Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/hOBZM3i55chxxKuH9wrA8yuw52w.roa
File: hOBZM3i55chxxKuH9wrA8yuw52w.roa (raw, json)
Hash identifier: eOidfCFtYkQtxlpp4Qirn7gckpe5OAcXSMecyddG73Y=
Subject key identifier: 84:E0:59:33:78:B9:E5:C8:71:C4:AB:87:F7:0A:C0:F3:2B:B0:E7:6C
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0191295A3B618C2E574EA1967CD4EB9501B9
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/hOBZM3i55chxxKuH9wrA8yuw52w.roa
Signing time: Tue 06 Aug 2024 20:21:04 +0000
ROA not before: Tue 06 Aug 2024 20:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35196
IP address blocks: 45.9.73.179/32 maxlen: 32
45.9.73.184/32 maxlen: 32
45.9.73.236/32 maxlen: 32
45.89.65.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.136.67/32 maxlen: 32
94.142.139.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.206.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.48.18/32 maxlen: 32
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a09:5302:ffff::/48 maxlen: 48
2a0a:9300:1000::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 08 Aug 2024 09:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:29:5a:3b:61:8c:2e:57:4e:a1:96:7c:d4:eb:95:01:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 6 20:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84e0593378b9e5c871c4ab87f70ac0f32bb0e76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:cd:34:70:0c:f7:c3:04:8a:8a:54:6f:71:
1b:fe:2b:c0:bc:e6:07:ba:f9:60:8b:5e:f1:26:57:
e2:be:88:ab:41:fe:1e:71:89:a0:33:a1:1d:b5:1a:
f9:8f:b2:b1:31:d1:52:33:06:57:4a:8d:ca:ed:8e:
be:e4:84:8e:20:28:2b:b4:84:2f:74:b0:5c:9c:bb:
69:81:a9:71:fd:f7:d7:e7:c0:5f:5f:90:6f:f9:d5:
98:f7:0b:8b:0d:8d:b1:92:9b:0e:57:23:cb:f4:ab:
f6:a8:2a:e3:bd:8b:27:b9:ae:24:b1:e8:a6:76:89:
df:6d:f4:06:5b:bf:38:5c:fe:0b:d2:26:2d:f1:50:
1b:36:cd:de:fa:30:0d:4c:e0:0d:ae:71:61:ab:99:
5e:59:dd:1f:1b:96:4c:34:8b:c3:3b:c9:00:25:6e:
a9:be:ba:39:e9:76:55:02:b4:c4:9e:ba:cc:b9:7b:
0f:e4:0c:ae:d3:98:d1:40:eb:f4:88:fd:55:27:26:
04:af:54:6f:2e:8a:0e:69:6e:3b:3c:f4:70:33:34:
96:74:43:ee:c1:77:52:dd:c4:45:72:a7:36:3d:fe:
8f:88:a0:d8:e1:0c:78:72:e3:10:e0:55:4d:4b:51:
49:46:f1:94:d2:40:ea:d8:eb:2a:da:aa:59:74:a9:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E0:59:33:78:B9:E5:C8:71:C4:AB:87:F7:0A:C0:F3:2B:B0:E7:6C
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/hOBZM3i55chxxKuH9wrA8yuw52w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.179/32
45.9.73.184/32
45.9.73.236/32
45.89.65.0-45.89.67.255
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.229.0-185.125.231.255
194.67.192.0/19
195.47.250.0/24
IPv6:
2a09:5302:ffff::/48
2a0a:9300:1000::/48
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
6a:98:02:06:e5:f7:96:1a:9e:62:25:0e:ab:5f:3a:45:6d:cd:
7c:95:cd:7a:c5:1d:30:2c:10:a2:b8:dd:01:61:60:59:23:f7:
a2:6f:09:1c:9f:95:29:65:73:70:67:0a:96:fc:05:30:6f:ed:
c2:7d:a6:7e:1e:76:f9:5b:be:9a:f7:79:07:c0:29:bd:6f:64:
01:78:7b:0e:22:d1:5a:c3:26:0b:9e:f8:85:41:79:13:e8:60:
04:8c:48:d6:71:99:d8:79:22:e8:cc:7c:a1:f8:82:d4:21:8a:
9c:71:17:0b:3c:3b:7e:4f:d8:57:e5:37:b0:b0:59:0b:33:76:
a6:a8:62:1e:eb:b2:ba:b3:08:4b:7c:2d:e5:52:f2:73:17:1c:
6e:30:cd:33:0b:44:36:5d:c2:b6:63:d7:86:69:33:14:c8:0a:
d7:3f:89:d8:98:4d:f1:80:0a:4e:a1:84:e2:80:80:09:21:75:
90:12:d5:2d:a7:a2:34:35:3a:6c:20:72:e1:ff:87:86:f2:7c:
c5:8b:17:6e:dd:77:66:fe:a7:1f:96:2c:39:9e:01:fe:81:55:
15:80:14:e2:a2:5e:93:b7:38:d0:3c:81:92:9c:f0:b0:ca:68:
56:0e:cb:33:8a:18:b4:80:57:5f:15:70:f7:38:e2:3e:93:7b:
e5:9f:10:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 13:04:24 2024 by rpki-client on console-fra.rpki-client.org