Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/rBzzFiek6o34cfLHiWDIjHT7xjE.roa
File: rBzzFiek6o34cfLHiWDIjHT7xjE.roa (raw, json)
Hash identifier: gVZQqzysvfPBDpQtN5Eqago/zyQy4m8b0KrHRnSOhyI=
Subject key identifier: AC:1C:F3:16:27:A4:EA:8D:F8:71:F2:C7:89:60:C8:8C:74:FB:C6:31
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018AF52FE6B644471C68F9373DDE665F9C6F
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/rBzzFiek6o34cfLHiWDIjHT7xjE.roa
Signing time: Tue 03 Oct 2023 10:57:51 +0000
ROA not before: Tue 03 Oct 2023 10:57:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.120.176.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
103.35.188.0/22 maxlen: 22
193.203.202.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:2f:e6:b6:44:47:1c:68:f9:37:3d:de:66:5f:9c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Oct 3 10:57:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac1cf31627a4ea8df871f2c78960c88c74fbc631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:f0:a1:1c:53:86:26:21:7f:e5:fd:f9:0c:
fb:12:f6:30:23:f6:eb:ef:25:eb:d4:a3:83:c2:26:
c5:9a:32:b5:b9:14:cc:dd:92:23:b9:f5:f6:4d:c0:
3c:0b:e2:4b:be:52:f3:a2:53:43:e7:33:5a:fa:20:
de:04:8e:88:bd:a7:db:16:45:8b:b9:ba:c8:ac:9b:
9b:1c:92:be:ad:7c:1b:b3:d4:d3:ab:57:61:42:18:
c2:e1:c2:5e:90:e4:e9:45:b0:fd:1e:6e:32:38:be:
87:88:a6:99:c8:60:b9:19:5d:3c:88:4c:4c:de:6f:
94:d6:12:eb:59:b0:0a:e9:76:33:5e:7b:9c:6d:ae:
4a:b6:e9:50:06:13:9a:cc:e2:7a:34:99:57:c0:17:
9a:88:eb:09:6f:9a:70:0d:91:6c:6a:95:17:83:52:
fd:b0:69:23:14:50:94:94:45:33:71:6e:c0:8e:36:
09:11:ae:1f:9e:a5:48:69:48:d4:6e:ce:fd:6f:40:
e6:fc:9a:96:a6:e4:fb:5e:1c:ef:c3:54:fd:4a:b0:
71:70:97:ab:93:6a:41:34:8e:00:dc:00:4c:60:fe:
b9:58:05:3e:5d:a2:40:d9:88:f9:99:2a:ea:5a:51:
4c:a6:8b:af:b7:8b:ae:dc:66:73:8e:00:1a:ba:37:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1C:F3:16:27:A4:EA:8D:F8:71:F2:C7:89:60:C8:8C:74:FB:C6:31
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/rBzzFiek6o34cfLHiWDIjHT7xjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
74.119.192.0/22
80.92.204.0-80.92.206.255
103.35.188.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
195.149.87.0/24
IPv6:
2a09:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
41:b3:b6:3c:83:a9:e9:5b:03:99:9c:d9:ec:5c:e7:d7:c4:7e:
7e:14:0c:e3:b2:c5:af:d7:c9:b8:fc:e8:d2:d2:f6:6d:8a:bb:
ab:7a:67:60:17:af:c4:6b:cf:72:e1:3f:e6:23:5e:6f:b8:37:
a9:7b:84:5a:ad:dd:10:51:07:d2:12:a6:bc:de:7f:20:74:68:
76:9b:ae:25:fa:a2:f3:98:30:11:8b:de:28:d3:c9:63:4b:a2:
04:c0:9c:ec:07:d4:9f:2c:e3:27:f3:c0:6d:62:be:d7:d6:5d:
93:5d:61:25:31:be:9f:0f:f3:cb:75:be:e3:8c:6b:6c:82:7d:
3e:d4:db:b6:b7:f0:19:b2:00:9d:2a:7f:f9:7c:22:ae:96:08:
7a:5e:2f:6c:18:12:db:15:81:a3:84:92:f9:65:4a:67:6e:70:
1e:46:ce:ef:f1:b2:bb:54:b3:f3:83:9d:9b:a0:39:ba:6e:42:
cd:a2:de:88:91:8b:40:0d:12:de:82:32:07:ec:82:7c:ee:5e:
72:2a:c0:83:37:5b:45:07:dd:a2:36:74:5f:95:49:4e:b1:7f:
11:a2:4c:33:b7:46:a7:e5:a5:f6:59:14:49:3b:5e:e2:ec:89:
9d:44:35:b4:c4:e8:55:e4:4f:e7:32:9c:d7:13:ed:36:e4:32:
17:e6:96:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 14:06:51 2023 by rpki-client on console-ams.rpki-client.org