Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/rdhI27uvgLCys2-FVUkWYcmf1_8.roa
File: rdhI27uvgLCys2-FVUkWYcmf1_8.roa (raw, json)
Hash identifier: K4oEQW2jJTxXa9rmkI+4Reo3hNGZKqwNtI930DWPUqE=
Subject key identifier: AD:D8:48:DB:BB:AF:80:B0:B2:B3:6F:85:55:49:16:61:C9:9F:D7:FF
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018C43F0B78C5F8E81F5308EF6902E8930B2
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/rdhI27uvgLCys2-FVUkWYcmf1_8.roa
Signing time: Thu 07 Dec 2023 11:01:38 +0000
ROA not before: Thu 07 Dec 2023 11:01:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.120.176.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
103.106.0.0/22 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
193.203.202.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:f0:b7:8c:5f:8e:81:f5:30:8e:f6:90:2e:89:30:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Dec 7 11:01:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=add848dbbbaf80b0b2b36f8555491661c99fd7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0d:31:cb:e2:fc:ef:20:3c:55:19:1b:85:ff:
b6:1c:23:01:05:72:c7:c2:e6:fb:98:32:ce:df:57:
f3:64:aa:8f:d8:8e:87:6e:c8:04:5e:3c:a0:70:4c:
e3:a4:50:f5:d6:33:3c:82:7b:ea:27:ed:5c:47:2f:
3b:89:7e:89:64:e4:51:6c:c6:83:07:9f:b4:0c:26:
dc:fa:6f:ba:14:54:18:af:2b:92:ca:42:68:8d:8b:
1a:0e:e4:68:31:39:88:9a:83:de:0e:30:89:c3:86:
92:6e:2a:81:62:51:91:fa:03:bc:7f:89:af:0e:77:
47:22:5b:d5:66:44:12:67:65:c2:d5:01:eb:56:9b:
ab:ac:05:a7:07:8d:d8:ed:29:1b:cc:04:14:ac:a9:
f6:ae:65:d0:be:e4:61:3c:01:d9:fd:17:90:66:22:
1d:7d:ff:f6:00:c0:97:60:a8:f2:7b:c1:33:d3:eb:
05:53:9a:f0:72:27:26:5e:bf:93:e4:64:74:2c:36:
6a:93:37:3e:c1:2f:5a:d9:b0:23:7b:57:8c:f2:40:
09:f6:ca:d8:8e:97:ba:1a:be:4f:58:b8:c4:d0:e6:
7d:a0:6b:74:0b:cf:c2:ba:a6:58:62:d3:23:3f:ac:
70:c8:a2:b5:8a:b6:87:cc:43:66:5c:da:c1:45:f1:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D8:48:DB:BB:AF:80:B0:B2:B3:6F:85:55:49:16:61:C9:9F:D7:FF
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/rdhI27uvgLCys2-FVUkWYcmf1_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
91.225.218.0/23
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
195.149.87.0/24
IPv6:
2a09:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
95:e6:1d:3f:f5:32:ba:87:af:94:94:44:f0:19:3f:f0:19:99:
01:38:c3:9b:53:f0:78:2d:db:15:3c:62:76:4a:e6:fe:c6:7e:
0e:09:ff:e1:c1:a5:be:b2:ff:a8:83:6f:9e:db:d5:5b:4c:8f:
fe:90:8c:b2:80:64:5d:5f:27:83:8a:e5:26:b9:e1:de:77:9e:
7a:a7:9e:0f:42:1f:29:05:d0:1d:e3:f6:d8:16:2b:a1:92:de:
97:93:9d:9b:ef:8c:2d:85:79:47:ec:aa:a8:6b:6d:53:24:e9:
f8:ef:0c:1a:cc:c2:ef:0c:00:ef:27:ac:03:ed:b1:09:d0:88:
dd:b3:29:9d:a0:e3:4a:6f:66:ea:5e:18:d0:ca:b4:9a:77:9c:
6e:0f:a4:5c:8f:d7:ca:30:61:02:cd:29:0e:e8:93:00:84:99:
49:45:57:4a:0e:aa:f0:84:f2:1a:7e:4a:72:c7:42:b7:55:7b:
b3:73:49:96:e5:d1:12:bb:b1:ee:fd:d6:c9:1e:2c:2e:18:71:
e6:6c:2f:96:80:88:07:ad:da:e2:d8:ff:24:7b:bc:3c:68:71:
ef:0c:ce:e8:fd:01:f6:a0:00:98:0b:18:c1:1c:0d:a1:40:0b:
df:6d:c4:9d:51:75:ab:05:51:c2:fb:1d:5e:2f:10:fb:b7:e4:
f4:2b:b5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 02:37:40 2023 by rpki-client on console-fra.rpki-client.org