Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/rFN3sipqy4JEPNak77h-0KdFR3w.roa
File: rFN3sipqy4JEPNak77h-0KdFR3w.roa (raw, json)
Hash identifier: qIv7D5pk39MskNvNkvH8XCpE9dGmHBKbVt9XIjZPyG4=
Subject key identifier: AC:53:77:B2:2A:6A:CB:82:44:3C:D6:A4:EF:B8:7E:D0:A7:45:47:7C
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01866F5F39B0CCDF9F35914E0EDCA13DE0A8
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/rFN3sipqy4JEPNak77h-0KdFR3w.roa
Signing time: Mon 20 Feb 2023 15:09:17 +0000
ROA not before: Mon 20 Feb 2023 15:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 80.92.206.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 21 Mar 2023 20:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:5f:39:b0:cc:df:9f:35:91:4e:0e:dc:a1:3d:e0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Feb 20 15:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac5377b22a6acb82443cd6a4efb87ed0a745477c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:dd:d6:15:bb:0e:85:3b:db:29:a6:ca:79:
05:3d:3a:b9:e4:ee:b9:48:e8:93:ac:50:09:3a:1f:
53:52:88:e3:55:53:c5:a6:7d:e9:9f:04:91:f8:9b:
40:ab:e2:00:f1:76:f4:26:64:10:5b:6a:05:df:fd:
2d:90:b2:e9:1c:c4:43:3c:2c:05:cc:8f:3f:0b:e6:
80:35:8c:9c:ed:39:11:35:ef:59:9b:e5:32:6c:16:
e4:19:ef:76:7c:0b:c5:f5:34:c5:c7:7b:6f:e0:7f:
76:09:fe:2b:48:19:a6:f4:58:6a:74:7c:64:b2:5a:
e9:c8:ca:ad:d8:79:32:be:92:ff:e6:dc:90:eb:5c:
6c:d8:e5:3e:17:cd:b7:25:4c:89:24:49:10:68:f9:
5a:94:28:bf:77:39:03:4a:c2:86:8a:ff:cb:10:82:
64:2f:7e:df:87:6b:ca:c7:7a:5d:01:0f:73:d4:02:
33:4e:62:06:75:bb:1d:bb:e4:3e:d0:74:51:33:b6:
f9:62:1e:f2:82:98:f6:e5:92:6d:4f:43:59:51:d1:
2e:55:87:6e:c4:fb:7c:7c:b0:7b:dc:71:9f:37:f9:
cb:6e:a4:c4:49:9c:08:ba:33:99:e0:e6:87:54:a2:
ac:85:75:e9:d9:f1:e8:f7:66:b0:a7:93:41:02:70:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:53:77:B2:2A:6A:CB:82:44:3C:D6:A4:EF:B8:7E:D0:A7:45:47:7C
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/rFN3sipqy4JEPNak77h-0KdFR3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
74.119.195.0/24
80.92.206.0/24
185.242.84.0/22
185.250.148.0/23
IPv6:
2a09:7c40::/32
2a09:7c44::/32
2a09:7c47::/32
Signature Algorithm: sha256WithRSAEncryption
83:69:68:94:cf:b6:78:48:d1:ce:2e:53:bb:02:e9:ef:bc:67:
42:c5:58:ce:72:30:91:55:05:4b:4e:be:48:8e:ef:75:83:8d:
1d:93:17:52:1a:0f:64:30:74:59:3a:de:9a:31:e9:5c:9d:aa:
96:47:43:00:36:cc:69:b1:98:00:bb:3a:3c:99:ba:0b:53:5b:
81:f6:3e:cd:c4:2e:ce:29:a7:b9:5f:ed:7a:31:b2:d2:2b:f8:
f6:7a:f2:6d:37:45:32:6e:f4:8a:95:51:90:97:c1:4c:d6:bf:
c1:c4:a2:f1:07:31:12:b2:0c:4f:68:e7:fd:4c:a3:1a:fc:d0:
0d:24:f1:ab:7a:29:b1:b7:88:24:b3:d5:0e:5e:fa:f1:a3:2a:
79:79:e3:36:3a:7f:87:b5:55:53:e5:39:ff:18:b5:c9:26:91:
b0:2c:4b:48:61:11:84:a6:0e:1d:d5:e3:dd:97:ad:3f:59:09:
e6:ca:cc:3a:dd:10:03:d0:07:15:d0:69:eb:13:32:0b:ce:8b:
5f:13:4a:4a:43:d9:05:f1:a2:da:2f:cb:67:7b:8d:b3:bd:49:
c8:04:da:f2:e5:8e:c4:45:42:04:4b:c7:9f:d8:24:78:62:7a:
09:d3:71:38:aa:73:84:c1:55:2f:67:e5:13:1c:37:70:08:3e:
15:e7:82:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org