Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/p20lfm442oXTWCztEAFszkcPpHc.roa
File: p20lfm442oXTWCztEAFszkcPpHc.roa (raw, json)
Hash identifier: pRhFKVEcgtf9maM2bybyeboCgamGjopLzrfKvnW4c3Y=
Subject key identifier: A7:6D:25:7E:6E:38:DA:85:D3:58:2C:ED:10:01:6C:CE:47:0F:A4:77
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018B8B6556D8BDA325DDE2E10D0191B5C64F
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/p20lfm442oXTWCztEAFszkcPpHc.roa
Signing time: Wed 01 Nov 2023 14:59:16 +0000
ROA not before: Wed 01 Nov 2023 14:59:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.120.176.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
193.203.202.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.72.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:65:56:d8:bd:a3:25:dd:e2:e1:0d:01:91:b5:c6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Nov 1 14:59:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a76d257e6e38da85d3582ced10016cce470fa477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d3:4d:3e:a0:24:1c:ab:e8:fe:cb:ea:6d:b6:
8a:34:d6:0d:aa:92:50:5f:3f:d5:61:62:8d:5b:11:
54:45:60:54:c7:06:f2:c1:60:04:ff:32:f4:19:6c:
96:0b:b6:23:1d:e7:6e:e0:e5:e1:6e:a5:8f:36:36:
7b:5b:f7:28:9c:0c:dc:47:f9:0d:4c:1b:a0:ca:b5:
3d:53:68:21:0e:3e:88:54:3b:b3:4d:08:40:47:1e:
2c:2d:96:fc:f2:17:20:a0:4e:de:92:3a:b0:08:a0:
52:1b:fd:fb:0e:1f:05:72:8d:2a:4e:ee:2b:73:d6:
fc:98:97:fd:30:9b:8f:f7:5d:9a:91:c4:94:c0:0f:
e0:5e:47:03:b1:8a:d7:db:e7:36:49:27:bc:19:d9:
1f:f0:60:1a:0d:fb:c2:8a:a3:19:ff:2f:f6:ec:88:
d9:19:56:ed:c9:9c:d9:95:23:a4:67:01:db:0f:66:
ae:af:25:81:db:94:a7:57:cc:3c:a3:7a:f6:dd:83:
6e:a4:ff:6d:73:ca:e4:00:26:bf:69:3d:7c:f5:3a:
c2:fc:78:cc:5d:aa:34:c5:f0:56:52:cd:18:b3:38:
d8:d1:60:11:6c:0c:f6:6c:7b:1c:60:77:20:8b:6b:
d4:fb:99:83:62:db:de:36:2b:87:57:12:b8:30:31:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6D:25:7E:6E:38:DA:85:D3:58:2C:ED:10:01:6C:CE:47:0F:A4:77
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/p20lfm442oXTWCztEAFszkcPpHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
103.35.188.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
195.149.87.0/24
IPv6:
2a09:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
2e:6a:b5:ea:bd:1c:78:97:7d:16:b4:4b:97:c2:81:7b:70:45:
a1:a1:3a:01:95:23:a8:ee:65:b5:03:ff:35:2a:93:fe:11:cb:
91:ab:9f:fb:fd:76:3e:26:f8:b1:84:b4:98:e4:94:23:39:8f:
15:01:a2:54:52:ab:1d:65:b6:89:58:21:74:f5:de:e3:13:79:
7e:ca:fb:e3:d1:50:c6:90:e5:76:b3:9b:ea:52:3f:e8:ab:e1:
05:f4:84:d8:99:f7:a6:19:b9:90:11:08:f8:8a:82:e5:9d:03:
a3:09:56:be:14:54:da:28:80:9a:12:d3:2d:92:00:dc:9e:d7:
ed:b6:5c:f9:eb:12:8e:48:19:85:52:f0:c2:9d:9f:ec:b0:6e:
1e:c6:fc:08:14:fa:b0:c0:f0:ca:a7:03:5b:a0:44:c3:cd:31:
05:39:7b:60:e7:40:f7:0b:9c:2c:fe:ff:4d:ea:82:35:e6:bc:
69:e2:b1:3c:ef:ed:01:21:48:c9:fe:32:be:7b:7d:2c:5b:6a:
69:87:65:c9:78:fa:3c:7d:5a:58:8d:0f:18:52:d8:8c:79:5b:
84:55:9a:32:37:ed:7c:1f:6f:99:cf:35:0a:08:6b:fe:85:c9:
d2:45:ef:12:49:5a:7c:19:cd:4e:5b:0b:b7:f0:eb:f2:c7:8d:
05:70:4a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 12:17:01 2023 by rpki-client on console-ams.rpki-client.org