Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/O4up8qNs3O-ndOj-9BMxg9nIddo.roa
File: O4up8qNs3O-ndOj-9BMxg9nIddo.roa (raw, json)
Hash identifier: DxDP0qoCrePS8GCdjeLA7iFP6a2jh684Xj0lPTHC9WY=
Subject key identifier: 3B:8B:A9:F2:A3:6C:DC:EF:A7:74:E8:FE:F4:13:31:83:D9:C8:75:DA
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018DF56DC56023586C2EC94B42E675C14E62
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/O4up8qNs3O-ndOj-9BMxg9nIddo.roa
Signing time: Thu 29 Feb 2024 15:13:48 +0000
ROA not before: Thu 29 Feb 2024 15:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.149.87.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 14 Mar 2024 18:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:6d:c5:60:23:58:6c:2e:c9:4b:42:e6:75:c1:4e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Feb 29 15:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b8ba9f2a36cdcefa774e8fef4133183d9c875da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:e4:bf:f2:a0:01:e6:d3:49:5d:7e:5f:ab:
1a:12:90:96:98:b7:7a:cc:88:ce:72:01:6d:4c:5d:
24:fb:0b:ac:a0:b6:29:ff:7b:6e:66:11:16:37:a9:
b6:68:43:a1:32:5d:1d:cc:a9:f7:5c:0f:3c:9a:24:
10:7e:11:da:96:5f:b5:23:35:da:fa:3e:80:65:c5:
49:61:ab:8e:48:25:f5:f3:88:04:2b:c6:7c:e3:b0:
38:c2:6a:04:03:98:4b:bf:ac:79:82:40:c9:dd:18:
8a:0d:86:05:8f:71:3a:9f:47:ef:31:3b:ed:38:72:
4f:04:6c:82:06:cc:b6:99:74:d5:4b:4a:4d:26:f3:
e8:e2:29:c0:cd:34:1e:be:ec:ef:3a:62:bf:7c:40:
c3:02:6b:fa:46:c0:fa:89:04:34:49:18:02:90:7a:
d2:87:f4:7f:f8:07:f3:6a:c6:96:7d:70:04:de:08:
82:82:82:e3:ed:17:c1:9f:07:ff:5b:4c:57:fa:14:
21:b8:48:b2:df:f4:7b:fd:97:5c:79:3b:0c:92:4e:
9b:88:72:2f:27:17:2c:a7:5f:d1:33:fd:1a:b1:72:
60:f9:4c:f9:80:f3:4c:5a:75:57:03:4e:dc:d1:2e:
f8:44:f2:05:ce:56:11:3a:a2:b6:30:af:b0:4e:18:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8B:A9:F2:A3:6C:DC:EF:A7:74:E8:FE:F4:13:31:83:D9:C8:75:DA
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/O4up8qNs3O-ndOj-9BMxg9nIddo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/23
195.149.87.0/24
IPv6:
2a09:7c40::/29
2a11:3c02::/31
2a14:2d80::/31
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
4d:b2:65:f6:09:1e:51:38:a2:cc:c1:ad:18:a8:db:87:0c:b8:
a3:44:64:fa:59:62:a7:12:76:72:f4:a3:26:e6:e0:fa:19:a9:
aa:6b:bb:d5:f2:f7:83:c1:07:46:a6:78:35:ee:13:f2:bb:36:
9c:bc:eb:59:41:c2:9f:f8:85:76:ba:a4:ed:d8:e7:59:a6:13:
62:e9:4e:ad:6b:5f:d8:f0:12:70:dd:31:62:a7:1f:90:53:99:
91:d1:cb:76:7a:65:81:3c:58:6f:f0:34:36:00:0d:5a:4a:96:
56:67:1e:25:2d:f8:e5:1b:23:c1:05:7c:26:be:c1:69:80:19:
6b:d0:f6:08:aa:dc:9f:cd:23:32:46:74:cb:67:65:ee:88:f5:
34:42:b2:24:58:e3:de:37:bc:1d:53:77:09:98:76:0c:26:3c:
12:da:24:74:17:ad:e1:4a:4b:f1:f9:f8:02:13:19:28:e7:b0:
c5:e1:a6:55:de:81:00:8e:c0:39:c2:21:28:ca:40:e5:c2:65:
98:2f:dd:ce:eb:54:4e:09:d8:38:33:60:ee:f5:86:bd:85:88:
8f:c8:4e:dc:32:14:ac:e2:7b:50:fd:87:ba:40:fa:10:54:9f:
fe:9a:51:75:61:cc:82:90:c8:96:da:96:54:86:6f:e3:1d:32:
9f:0a:69:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 22:27:11 2024 by rpki-client on console-fra.rpki-client.org