feb 2024 03:27:21 +0000
ROA not before: Tue 20 Feb 2024 03:27:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.149.87.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 20 Feb 2024 16:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c4:8d:c5:a0:49:3b:9d:cf:0f:b3:6f:51:ad:e8:75:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Feb 20 03:27:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e88f3bd3b5af2ef07ab34fe32417b2e7b4f8715d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:45:b8:c3:73:ab:f0:dc:45:1a:b1:e3:65:
50:24:9e:8b:4c:f9:b7:0b:c6:9a:cb:3c:97:c5:44:
a1:bd:b5:b0:2c:4b:8b:f7:6f:8a:6a:98:1f:c6:54:
d3:c6:5c:cd:98:cb:27:27:fa:11:e9:94:40:4c:77:
9a:01:e1:25:76:0c:b9:7e:47:ba:63:6f:e2:e4:74:
3f:e1:01:55:b4:e6:ad:f8:b7:e2:87:51:90:3a:fa:
ee:05:da:f2:00:50:3e:31:95:2e:7f:eb:a2:be:a1:
a9:21:80:86:0d:6a:63:81:a2:83:8f:46:a5:9c:62:
44:7a:93:d5:cb:ca:84:36:b3:e2:60:fd:9b:58:02:
48:22:04:57:24:1a:03:16:b4:c3:f1:04:c7:5f:b9:
34:85:cc:f6:32:5b:d2:a0:b4:5c:68:1a:f6:2b:72:
d8:bc:7b:c5:ed:90:c4:89:3b:fe:3c:11:b3:2a:9f:
65:34:16:76:a4:c6:c8:db:62:cd:18:7f:42:69:0c:
16:ce:71:1b:99:b6:3b:5c:7b:2b:c3:a5:3b:10:51:
57:20:b4:40:d1:e4:67:f2:bf:29:a8:ff:4b:3f:95:
e8:85:26:b6:f7:6b:73:16:c2:7d:04:d9:8e:41:b4:
83:dc:1d:df:86:a3:ef:51:42:35:0d:c3:6d:d1:94:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8F:3B:D3:B5:AF:2E:F0:7A:B3:4F:E3:24:17:B2:E7:B4:F8:71:5D
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/6I8707WvLvB6s0_jJBey57T4cV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.234.64.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/23
195.149.87.0/24
IPv6:
2a09:7c40::/29
2a11:3c02::/31
2a14:2d80::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
63:78:8e:50:41:9d:69:55:37:8b:28:5d:3e:d6:e7:31:2a:a4:
85:c3:f9:ca:41:c4:4e:fc:a8:35:14:cf:78:bf:87:ad:3f:e3:
49:9a:22:b3:1f:29:21:f2:5e:d4:b2:2c:5c:f2:a9:fa:b0:57:
0a:b2:e5:95:ee:fd:cd:c8:51:0c:34:1a:56:04:d4:ee:4c:f4:
7f:37:c8:d2:ef:d3:c9:28:4a:d0:dd:2b:0f:47:f9:69:ac:e7:
4e:65:f1:1f:16:50:a3:6d:74:c0:b0:b6:05:06:d6:32:00:63:
5e:6a:37:9b:29:1c:16:5a:aa:25:f6:30:8e:4b:57:3d:14:8c:
7c:a3:fa:21:50:6a:b8:39:d6:f4:3a:af:53:0c:eb:01:58:2e:
d6:d0:7c:02:68:34:8f:a2:b1:86:c3:0e:81:88:ff:b4:78:15:
4f:f4:bb:97:50:96:a5:a9:91:f6:53:a1:65:61:04:f3:21:45:
90:1a:44:5b:05:76:dc:7f:87:be:59:03:b7:2a:18:3b:3b:9a:
62:62:35:03:82:be:54:4d:d9:aa:2d:db:a4:ad:72:f9:3e:92:
58:e9:ce:c8:40:89:15:18:37:8e:2f:ed:e8:d7:28:7b:ee:84:
12:d8:39:d8:4b:74:85:0b:5d:1d:cd:1b:23:87:92:ad:67:37:
1c:5a:1e:28
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgISAY3EjcWgSTudzw+zb1Gt6HUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl
YWNkNDAwHhcNMjQwMjIwMDMyNzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODhmM2JkM2I1YWYyZWYwN2FiMzRmZTMyNDE3YjJlN2I0Zjg3MTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo81FuMNzq/DcRRqx42VQJJ6LTPm3
C8aayzyXxUShvbWwLEuL92+KapgfxlTTxlzNmMsnJ/oR6ZRATHeaAeEldgy5fke6
Y2/i5HQ/4QFVtOat+Lfih1GQOvruBdryAFA+MZUuf+uivqGpIYCGDWpjgaKDj0al
nGJEepPVy8qENrPiYP2bWAJIIgRXJBoDFrTD8QTHX7k0hcz2MlvSoLRcaBr2K3LY
vHvF7ZDEiTv+PBGzKp9lNBZ2pMbI22LNGH9CaQwWznEbmbY7XHsrw6U7EFFXILRA
0eRn8r8pqP9LP5XohSa292tzFsJ9BNmOQbSD3B3fhqPvUUI1DcNt0ZRylwIDAQAB
o4ICyTCCAsUwHQYDVR0OBBYEFOiPO9O1ry7werNP4yQXsue0+HFdMB8GA1UdIwQY
MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt
MTE5ZWZjYmIyMDIzLzEvNkk4NzA3V3ZMdkI2czBfakpCZXk1N1Q0Y1YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz
LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHeBggrBgEFBQcBBwEB/wSBzjCByzCBjwQCAAEwgYgDBAIt
Q+QDBAIteLADBAA+AwwDBAJKd8AwDAMEAlBczAMEAFBczgMEAVnd4AMEAFvCoTAM
AwQAW+HZAwQCW+HYAwQCZyO8AwQCZ2oAAwQCZ3FEAwQCsHhAAwQCsHhIAwQCuepA
AwQCuezoAwQCufJUAwQCufqUAwQAwcvKAwQBwvZyAwQAw5VXMDcEAgACMDEDBQMq
CXxAAwUBKhE8AgMFACoULYADBQAqFC6AAwUAKhQvgAMFACoUMIADBQAqFDiAMA0G
CSqGSIb3DQEBCwUAA4IBAQBjeI5QQZ1pVTeLKF0+1ucxKqSFw/nKQcRO/Kg1FM94
v4etP+NJmiKzHykh8l7Usixc8qn6sFcKsuWV7v3NyFEMNBpWBNTuTPR/N8jS79PJ
KErQ3SsPR/lprOdOZfEfFlCjbXTAsLYFBtYyAGNeajebKRwWWqol9jCOS1c9FIx8
o/ohUGq4Odb0Oq9TDOsBWC7W0HwCaDSPorGGww6BiP+0eBVP9LuXUJalqZH2U6Fl
YQTzIUWQGkRbBXbcf4e+WQO3Khg7O5piYjUDgr5UTdmqLdukrXL5PpJY6c7IQIkV
GDeOL+3o1yh77oQS2DnYS3SFC10dzRsjh5KtZzccWh4o
-----END CERTIFICATE-----
Generated at Tue Feb 20 20:34:56 2024 by rpki-client on console-fra.rpki-client.org