Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/dq3yd2egKSjqIDdXfovyfnS5Y68.roa
File: dq3yd2egKSjqIDdXfovyfnS5Y68.roa (raw, json)
Hash identifier: iuIMNM9ok03TAGsuAlrDBo8OXvn/TYSyuwzH8ry+uHY=
Subject key identifier: 76:AD:F2:77:67:A0:29:28:EA:20:37:57:7E:8B:F2:7E:74:B9:63:AF
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018D6753B7D869D35692C44AF6CEB351AFC1
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/dq3yd2egKSjqIDdXfovyfnS5Y68.roa
Signing time: Fri 02 Feb 2024 00:59:16 +0000
ROA not before: Fri 02 Feb 2024 00:59:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.149.87.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 20 Feb 2024 03:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:67:53:b7:d8:69:d3:56:92:c4:4a:f6:ce:b3:51:af:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Feb 2 00:59:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76adf27767a02928ea2037577e8bf27e74b963af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:91:51:96:d9:d9:03:fe:38:b6:a0:13:df:
74:23:ae:23:3e:23:1e:2e:f7:e3:6c:8d:6f:8d:a3:
64:13:de:8e:45:88:d0:0b:e7:f5:10:8f:dd:1f:5d:
db:cd:38:5c:d2:44:87:4e:92:85:31:2d:77:7c:3a:
2c:d3:e5:9f:58:4f:64:b6:44:a0:ed:6f:18:02:90:
b5:7b:67:17:d4:8a:0c:54:5e:b2:d9:4e:12:79:8b:
ea:06:d1:87:c9:09:c0:9b:4a:6a:d9:f2:68:b1:8a:
f3:75:18:44:80:93:54:dd:da:f7:96:f5:5e:81:aa:
51:80:0a:56:bc:e3:96:14:00:eb:e3:d2:df:69:77:
20:f3:7b:e6:5f:ef:7c:01:62:45:14:99:2d:a4:b3:
f2:d2:51:8b:1a:de:09:5c:da:a9:39:40:14:14:76:
90:c1:54:2b:6f:fd:6a:ab:86:64:6f:cf:ae:cb:33:
55:0e:ae:a9:be:91:f6:c5:61:59:6d:8b:4a:71:a4:
9e:c8:c9:4f:1d:1b:2a:73:2b:74:62:19:fc:3e:86:
1d:8c:0c:41:b4:95:4a:1e:06:92:18:1c:05:1b:98:
61:cb:4d:6b:66:09:05:5a:cc:40:6d:ae:3b:c1:5e:
7b:c4:32:c8:26:b9:24:8a:9e:16:de:6a:34:35:88:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AD:F2:77:67:A0:29:28:EA:20:37:57:7E:8B:F2:7E:74:B9:63:AF
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/dq3yd2egKSjqIDdXfovyfnS5Y68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.234.64.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/23
195.149.87.0/24
IPv6:
2a09:7c40::/29
2a11:3c02::/31
2a14:2d80::/32
2a14:2e80::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
39:15:0c:0d:5b:e1:18:2c:f3:ae:19:c6:3c:93:3b:72:7b:dc:
6e:f0:d0:31:68:6e:a8:24:a2:0f:07:6e:76:11:c7:61:91:08:
d6:4f:5f:b6:19:f4:26:71:f4:f3:ad:9b:b3:45:45:c2:41:d4:
09:03:6f:5b:3f:e5:ab:cd:96:05:46:33:13:18:70:04:7f:10:
ba:4e:36:92:c5:ca:bc:3b:db:ab:20:c3:7c:7e:d0:7a:62:af:
c4:7c:63:3e:3b:c3:c2:98:80:e8:7f:88:2e:48:f5:6a:fc:76:
eb:1e:cd:b6:26:8f:9e:9c:49:9f:6b:8d:aa:7d:39:f4:f7:d3:
7e:23:a0:01:9a:61:82:0d:66:40:5e:03:15:0d:f2:74:12:a5:
0f:7d:39:18:c9:1c:34:5e:18:fc:76:d4:3d:bc:1a:72:9e:91:
64:67:3f:ca:17:d2:86:92:a8:24:8f:1f:31:1c:86:9f:69:f2:
87:cd:04:38:2e:d2:a6:99:49:14:48:dd:9f:10:e2:91:aa:75:
b3:e7:7f:a2:de:96:24:8e:37:2f:f3:b6:44:0a:f8:d0:1d:e1:
88:a0:45:d7:2b:2e:c7:17:1d:da:a7:c9:22:b3:8d:ef:34:c0:
44:82:3d:fc:3d:96:80:b5:cf:48:0f:aa:36:11:fb:23:a0:74:
f0:e0:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:28 2024 by rpki-client on console-ams.rpki-client.org