Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/ElXuOB1ZWxuVDOz7d-p9pBXyCJ0.roa
File: ElXuOB1ZWxuVDOz7d-p9pBXyCJ0.roa (raw, json)
Hash identifier: yT2FOzQBpNezD1RqRPlimPvyTW++iM10nOVP0A49u4o=
Subject key identifier: 12:55:EE:38:1D:59:5B:1B:95:0C:EC:FB:77:EA:7D:A4:15:F2:08:9D
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018CC86F1A11C317A3642E70754D4C4375EE
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/ElXuOB1ZWxuVDOz7d-p9pBXyCJ0.roa
Signing time: Tue 02 Jan 2024 04:29:33 +0000
ROA not before: Tue 02 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 185.236.232.0/22 maxlen: 24
45.120.176.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
103.106.0.0/22 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
193.203.202.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 09 Jan 2024 13:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:1a:11:c3:17:a3:64:2e:70:75:4d:4c:43:75:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 2 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1255ee381d595b1b950cecfb77ea7da415f2089d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:a1:e0:11:6d:0a:87:57:e0:81:64:e0:dd:
80:f6:55:f0:3f:ef:40:18:6e:16:3e:a7:7a:aa:f5:
1a:06:39:fb:0a:51:e0:20:b6:ba:1d:af:dd:90:f5:
02:ef:b2:df:be:28:48:b8:23:ac:fb:8a:4c:00:ed:
fa:93:3c:73:0d:5e:d1:b3:63:1a:8c:4a:75:ec:0e:
52:e8:b0:82:ef:5a:9d:4a:59:ff:7b:f3:77:e4:c2:
d5:5a:de:12:8d:e2:15:f6:2e:9a:f7:35:ee:4d:55:
a5:f3:90:f8:68:d9:1f:dc:b3:0f:73:7c:6a:fe:f6:
04:a3:f7:28:ff:9d:d3:51:a0:f9:b0:4e:9e:e4:5c:
0c:62:9b:48:cd:a7:63:0e:a8:9f:cd:77:e6:0e:82:
a0:1d:14:ea:51:48:d8:c7:74:75:c7:7f:2b:d6:cb:
3f:8b:65:03:59:68:39:33:ca:ee:24:ea:cc:fb:e5:
d3:bb:a6:22:f5:d1:7b:eb:8a:13:20:e4:08:74:7f:
ed:38:ac:25:18:81:7a:7c:90:f1:23:3f:24:83:a1:
7e:1d:b2:41:05:1e:2b:44:0f:e1:09:51:ed:64:a7:
95:d6:15:eb:b2:49:23:86:23:aa:c9:1a:f1:1b:93:
98:91:8a:dd:5b:11:74:79:13:8a:5f:72:77:96:d0:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:55:EE:38:1D:59:5B:1B:95:0C:EC:FB:77:EA:7D:A4:15:F2:08:9D
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/ElXuOB1ZWxuVDOz7d-p9pBXyCJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/23
195.149.87.0/24
IPv6:
2a09:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
6b:10:13:41:a8:49:e9:19:f2:6f:85:e5:23:d2:91:d3:3e:5c:
05:28:b6:78:34:75:50:8b:13:2d:6a:09:05:bf:3e:88:b9:5d:
4e:71:06:ca:f0:4b:cc:1c:29:56:d7:0c:f9:fc:6d:58:ee:6e:
18:6f:25:eb:4a:80:9f:28:e5:14:be:7c:04:6a:e9:34:7f:78:
03:f0:6f:ab:f3:9a:37:3b:57:f0:a5:2d:69:9c:7f:fb:d0:62:
c4:9a:ba:5f:d5:34:ac:8b:b0:98:0d:85:53:79:9a:54:95:2a:
2a:43:32:c0:d3:95:53:79:0a:d6:f7:83:db:8d:6d:c0:29:77:
fb:73:e3:54:0c:f9:99:4b:f1:a6:4f:a8:ce:d0:78:71:0e:f1:
23:41:8a:17:2d:2f:43:cc:7f:2e:49:fb:a9:4f:51:6c:9f:ac:
4d:fa:4a:bf:c7:23:e7:fb:e8:e9:6c:b0:de:de:4f:9f:12:1b:
c6:66:dc:41:c2:1f:62:c8:41:99:e9:a9:c2:08:25:b3:61:fc:
08:ef:ff:bd:45:ca:ad:ab:a2:25:01:89:41:dd:df:17:6d:13:
c2:70:c3:6c:b3:74:26:fd:40:f9:b6:c4:23:e2:4f:bc:0c:cd:
8a:ad:d0:2a:6a:81:0d:63:c9:12:be:45:5a:2a:7e:69:30:94:
72:ae:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org