Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/sQkgxrw_FRiWWIRM68s4VG3Q0uo.roa
File: sQkgxrw_FRiWWIRM68s4VG3Q0uo.roa (raw, json)
Hash identifier: D3HsCMkeLKBHDmb3tCO9RiyC8pJMUBlk7QEhYvjuJsQ=
Subject key identifier: B1:09:20:C6:BC:3F:15:18:96:58:84:4C:EB:CB:38:54:6D:D0:D2:EA
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018D59DC333EF8BFDAE10C0AB35BA8A2C235
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/sQkgxrw_FRiWWIRM68s4VG3Q0uo.roa
Signing time: Tue 30 Jan 2024 10:13:39 +0000
ROA not before: Tue 30 Jan 2024 10:13:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.149.87.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 02 Feb 2024 00:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:dc:33:3e:f8:bf:da:e1:0c:0a:b3:5b:a8:a2:c2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 30 10:13:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b10920c6bc3f15189658844cebcb38546dd0d2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:68:64:96:8a:5a:61:0f:a2:48:9b:bb:95:b6:
fa:2e:1e:64:f5:2a:c7:19:36:08:24:2d:84:3a:6e:
d5:3d:98:4c:a6:6b:71:51:42:cd:b9:21:a9:70:dc:
bf:ce:b7:71:43:85:91:63:96:66:fa:d0:61:8f:c8:
5a:e8:f5:f4:81:8c:17:be:13:56:9d:d6:bc:b8:11:
5f:51:40:a3:59:e4:d4:09:fe:d7:7e:b6:06:a6:11:
40:be:42:46:8f:88:5f:0b:8a:d1:a5:09:a1:37:da:
d4:08:97:68:57:55:96:91:09:06:c9:13:dd:dc:4e:
95:c3:00:07:cb:12:cd:fc:08:37:25:fc:60:de:cd:
6b:94:22:51:d9:32:db:06:b6:b5:4b:90:09:0d:c4:
28:40:c6:b0:6b:87:8f:6e:c3:ff:7a:e4:87:6c:7b:
c2:c7:ad:0c:df:54:b4:42:21:e8:ff:71:47:5d:88:
11:06:2d:ed:69:2a:22:21:d9:0d:e6:6e:ab:5b:32:
da:d0:09:96:24:18:7e:25:fb:2b:06:d9:8f:ec:c8:
e5:c2:c7:ef:79:d0:97:b0:63:21:41:0d:06:42:df:
c4:ff:49:94:cb:d8:68:17:cc:5f:f3:ba:42:c6:fd:
97:ee:43:83:74:81:0e:5d:4b:ea:7d:73:0f:6f:5a:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:09:20:C6:BC:3F:15:18:96:58:84:4C:EB:CB:38:54:6D:D0:D2:EA
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/sQkgxrw_FRiWWIRM68s4VG3Q0uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.234.64.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/23
195.149.87.0/24
IPv6:
2a09:7c40::/29
2a11:3c02::/31
2a14:2d80::/32
Signature Algorithm: sha256WithRSAEncryption
63:0e:88:79:11:89:ad:64:ad:8b:d5:16:df:0e:29:4d:0d:c6:
58:8f:4d:f5:84:a8:29:76:cc:ec:e9:3b:4e:49:86:15:41:af:
99:44:a9:c2:9d:c0:75:2a:f2:63:aa:22:84:1d:08:2a:e9:9b:
11:f0:06:ff:85:d5:24:d3:f5:a2:75:5f:c7:33:e8:78:50:14:
58:29:30:63:ff:95:c5:e2:72:c8:33:6b:46:26:b0:00:66:b7:
4a:b8:7c:c8:b1:f1:14:23:a7:a9:19:a6:12:1e:7f:2e:5e:5d:
78:f2:28:f5:ba:a1:b8:e3:6f:c5:51:af:0a:ee:64:1b:a0:bf:
54:f1:5e:16:60:eb:88:1c:9c:49:21:3c:c9:90:0f:79:34:1d:
95:10:f7:d0:e8:1a:f5:8b:e2:d0:c5:57:c6:e0:b7:23:7d:34:
ea:a7:ea:10:33:a3:5b:a9:cb:57:bb:7a:cd:74:ad:6d:6c:e9:
99:80:31:cf:a8:f8:d1:7f:0f:a4:e6:5f:98:6f:b6:28:76:75:
0d:ba:31:01:bb:f8:66:1b:37:9b:64:43:36:b0:bb:e6:e9:96:
b7:09:e5:c4:b9:8f:2e:6a:9c:b7:32:92:1b:89:52:1e:fe:e0:
a4:c1:98:0f:01:2b:1a:00:8d:84:1e:76:75:aa:7a:12:64:86:
5a:22:7a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:28 2024 by rpki-client on console-ams.rpki-client.org