Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/woDmCGpeoUGqXEzH9uq4jnG6kXA.roa
File: woDmCGpeoUGqXEzH9uq4jnG6kXA.roa (raw, json)
Hash identifier: DDYMpxg/CTNsBZZfMsP1P7j5SN6enfVVme00sfDvXAg=
Subject key identifier: C2:80:E6:08:6A:5E:A1:41:AA:5C:4C:C7:F6:EA:B8:8E:71:BA:91:70
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018B95AD7A93F17100CB7D8A6F0C1714F97F
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/woDmCGpeoUGqXEzH9uq4jnG6kXA.roa
Signing time: Fri 03 Nov 2023 14:54:16 +0000
ROA not before: Fri 03 Nov 2023 14:54:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.120.176.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
193.203.202.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.72.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 07 Dec 2023 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:ad:7a:93:f1:71:00:cb:7d:8a:6f:0c:17:14:f9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Nov 3 14:54:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c280e6086a5ea141aa5c4cc7f6eab88e71ba9170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:c9:ce:96:65:8b:70:d9:60:6f:7d:60:1f:
19:50:ff:73:8a:79:39:90:1d:98:cb:bd:05:9b:66:
22:23:30:31:3e:02:3c:62:61:90:58:8b:a6:e1:ef:
7a:14:92:a0:66:f5:11:e3:c2:b7:76:4c:3e:64:0d:
93:c0:0b:4a:c5:a0:ed:8f:f3:72:dd:78:a8:06:53:
8e:1d:e1:38:76:56:54:df:84:0b:d0:13:bf:7b:82:
42:d5:02:4b:ff:18:b0:ed:cd:33:43:ad:ec:a9:9b:
8f:d6:18:c8:c4:1a:84:89:65:b9:56:ab:f0:30:3a:
e7:b8:f8:f4:5f:cc:82:d4:32:ed:91:68:bd:4e:25:
6d:15:46:1a:0b:ee:68:dc:d2:de:71:2d:ef:3b:e3:
a2:fe:f5:cf:f9:34:9f:6e:db:f0:eb:49:4b:b5:c5:
b8:05:79:55:92:98:b6:52:c9:48:9a:34:4a:17:e1:
20:fe:18:4c:90:ab:1d:e3:76:13:2c:54:8e:88:04:
b2:a3:4a:b9:fa:dc:b6:66:fd:39:7b:60:39:6a:78:
b2:fe:cf:77:46:77:2b:57:be:0e:28:35:6c:90:41:
93:0d:50:53:15:13:9d:ac:63:58:4f:f7:42:91:30:
e4:fb:10:d5:77:f0:57:19:26:95:cf:94:77:f2:cf:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:80:E6:08:6A:5E:A1:41:AA:5C:4C:C7:F6:EA:B8:8E:71:BA:91:70
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/woDmCGpeoUGqXEzH9uq4jnG6kXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
91.225.218.0/23
103.35.188.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
195.149.87.0/24
IPv6:
2a09:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
00:1d:7d:6e:84:78:33:fc:89:96:d9:9a:59:71:a7:b1:55:45:
92:9e:ce:a6:e3:60:d8:71:39:5c:14:2f:cc:a9:8c:42:a9:f9:
85:71:44:83:1d:f3:93:7d:14:ab:94:ed:12:4a:55:91:4d:70:
3b:32:5a:ab:bd:48:5d:77:e5:45:a6:32:15:7c:e6:40:a1:c6:
f0:af:83:42:dc:24:33:81:d7:f1:42:2d:f8:a3:76:d3:c9:0a:
93:54:9a:48:5c:25:52:ea:10:80:bb:6f:ce:91:39:e5:13:d2:
98:73:73:4d:cf:08:14:13:64:79:a7:31:01:88:ac:a3:3f:dd:
85:6f:71:aa:94:a6:ff:ab:54:c0:24:84:fc:38:0c:5f:6e:74:
33:6a:7c:f4:f9:e3:3a:56:30:80:b6:05:e7:4b:8b:96:5b:6f:
ff:aa:19:6b:c5:52:98:18:68:da:36:d1:41:33:07:c6:f4:0b:
27:50:14:46:f4:ef:73:19:e9:8e:70:c7:a8:4e:71:3f:84:de:
00:37:50:ac:1d:8e:1b:9d:26:e8:11:ae:81:ff:4d:19:1d:86:
1c:a5:09:bb:4c:2d:bf:3e:88:18:85:ce:ee:de:dd:8a:3f:c7:
a6:76:1b:e9:46:9c:da:c2:42:2f:bf:24:6f:84:47:b7:59:f2:
c7:fa:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org