Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/9cEGWKtUOLSbrnzGWapyxqC6ZdY.roa
File: 9cEGWKtUOLSbrnzGWapyxqC6ZdY.roa (raw, json)
Hash identifier: /JkiieD+S8ljAOs8ioTPyUUV1czoLIz3jvxV5r/KtE0=
Subject key identifier: F5:C1:06:58:AB:54:38:B4:9B:AE:7C:C6:59:AA:72:C6:A0:BA:65:D6
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018B8AC08A12E0179889D9DD869DAE1C1231
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/9cEGWKtUOLSbrnzGWapyxqC6ZdY.roa
Signing time: Wed 01 Nov 2023 11:59:15 +0000
ROA not before: Wed 01 Nov 2023 11:59:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.120.176.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
193.203.202.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Nov 2023 14:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:c0:8a:12:e0:17:98:89:d9:dd:86:9d:ae:1c:12:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Nov 1 11:59:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5c10658ab5438b49bae7cc659aa72c6a0ba65d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:92:e0:6a:95:cb:45:67:42:a1:b3:48:c5:
28:93:df:4b:f4:1b:cd:81:b0:8b:2a:e2:94:f9:63:
4b:04:fb:be:8c:6f:0d:e8:42:20:02:d2:e4:50:b7:
29:04:e8:22:db:22:96:95:34:af:0c:ed:c4:f2:23:
28:83:0a:47:20:2f:ab:6e:37:44:25:cb:06:af:13:
96:0a:9a:b2:52:4f:a8:ce:f8:55:c1:73:96:da:48:
9d:30:da:ad:c8:4b:1f:47:90:c6:9a:af:35:f5:4c:
79:a3:6a:a9:6b:72:f0:0a:39:01:5e:7e:1b:0d:8a:
c5:bc:b9:d0:92:78:6c:e7:0e:78:87:73:53:43:ae:
02:ce:f7:a9:ef:9a:9c:75:cd:41:a8:65:68:03:06:
62:91:73:4a:a3:91:81:b4:ec:62:fc:45:f1:06:61:
bf:8c:a3:cf:71:07:98:84:86:01:9a:39:8d:84:f3:
e6:87:6b:90:d7:5a:48:ec:e5:0d:e6:3f:49:f5:5d:
e4:6b:52:e2:0d:4f:b7:c9:c2:87:ff:f7:5a:33:d1:
8e:b7:52:2d:4a:24:61:62:8f:52:5a:55:b5:46:e0:
67:ec:a3:f1:7b:91:a2:14:33:a1:76:11:ff:98:d1:
0b:8c:31:a6:b3:18:a5:c5:ce:8d:44:6f:a4:78:a6:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C1:06:58:AB:54:38:B4:9B:AE:7C:C6:59:AA:72:C6:A0:BA:65:D6
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/9cEGWKtUOLSbrnzGWapyxqC6ZdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/24
91.194.161.0/24
103.35.188.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
195.149.87.0/24
IPv6:
2a09:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
57:3c:c9:7a:b4:0b:5b:d2:6a:fd:9e:f9:75:9e:d2:cc:9d:b1:
b7:bc:f9:9f:8d:11:35:83:dd:66:2b:26:f1:44:16:8d:11:9c:
66:be:e2:e2:9c:68:b5:59:69:ae:1e:b2:26:78:36:42:c4:26:
40:73:8f:8c:2c:92:5f:6a:aa:ea:19:67:51:94:a0:64:a7:d8:
0e:1a:74:65:97:5a:dd:a5:3b:13:5c:44:a2:3f:de:d5:5e:0c:
df:ae:f5:ca:8d:1d:af:9b:a5:39:69:03:5d:ce:fd:53:1b:37:
15:0e:b1:c9:7c:89:de:4d:6b:2f:5d:53:57:a4:51:93:12:25:
54:0b:09:cb:6c:d0:92:42:0c:c8:80:c0:56:ee:f5:a4:56:b9:
23:c7:74:fc:d9:7e:0c:cc:28:e9:9b:35:ad:70:cf:dc:d0:da:
c8:dc:81:0e:79:69:31:fc:df:b6:de:eb:63:5c:c7:e8:70:4f:
24:95:55:97:56:15:e6:ea:8f:71:26:8e:0b:23:50:ca:81:6e:
cf:ad:99:94:d0:c1:c9:19:ac:8a:46:4b:96:12:d8:cb:29:90:
dc:11:5e:25:0c:cd:de:d1:0a:2b:1e:cf:be:c7:9c:da:c3:34:
4e:8b:6c:2a:2a:2c:06:2d:9b:c8:c3:49:ed:61:15:ea:e3:80:
c0:50:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org