Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/I2M69lWbCEPi_h6TGSu1uUcjZU4.roa
File: I2M69lWbCEPi_h6TGSu1uUcjZU4.roa (raw, json)
Hash identifier: EifUdCTTDEWopzmYwDohyOjn7cQMVmTCLZCRhuVx/Vs=
Subject key identifier: 23:63:3A:F6:55:9B:08:43:E2:FE:1E:93:19:2B:B5:B9:47:23:65:4E
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0185C60DA0892AB90C6995C052279A21475A
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/I2M69lWbCEPi_h6TGSu1uUcjZU4.roa
Signing time: Wed 18 Jan 2023 18:04:19 +0000
ROA not before: Wed 18 Jan 2023 18:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 80.92.206.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 20 Feb 2023 15:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:0d:a0:89:2a:b9:0c:69:95:c0:52:27:9a:21:47:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 18 18:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23633af6559b0843e2fe1e93192bb5b94723654e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:79:44:55:5f:7b:6c:f0:ec:17:82:c1:14:
74:6b:6f:34:03:9f:66:4e:4c:ce:58:d9:ad:cd:e5:
4d:da:c1:3e:c0:a6:6e:97:f0:9d:5d:fc:0f:de:9d:
88:16:5b:0b:91:79:eb:57:69:3c:62:de:cd:8e:02:
0d:e8:9f:e8:ab:c0:b0:4f:04:25:11:97:d1:b6:93:
2c:b8:7f:8c:c8:d3:ff:ac:b6:8c:e0:e2:6a:b7:7c:
5c:8d:82:ff:09:9d:a4:0b:3f:bd:2c:3e:ad:a1:81:
64:3b:91:97:d0:b9:0a:16:53:e1:12:e8:7b:ab:23:
03:e1:04:a8:8d:df:8b:95:0b:07:82:36:b3:29:e0:
6c:16:65:1f:e2:54:2e:21:de:41:14:eb:f4:69:06:
f3:bb:61:32:26:da:c1:db:0f:32:09:bf:87:57:de:
2c:2d:33:a4:31:e4:3b:55:e4:ea:15:64:b7:95:97:
dc:74:e0:7b:93:d3:a5:dd:c7:3b:83:a1:8c:72:e2:
b1:d9:4b:4a:35:e5:7e:ba:2a:b7:3a:c4:62:5a:54:
ea:e2:7b:d6:3f:9c:4b:77:e3:69:32:c5:22:85:88:
b2:04:3b:df:61:33:e6:68:ec:49:b6:51:18:7b:99:
82:32:d3:90:ba:67:7f:e6:0d:68:d0:e3:d9:ff:d2:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:63:3A:F6:55:9B:08:43:E2:FE:1E:93:19:2B:B5:B9:47:23:65:4E
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/I2M69lWbCEPi_h6TGSu1uUcjZU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
74.119.195.0/24
80.92.206.0/24
185.242.84.0/22
185.250.148.0/23
IPv6:
2a09:7c40::/32
2a09:7c44::/32
Signature Algorithm: sha256WithRSAEncryption
57:7d:cd:76:d8:5a:f0:8e:cf:47:2e:57:83:9b:b2:05:82:4e:
0d:f2:f4:a2:21:c2:52:62:cb:59:c4:22:7d:2f:b5:eb:da:35:
83:e3:94:7b:30:a6:91:9e:b6:f7:90:39:45:73:7a:17:79:b1:
72:16:36:5d:90:ca:a2:dd:f3:1c:52:d3:cb:cc:ca:7b:2b:19:
4e:a7:b0:b0:1f:4d:bc:d4:d2:cf:75:dd:1d:76:7c:67:59:6d:
fd:18:69:7e:34:59:30:4e:62:dc:6a:a1:3e:02:c1:b8:4b:ca:
01:b2:19:f0:a4:c4:87:6b:2c:b7:c5:e7:ad:98:73:89:e8:65:
5e:b2:40:9b:f8:78:66:98:3a:76:bc:b1:32:45:27:91:92:dc:
a6:1c:d9:50:d5:bb:53:2d:23:d4:ed:62:0c:10:18:4c:71:ba:
e9:ee:ad:df:7c:bb:d1:40:69:03:17:ef:7b:77:80:8b:43:64:
35:5b:ca:6d:d5:1a:d4:34:f6:3f:21:e7:ec:8f:d5:28:7f:a8:
86:21:06:73:b0:3d:36:d8:4d:e8:12:de:44:b3:93:55:34:6d:
06:2d:04:83:4d:42:79:dd:43:34:a5:d8:c2:b5:9b:40:5c:80:
dd:fa:1a:47:c4:db:8b:78:16:01:e7:66:2f:ca:cf:ee:a5:b5:
4c:c1:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org