Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/iL_b45jQIt1RYhFM40FpLmVHdDM.roa
File: iL_b45jQIt1RYhFM40FpLmVHdDM.roa (raw, json)
Hash identifier: n/vfIxGTdE946CGkbGWLE2Kjx/Na4BUDNP4K3mH673I=
Subject key identifier: 88:BF:DB:E3:98:D0:22:DD:51:62:11:4C:E3:41:69:2E:65:47:74:33
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0189DAA4C5A127A5DB4E7AF28635BEC294A4
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/iL_b45jQIt1RYhFM40FpLmVHdDM.roa
Signing time: Wed 09 Aug 2023 14:12:58 +0000
ROA not before: Wed 09 Aug 2023 14:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.120.176.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 28 Sep 2023 12:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:da:a4:c5:a1:27:a5:db:4e:7a:f2:86:35:be:c2:94:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Aug 9 14:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88bfdbe398d022dd5162114ce341692e65477433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:c5:d8:00:0b:b8:6d:02:63:0e:14:e9:cf:
22:ef:48:72:e9:57:24:ba:51:13:a0:47:e9:cc:3b:
b6:a9:f7:4e:1e:06:85:58:92:e2:33:3e:5a:fc:32:
d5:cc:72:7c:99:eb:ad:89:1a:d1:cb:72:61:d5:66:
ad:78:3d:30:a1:0b:ec:7c:46:13:fb:c2:ba:be:a9:
a2:a3:c6:a6:bc:93:22:0d:74:e9:c6:0e:30:28:cb:
14:fd:a2:7b:a5:25:30:53:d9:35:b2:69:cc:80:a5:
e2:cb:0d:a1:69:c3:25:ad:64:ef:d8:44:9d:df:cb:
28:38:f7:6e:c4:5c:3a:08:20:91:06:16:70:30:0b:
fe:98:17:15:45:e5:db:9d:fd:d2:d9:ea:95:9c:c4:
16:cb:d8:2a:4e:74:97:aa:8b:74:01:45:39:55:d3:
0a:72:50:a7:40:10:1b:05:e0:aa:78:92:e4:59:2a:
0b:f2:9a:fb:bd:ea:da:8d:de:d5:d6:d9:59:f0:df:
7e:43:e6:4d:46:b5:06:56:d6:c3:8a:d3:e6:62:3a:
7e:da:2e:57:95:ea:c7:3f:c9:5e:b9:d1:15:e2:ab:
21:c5:89:db:a8:1a:f9:16:ed:37:2b:19:cb:d0:5b:
e5:dd:86:91:71:cd:10:7c:db:6d:03:53:11:17:bb:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BF:DB:E3:98:D0:22:DD:51:62:11:4C:E3:41:69:2E:65:47:74:33
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/iL_b45jQIt1RYhFM40FpLmVHdDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
74.119.192.0/22
80.92.204.0-80.92.206.255
103.113.68.0/22
176.120.64.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
195.149.87.0/24
IPv6:
2a09:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
13:06:7c:15:54:de:16:c3:9a:cf:c4:d8:37:86:83:8e:84:81:
14:65:77:92:0a:5f:0a:ce:72:41:73:29:6c:bd:1b:87:bf:07:
3c:11:d6:bd:d2:9e:75:7b:de:2b:35:cb:de:1f:a2:a4:81:50:
1f:2a:2c:ea:1a:17:8a:3a:66:26:45:28:e1:7f:60:d9:3b:6b:
80:b9:fa:8c:a9:81:5b:19:72:ba:79:d0:b1:31:8a:c4:be:5b:
9e:e7:47:c1:62:88:98:e5:bf:f2:26:cb:5b:72:57:ae:71:39:
cd:b5:93:66:74:0c:92:6d:20:eb:1e:4c:3a:47:69:2d:d9:dd:
14:c4:0c:3c:4d:f3:21:3c:45:d1:b0:d5:d1:85:95:4d:ca:8e:
92:a7:b5:0d:64:f1:b9:f1:95:d9:5d:63:4a:52:c8:98:cb:ca:
2e:86:17:9e:15:1d:e0:35:db:b1:72:40:cc:60:9b:fc:64:7a:
ee:10:39:cc:86:28:bc:43:45:22:3e:55:b1:20:0e:89:c1:1a:
05:ff:52:bd:d2:42:25:81:f3:0f:44:e1:5f:dd:54:81:b2:46:
e5:e0:f7:57:ab:9c:97:56:b6:69:b0:87:ca:48:47:29:99:39:
e2:84:48:de:da:7f:71:e6:7d:21:5e:a8:97:ec:7b:5e:09:ec:
1a:1e:a9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:28 2024 by rpki-client on console-ams.rpki-client.org