Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Zhka4LmCfwmvo104P1LcsHNilio.roa
File: Zhka4LmCfwmvo104P1LcsHNilio.roa (raw, json)
Hash identifier: Hd31J+Enhga0Tk/lZYPDFR2/tqMOzFiQdcfKCZLYebc=
Subject key identifier: 66:19:1A:E0:B9:82:7F:09:AF:A3:5D:38:3F:52:DC:B0:73:62:96:2A
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01897246729F828FAB61808241F3061669DD
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Zhka4LmCfwmvo104P1LcsHNilio.roa
Signing time: Thu 20 Jul 2023 07:49:26 +0000
ROA not before: Thu 20 Jul 2023 07:49:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.120.176.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
176.120.64.0/24 maxlen: 24
103.113.68.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:46:72:9f:82:8f:ab:61:80:82:41:f3:06:16:69:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jul 20 07:49:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66191ae0b9827f09afa35d383f52dcb07362962a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:d0:ef:57:7c:c4:31:de:0d:7c:d4:48:7f:
27:65:ae:40:08:a3:4f:ef:b2:89:95:f0:f7:cd:df:
cc:8d:67:6e:f4:0b:f7:71:63:dd:e4:5c:e0:0e:d5:
f8:0d:04:a5:cd:b5:e8:6b:dd:dc:62:4f:87:6d:2d:
af:85:a3:f3:f5:9f:c8:89:60:60:3b:cc:af:0e:32:
61:52:10:7d:81:b1:a3:4e:94:49:f0:39:04:f9:35:
35:e7:d9:c0:e5:97:71:c5:f1:e9:b2:ef:61:66:85:
cc:9e:39:42:bf:6b:3b:a8:64:2a:a8:98:90:30:f8:
bd:f9:74:8c:1b:83:8d:6d:f1:9a:09:b5:f8:06:20:
a0:56:6d:d2:9d:a6:22:7f:ca:e0:aa:44:00:52:0e:
57:3b:85:90:fd:da:bc:8c:62:af:71:48:13:cb:3f:
8f:f0:8b:e3:8d:aa:86:10:70:11:86:50:dc:a9:2f:
b5:38:09:e2:3e:d1:6e:2e:60:66:65:02:ee:e2:67:
23:1f:ff:42:95:68:f9:bc:4b:a7:01:63:11:e2:87:
31:d0:24:a0:ca:1b:b2:2c:d5:48:e2:bc:e9:86:97:
6b:eb:f4:01:38:b7:6f:46:4b:8b:98:de:ae:e1:80:
27:36:c8:45:cf:36:81:80:6c:a2:9c:5b:6c:87:3b:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:19:1A:E0:B9:82:7F:09:AF:A3:5D:38:3F:52:DC:B0:73:62:96:2A
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Zhka4LmCfwmvo104P1LcsHNilio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
74.119.192.0/22
80.92.204.0-80.92.206.255
103.113.68.0/24
176.120.64.0/24
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
195.149.87.0/24
IPv6:
2a09:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
52:95:52:67:75:0c:a7:96:b1:67:b8:a0:f0:c5:06:92:04:d0:
79:c5:85:34:3b:bf:d6:63:77:81:fd:9f:8a:c3:f4:3f:4e:56:
7b:1b:de:48:c1:19:0b:05:d1:f3:62:55:28:89:8d:71:2e:b5:
94:2e:64:7c:b7:51:a2:af:89:d0:63:73:e1:2b:09:f2:dd:08:
12:17:8f:b5:04:9a:55:0c:23:7a:ca:76:f1:cb:fe:62:b4:a9:
6e:22:30:ff:3e:d6:bd:55:e3:e6:f5:1c:bd:66:46:83:f1:68:
8c:70:1c:ac:45:9d:67:24:12:ab:c0:19:a2:ea:40:33:48:de:
13:03:f6:79:d3:33:bc:4e:61:35:75:61:3c:89:b0:6a:18:10:
95:39:6b:28:11:dd:fa:d7:94:5c:77:aa:e9:f1:76:73:38:9e:
5b:71:2c:c3:b3:5e:7f:03:49:c8:0a:68:de:d2:21:7b:32:d7:
4f:3b:9c:95:43:0f:d4:b5:a1:d3:c3:51:aa:0f:ad:b0:5c:f2:
04:f7:8a:fd:ee:24:89:d6:63:72:e8:e2:1b:53:1c:b1:2c:c1:
9b:f5:9a:20:19:c7:b7:bd:28:b5:7b:28:ba:74:1d:59:ce:1d:
c0:c8:0a:09:fb:df:06:51:76:b4:8a:2f:8b:7c:98:d2:35:cc:
59:12:93:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 13:10:55 2023 by rpki-client on console-ams.rpki-client.org