Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/h4yt6HOvsD617zxmM2vaNgC6u14.roa
File: h4yt6HOvsD617zxmM2vaNgC6u14.roa (raw, json)
Hash identifier: U2XQQ+yO9+bFjRLwVD/PQP45YvW2IcVPHoLP+vRhMP0=
Subject key identifier: 87:8C:AD:E8:73:AF:B0:3E:B5:EF:3C:66:33:6B:DA:36:00:BA:BB:5E
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018D360D847C9FD8289D3FD681B191F39DD9
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/h4yt6HOvsD617zxmM2vaNgC6u14.roa
Signing time: Tue 23 Jan 2024 11:21:11 +0000
ROA not before: Tue 23 Jan 2024 11:21:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.149.87.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 23 Jan 2024 22:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:0d:84:7c:9f:d8:28:9d:3f:d6:81:b1:91:f3:9d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 23 11:21:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=878cade873afb03eb5ef3c66336bda3600babb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:33:6a:dd:ff:8b:46:98:57:bd:a0:4e:1d:
f0:de:a3:b4:aa:af:3d:52:58:6a:8f:4f:77:95:38:
bf:b4:53:23:81:fb:cc:a3:88:91:f8:b8:d1:78:59:
45:25:1b:30:0e:fe:ed:61:55:84:e1:1e:2f:ca:80:
39:81:9b:89:c2:02:b5:62:79:49:4c:17:c7:f5:44:
6a:42:17:4c:ff:36:d7:74:a1:b2:41:16:10:27:89:
3c:52:c7:c6:b3:1d:77:16:9a:2f:37:35:9a:9f:98:
46:be:a5:1a:27:01:3a:ce:ed:eb:94:64:45:9d:64:
17:e4:98:13:c4:85:f6:49:2f:15:38:da:12:78:44:
f0:e8:0e:00:4f:8f:9f:21:f8:0f:d6:90:03:1f:c8:
94:56:06:b6:a8:20:49:67:ff:79:86:da:49:ca:7e:
af:f4:56:6e:3f:af:19:2d:d5:f0:b2:b6:4e:f5:d2:
3e:f6:4f:63:50:2d:63:93:6a:73:87:a5:76:c8:92:
6f:13:9f:0d:d6:e3:c6:bb:0b:76:62:c7:8e:3d:f6:
a5:40:0b:b7:2a:fa:ed:22:b7:cf:83:f5:ed:6c:7b:
6e:9e:3b:51:f1:11:3c:68:52:de:d4:32:b4:ed:02:
3e:fa:9b:b3:7e:d1:cb:99:96:40:09:e4:a8:82:ba:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8C:AD:E8:73:AF:B0:3E:B5:EF:3C:66:33:6B:DA:36:00:BA:BB:5E
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/h4yt6HOvsD617zxmM2vaNgC6u14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.234.64.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/23
195.149.87.0/24
IPv6:
2a09:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
92:f2:35:ec:cc:ee:f8:61:b6:42:d1:ed:0f:89:5c:bb:be:93:
d5:3e:03:02:3c:e5:a6:96:7a:7f:76:87:ad:70:6e:3c:b5:e1:
6b:05:66:1e:d4:25:23:b9:9c:6c:09:ed:9b:96:17:99:83:b4:
56:70:e1:c2:55:cc:c3:f1:79:bb:73:c0:a4:5c:c1:27:f0:2d:
c3:79:bb:0b:0b:08:6c:58:63:21:29:a7:3b:51:48:ba:7c:ec:
79:50:63:3b:1d:b0:70:7e:9e:47:d5:3d:39:71:e3:cb:f5:87:
1b:78:a0:ee:26:d2:47:5a:66:8f:c7:0f:c7:91:f9:20:97:a5:
72:03:03:a6:f2:e0:6a:a6:42:4e:35:c0:31:2f:9e:16:79:ba:
3b:25:35:0b:cf:9c:28:74:08:0e:f9:fc:33:e0:b3:6f:06:26:
7d:1f:aa:e5:36:c5:5b:7c:c7:da:68:9b:2e:6a:21:db:e6:f4:
5a:2e:1a:b7:a6:d5:58:15:ad:28:4e:bd:57:be:96:e0:9c:03:
cd:98:03:f5:03:4d:98:3a:47:d5:49:69:86:ed:a2:fd:f5:ef:
30:fc:1a:dc:61:f3:50:1f:65:f3:54:c7:32:81:bc:a1:81:e9:
28:5e:c5:a1:04:9b:ea:ec:7e:a2:ad:53:56:97:06:24:dd:88:
b2:8f:a2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org