Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/BxazSbDXQ2lX_dG0MEIURcmfkF4.roa
File: BxazSbDXQ2lX_dG0MEIURcmfkF4.roa (raw, json)
Hash identifier: TjrP8enr/J8kR2zLzAIINilly4bX91H/Lex44Hxj3aI=
Subject key identifier: 07:16:B3:49:B0:D7:43:69:57:FD:D1:B4:30:42:14:45:C9:9F:90:5E
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01916297852C6C8F85CDA2F8CBE9B7BF4EB2
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/BxazSbDXQ2lX_dG0MEIURcmfkF4.roa
Signing time: Sat 17 Aug 2024 23:06:22 +0000
ROA not before: Sat 17 Aug 2024 23:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 Aug 2024 11:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:62:97:85:2c:6c:8f:85:cd:a2:f8:cb:e9:b7:bf:4e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Aug 17 23:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0716b349b0d7436957fdd1b430421445c99f905e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:c9:38:08:71:39:50:94:55:f4:f3:79:19:
53:b8:55:a4:88:91:7c:4a:8f:9d:ae:df:95:be:cc:
ac:fe:0f:99:73:3b:70:23:80:af:dd:9e:b3:68:35:
32:af:89:46:8c:d3:9f:14:ba:a7:83:ca:7e:e8:bb:
3e:82:a9:e2:0a:3f:fd:0e:e6:45:37:f5:d2:2c:fd:
9e:9f:e5:97:48:20:81:77:26:05:d4:09:88:5a:fc:
a0:96:c3:79:92:80:61:71:0a:63:86:93:94:3a:89:
f7:25:65:13:a8:38:c0:df:3d:67:f9:56:1d:d7:1d:
a5:ca:d2:a5:24:0f:c5:ff:da:b7:f8:1b:9a:1d:c3:
40:bc:8c:2b:d3:53:1a:62:eb:ac:e0:0a:63:8f:f3:
fa:3b:52:91:7b:5a:3a:b7:f1:dc:95:e1:c2:a4:ba:
bc:31:0c:67:bd:cd:d7:f2:cc:8a:1c:e6:f9:73:4c:
fa:a0:00:ab:47:9d:9a:fa:f0:f3:3e:a1:7c:1d:fd:
cc:fc:78:64:6c:8e:88:87:b9:57:60:30:d1:ba:ef:
4f:e8:d2:46:65:78:c5:4b:e0:da:ed:a4:5f:5d:a2:
18:fb:84:54:48:b5:68:f0:91:cd:f4:16:c8:84:bd:
1a:f2:5c:bf:f6:a4:c4:69:03:d1:84:f5:a5:17:4b:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:16:B3:49:B0:D7:43:69:57:FD:D1:B4:30:42:14:45:C9:9F:90:5E
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/BxazSbDXQ2lX_dG0MEIURcmfkF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a11:3805::/32
2a11:3c02::/31
2a14:2d80::/30
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
59:fc:b2:1f:51:5d:e9:3f:42:6a:85:38:b8:54:da:a2:5c:6b:
c2:2e:23:a3:a3:d0:21:5d:29:7c:5b:75:8e:a3:d8:59:17:86:
03:82:6e:96:d7:4f:74:bf:0c:11:7f:84:fd:cb:4d:dc:07:e8:
5f:a9:83:10:08:5b:81:a9:38:c1:39:c3:bf:be:f7:90:ba:ab:
68:dd:6c:ad:34:71:22:9d:81:9c:4d:f8:25:3d:ec:95:f7:4d:
71:d9:f0:b8:ff:08:e5:d3:31:c3:c5:01:a3:91:5c:a9:94:36:
32:bd:12:df:16:14:a3:23:4f:7e:b7:90:cd:09:09:a0:14:71:
10:56:c5:86:37:d7:a8:49:d3:c8:84:6c:83:6a:98:fa:a2:8b:
85:cc:0e:58:ee:cc:09:96:13:09:fc:98:00:60:ed:d3:e2:de:
c6:df:d1:79:48:f6:3f:9f:d4:a1:a2:11:80:72:47:26:ca:b7:
d8:af:bf:55:d1:00:5a:39:f6:a9:38:0e:2d:7b:11:61:88:7c:
fb:cc:df:a1:28:93:63:7c:ff:aa:dd:0c:a8:c8:48:8a:58:f5:
33:bc:ec:0a:e3:bc:cc:ea:03:7f:95:ff:2c:61:65:ab:8d:73:
65:cc:be:d6:30:fb:7e:89:3b:10:72:da:32:d6:40:73:64:19:
dc:c3:7c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 16:34:31 2024 by rpki-client on console-ams.rpki-client.org