Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/O-PKZ9qbsspjv39109ITBI0R9AI.roa
File: O-PKZ9qbsspjv39109ITBI0R9AI.roa (raw, json)
Hash identifier: ljHxUIZjN1m4lFP9SKW685tBL/fpLgcI7+FapVAzn2U=
Subject key identifier: 3B:E3:CA:67:DA:9B:B2:CA:63:BF:7F:75:D3:D2:13:04:8D:11:F4:02
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018E42160C95A2D1D69BEE44F6B69BB3CAAC
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/O-PKZ9qbsspjv39109ITBI0R9AI.roa
Signing time: Fri 15 Mar 2024 12:28:45 +0000
ROA not before: Fri 15 Mar 2024 12:28:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.149.87.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 28 Mar 2024 13:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:16:0c:95:a2:d1:d6:9b:ee:44:f6:b6:9b:b3:ca:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Mar 15 12:28:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3be3ca67da9bb2ca63bf7f75d3d213048d11f402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3b:14:37:8c:86:92:2c:da:65:4f:ad:7a:29:
a5:8e:a5:59:b5:34:c3:28:83:4d:6d:d1:7e:c5:45:
da:ab:56:69:07:98:33:26:1e:c0:4d:ba:f3:50:00:
00:8e:86:e0:45:11:81:e9:d4:9b:62:c7:d0:f6:ca:
9a:0e:4f:d0:62:21:47:a7:00:1a:e7:3a:91:43:6e:
24:0f:cf:c4:95:40:66:39:c8:7b:5f:d8:1d:5e:fc:
87:63:6f:3d:02:30:ed:9f:c6:14:f7:df:20:41:c7:
86:c8:6e:c7:42:df:a8:99:5e:36:80:ca:84:12:7a:
aa:cd:aa:d1:5c:2e:6f:36:3f:06:13:c1:6c:61:20:
2e:30:53:b8:cb:26:49:7e:4f:8d:db:7f:83:70:8a:
dd:b2:e2:ce:ad:6f:f5:76:b1:11:ac:8e:8c:5c:ac:
8c:af:65:ea:5b:99:5d:0b:bc:28:3b:78:b7:ec:3c:
87:48:d8:e6:7d:2b:f1:ee:0e:a8:db:f4:fe:99:b6:
c6:9a:e8:76:f7:f4:fd:d7:3f:2a:ba:11:c1:90:47:
ff:0f:37:fe:77:9d:a0:5e:fb:6e:a6:d7:7f:c8:f0:
29:fa:31:7b:2c:13:cd:77:f6:bb:bd:d9:c5:17:de:
e1:98:cf:77:63:cf:2a:25:20:e4:6e:3a:95:a9:1d:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E3:CA:67:DA:9B:B2:CA:63:BF:7F:75:D3:D2:13:04:8D:11:F4:02
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/O-PKZ9qbsspjv39109ITBI0R9AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/23
195.149.87.0/24
IPv6:
2a09:7c40::/29
2a11:3805::/32
2a11:3c02::/31
2a14:2d80::-2a14:2d82:ffff:ffff:ffff:ffff:ffff:ffff
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
93:93:c5:7e:35:b7:3c:61:e0:41:1a:b2:8a:18:c2:64:a4:e2:
0e:ac:f2:89:74:4b:4d:47:97:07:ee:0c:9e:51:62:5e:dc:aa:
9e:72:95:a0:82:fb:c0:eb:94:1d:a3:38:33:c8:7b:e7:66:34:
82:da:d8:fd:22:b3:20:e5:71:85:3d:e1:5a:59:56:7f:14:66:
dc:ff:95:03:bd:a6:9a:13:85:a1:0e:74:b7:37:1d:8b:54:1a:
7a:4a:68:87:64:03:81:77:0f:cc:23:b4:96:72:b4:cd:d3:1a:
2d:ba:2f:f9:1c:d3:f3:87:26:eb:4a:9d:d2:f6:9f:e9:ac:3e:
a1:ad:da:8f:62:0d:50:89:52:5c:97:39:e3:b3:f6:0e:23:00:
58:67:dd:24:02:b1:67:b1:16:4f:63:e1:43:f0:bd:72:4c:64:
19:33:80:38:31:bf:a1:3a:d0:f0:b0:4d:dd:88:0d:02:18:79:
dc:18:9a:0e:a7:85:c6:e7:c4:18:46:e0:79:3f:01:93:15:6e:
13:25:88:96:60:06:b4:f2:69:58:97:e1:64:6a:05:26:ef:a1:
a0:db:7d:0c:c4:b0:5e:5e:42:d0:68:c1:5d:4d:1c:68:93:f8:
48:bf:76:05:fd:d1:0f:e4:0a:4e:d2:27:38:52:b4:50:7d:be:
ca:6c:41:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org