Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/C62rlA3PTmGbEu3Z8tWdrNI_aFA.roa
File: C62rlA3PTmGbEu3Z8tWdrNI_aFA.roa (raw, json)
Hash identifier: fDX5Aflo/CLrrg+7UBmBYElRBto5m5B9rUP4qvCOtfU=
Subject key identifier: 0B:AD:AB:94:0D:CF:4E:61:9B:12:ED:D9:F2:D5:9D:AC:D2:3F:68:50
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 019229BFCD328DDDABB796072975326E4F69
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/C62rlA3PTmGbEu3Z8tWdrNI_aFA.roa
Signing time: Wed 25 Sep 2024 15:14:48 +0000
ROA not before: Wed 25 Sep 2024 15:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 02 Oct 2024 07:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:bf:cd:32:8d:dd:ab:b7:96:07:29:75:32:6e:4f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Sep 25 15:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0badab940dcf4e619b12edd9f2d59dacd23f6850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:80:fc:8e:90:9d:9f:0d:ca:ea:dc:48:e5:
cf:51:5b:d1:d5:61:e2:06:93:43:8e:98:aa:fe:23:
c2:f0:7a:54:54:49:15:58:c4:22:aa:d4:c2:5e:0d:
89:cd:de:14:14:29:aa:c6:02:56:e3:a1:6c:25:87:
77:42:be:f5:4a:d8:19:b6:80:4f:f9:92:a1:cf:2b:
71:64:d8:89:b2:5c:5b:a9:19:78:90:7c:dd:ba:93:
bb:bf:d5:4b:aa:47:4f:59:2d:5f:cd:fc:e0:b0:d6:
10:71:78:1c:7c:32:8a:7e:01:15:51:cf:fc:2d:a0:
f8:c2:75:15:3b:dc:23:ef:eb:73:de:43:24:6d:d7:
b7:77:99:44:d3:5e:09:f2:ae:51:2c:3b:ff:da:c3:
68:4f:e7:b6:51:ee:c9:ff:bb:dd:d2:61:c4:bd:64:
b5:d6:90:62:de:b6:c5:11:c3:0a:f1:4a:2e:6d:01:
ce:8a:01:6f:c0:12:8b:08:cc:d8:58:40:db:64:ce:
ae:df:a4:b8:52:98:9d:15:13:a2:f4:e8:8d:2c:20:
af:18:c0:48:10:53:c5:d8:51:7f:44:ea:51:5f:c7:
f5:ef:3f:1a:15:97:cf:10:d7:25:1e:33:ce:65:47:
08:a8:0a:34:38:ca:14:98:56:72:e9:b8:f7:df:44:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AD:AB:94:0D:CF:4E:61:9B:12:ED:D9:F2:D5:9D:AC:D2:3F:68:50
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/C62rlA3PTmGbEu3Z8tWdrNI_aFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/22
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a11:3805::/32
2a11:3c02::/31
2a14:2d80::/30
2a14:2d85::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
90:48:46:9b:68:42:fa:e6:1b:7d:9a:75:d3:a8:ff:f5:80:bd:
db:18:5b:b2:ff:cf:50:ca:84:5d:bb:01:77:e9:08:a7:15:c6:
86:b5:2c:4b:6c:80:fd:98:fe:ab:c0:f6:b2:90:57:7a:2b:bb:
ef:29:bf:d0:14:0f:48:ca:aa:5b:12:fe:43:9d:ec:cc:fc:80:
c0:f3:41:ed:fe:d2:27:0b:27:7f:e6:ff:37:5c:e5:54:15:33:
6a:1a:6a:71:1a:31:d6:e8:93:16:84:be:53:f8:f9:f5:d6:54:
8f:65:91:f7:f0:79:6b:73:0c:d9:b0:e4:e5:64:b4:54:70:53:
20:1c:f3:b6:6d:3d:bc:f3:be:96:10:ee:6c:51:00:13:41:b8:
db:d5:08:8c:b3:dc:1e:40:0b:0b:72:2d:42:12:8c:61:f6:7f:
50:d9:87:4d:ad:b0:49:3a:73:18:82:d0:c0:89:83:61:0e:7f:
03:d6:df:8a:a3:03:d7:50:18:72:74:3e:3f:8a:55:84:62:fe:
d3:2d:d1:5c:48:78:fe:a8:02:fe:08:7c:34:45:1b:1a:ae:ff:
2b:08:c0:3e:64:4c:05:d7:ef:32:8d:0f:db:c2:81:87:a0:2d:
d0:d1:19:28:6e:58:37:9f:89:ca:d8:50:47:9f:b8:1e:6d:80:
01:20:d3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 10:53:38 2024 by rpki-client on console-ams.rpki-client.org