Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/np0z6-mNV8pgrHyKu0DgrtZscyw.roa
File: np0z6-mNV8pgrHyKu0DgrtZscyw.roa (raw, json)
Hash identifier: yIkd8sTt+zUkIFe5FZu6nhUDLEw7SIdUtI3oWFodgV4=
Subject key identifier: 9E:9D:33:EB:E9:8D:57:CA:60:AC:7C:8A:BB:40:E0:AE:D6:6C:73:2C
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018DC75DF51B86B1D1DD94D8C997AF8B47B1
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/np0z6-mNV8pgrHyKu0DgrtZscyw.roa
Signing time: Tue 20 Feb 2024 16:34:00 +0000
ROA not before: Tue 20 Feb 2024 16:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.149.87.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 29 Feb 2024 15:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:5d:f5:1b:86:b1:d1:dd:94:d8:c9:97:af:8b:47:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Feb 20 16:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e9d33ebe98d57ca60ac7c8abb40e0aed66c732c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:b3:45:33:a7:26:8a:55:07:04:8e:3b:99:
20:7b:8f:c3:ab:1e:e0:73:f8:3f:75:67:ed:64:42:
0a:ce:2f:f0:d5:5e:ec:89:b0:8b:95:fb:30:9c:55:
7d:be:32:75:7a:76:25:15:1c:73:ea:66:87:74:3a:
4e:88:83:1f:47:37:c0:01:dd:02:3c:54:88:8d:5c:
6e:55:d9:b2:15:1f:3e:3b:f7:7a:84:05:ac:b2:0e:
57:e7:2b:8a:2c:12:f2:09:ee:a2:61:6c:6a:78:7e:
3e:e7:c7:85:62:5c:21:c3:15:96:bc:a2:5c:eb:01:
98:d3:fc:d9:8c:87:b4:cb:ca:8a:4a:e7:95:0e:25:
d7:b8:1b:0e:b5:d8:d1:8d:ac:4d:6d:af:b6:c2:10:
c0:ee:c8:0f:af:3b:f6:e9:51:fe:2f:5b:7f:c1:f7:
82:e1:61:3a:40:12:19:f4:ff:6b:83:34:c6:4a:cb:
18:3a:73:56:9e:b4:1b:b7:54:86:21:03:97:db:56:
3c:0c:b2:8a:46:32:ad:d2:84:d5:96:d9:e2:a1:dc:
18:d6:55:f0:9a:bf:26:36:eb:db:c4:70:b2:7b:0e:
2e:49:7f:cd:05:35:34:1f:02:2f:03:34:0a:b0:41:
8e:48:ba:4e:74:24:bd:68:04:5c:2f:75:ce:5e:67:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9D:33:EB:E9:8D:57:CA:60:AC:7C:8A:BB:40:E0:AE:D6:6C:73:2C
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/np0z6-mNV8pgrHyKu0DgrtZscyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.234.64.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/23
195.149.87.0/24
IPv6:
2a09:7c40::/29
2a11:3c02::/31
2a14:2d80::/31
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
56:1e:17:86:e4:f5:88:6e:0d:05:60:19:f1:cb:a6:f8:0d:13:
70:9d:3a:dd:e5:47:18:d5:49:06:bd:24:f4:95:8b:3e:51:7f:
dc:00:32:ea:91:5a:ca:70:0e:b7:5d:b0:70:d7:f0:72:2e:77:
68:09:a5:77:9e:8e:be:0b:ce:91:53:21:3b:f7:91:61:a6:c9:
10:2c:68:e3:37:83:a9:a8:ab:84:f6:f5:a5:4c:4e:89:39:3c:
62:e3:99:3f:99:02:05:b7:a6:7a:83:b3:15:94:42:a1:b4:2e:
e8:1e:e1:6a:e4:cc:90:65:c7:c7:4d:47:7e:1f:af:80:c9:96:
96:d8:4b:20:72:68:0d:b3:e0:1f:af:eb:c6:f6:de:60:c5:64:
66:be:49:aa:34:60:9d:bc:c4:60:e1:91:0e:9d:b7:0a:86:3a:
f0:ae:ad:ab:48:1d:27:05:47:86:ba:1f:0c:84:2e:3a:a3:df:
f4:c5:44:6d:cd:92:1e:1f:b7:19:f5:d3:e4:cd:01:21:c2:a6:
ed:c8:a3:4f:12:3d:a8:50:2e:85:6a:7b:4e:f4:07:bb:ef:e8:
ff:81:28:18:66:6d:f1:aa:37:fc:95:2f:62:e0:ac:58:90:22:
f7:39:1f:55:62:a5:12:cb:ca:91:3a:af:e1:8b:ad:1e:9d:60:
c3:a7:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:28 2024 by rpki-client on console-ams.rpki-client.org