Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/tpBamn1LjNPMkLZUfndHfzyXAwQ.roa
File: tpBamn1LjNPMkLZUfndHfzyXAwQ.roa (raw, json)
Hash identifier: NRT4bNSkFEm+aCWSzKtMfkLkOOj+9CdHnRjekK8SZ1U=
Subject key identifier: B6:90:5A:9A:7D:4B:8C:D3:CC:90:B6:54:7E:77:47:7F:3C:97:03:04
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018D0CE26877F51D365D5E70E0170CE30BC0
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/tpBamn1LjNPMkLZUfndHfzyXAwQ.roa
Signing time: Mon 15 Jan 2024 11:29:40 +0000
ROA not before: Mon 15 Jan 2024 11:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48146
IP address blocks: 92.118.248.0/22 maxlen: 24
94.103.244.0/22 maxlen: 24
185.189.225.0/24 maxlen: 24
185.189.226.0/23 maxlen: 24
45.138.252.0/22 maxlen: 24
185.240.22.0/24 maxlen: 24
185.240.23.0/24 maxlen: 24
185.255.72.0/22 maxlen: 24
45.86.224.0/22 maxlen: 24
81.22.232.0/22 maxlen: 24
194.36.104.0/22 maxlen: 24
194.147.144.0/22 maxlen: 24
45.89.40.0/22 maxlen: 24
185.25.52.0/22 maxlen: 24
45.147.204.0/22 maxlen: 24
45.14.208.0/22 maxlen: 24
185.198.108.0/22 maxlen: 24
45.136.32.0/22 maxlen: 24
193.228.194.0/23 maxlen: 24
185.210.60.0/22 maxlen: 24
193.228.204.0/23 maxlen: 24
185.195.36.0/22 maxlen: 24
185.210.72.0/22 maxlen: 24
151.237.59.0/24 maxlen: 24
185.192.72.0/22 maxlen: 24
185.148.52.0/22 maxlen: 24
151.237.131.0/24 maxlen: 24
188.240.236.0/22 maxlen: 24
185.209.8.0/22 maxlen: 24
194.59.196.0/22 maxlen: 24
5.182.80.0/22 maxlen: 24
185.192.116.0/22 maxlen: 24
45.152.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 13:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:e2:68:77:f5:1d:36:5d:5e:70:e0:17:0c:e3:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 15 11:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6905a9a7d4b8cd3cc90b6547e77477f3c970304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:03:16:ed:af:56:93:80:ba:79:eb:97:43:7a:
bd:7f:39:fc:13:b8:ac:7a:d7:8a:73:90:ba:0e:11:
68:d3:2b:fe:32:64:88:f5:6e:c4:53:2b:4d:13:b1:
cb:dd:8b:70:00:08:ba:2d:39:84:d2:e0:14:56:a1:
ca:f0:63:c3:a6:ec:67:6c:be:da:5b:dd:6a:1d:3f:
31:45:8e:a6:b0:d4:ed:32:88:87:47:65:6e:0c:1c:
f7:8b:c5:d6:c2:e7:79:41:c2:0c:00:27:c0:9a:d6:
f1:73:b1:0d:f9:31:bd:79:1e:9a:45:d3:5a:70:b1:
f4:68:2e:09:7e:42:5f:35:64:e6:fa:48:e7:ae:1a:
08:b3:42:13:8c:7d:94:c9:db:6f:14:21:3a:df:07:
8d:4e:76:05:53:e8:54:6a:32:a9:22:33:79:a9:45:
65:dc:26:c3:8e:24:33:58:90:3d:04:d2:60:50:1d:
5a:74:c3:55:98:bd:0d:57:dc:b6:2e:ae:01:24:58:
84:88:8c:9e:10:9a:cf:76:f7:19:96:a2:e9:84:52:
7b:65:e0:45:dd:a5:91:39:24:5c:68:09:8a:e9:84:
1d:de:5f:58:2a:58:73:1a:ff:58:58:e0:6b:79:5f:
43:9c:af:8d:ad:d7:55:60:0c:25:fa:62:b3:b4:ad:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:90:5A:9A:7D:4B:8C:D3:CC:90:B6:54:7E:77:47:7F:3C:97:03:04
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/tpBamn1LjNPMkLZUfndHfzyXAwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.80.0/22
45.14.208.0/22
45.86.224.0/22
45.89.40.0/22
45.136.32.0/22
45.138.252.0/22
45.147.204.0/22
45.152.12.0/22
81.22.232.0/22
92.118.248.0/22
94.103.244.0/22
151.237.59.0/24
151.237.131.0/24
185.25.52.0/22
185.148.52.0/22
185.189.225.0-185.189.227.255
185.192.72.0/22
185.192.116.0/22
185.195.36.0/22
185.198.108.0/22
185.209.8.0/22
185.210.60.0/22
185.210.72.0/22
185.240.22.0/23
185.255.72.0/22
188.240.236.0/22
193.228.194.0/23
193.228.204.0/23
194.36.104.0/22
194.59.196.0/22
194.147.144.0/22
Signature Algorithm: sha256WithRSAEncryption
32:71:ad:69:64:8b:38:52:3c:b0:f4:47:e8:ab:b2:74:d4:4c:
9e:65:c4:7c:c7:4e:56:0b:62:29:9f:07:fd:f0:39:e8:a7:2b:
e7:ba:81:d7:27:31:4d:42:d0:2e:3d:42:f7:6b:b4:44:13:3a:
17:44:02:c5:08:ee:63:e4:14:f7:85:bc:86:54:be:da:fb:1c:
c0:0c:c6:85:2a:9a:53:09:9b:ae:59:ad:fc:98:39:ad:cd:ad:
86:00:e7:77:c2:35:de:87:9a:cc:00:0f:d0:a1:6b:df:1f:35:
90:d7:96:13:60:0a:bd:77:60:ad:c4:66:41:fb:fe:78:db:14:
f7:c2:61:dc:29:56:72:73:96:a1:d3:8b:25:c7:fd:af:b9:38:
14:25:fb:d7:fa:19:90:0c:66:ce:16:e7:89:9d:85:85:8a:66:
61:4e:33:ea:f2:3d:f5:4e:b4:b7:52:fe:be:a5:1f:f0:05:29:
ec:ff:7b:f3:a5:0c:c9:b4:5f:e7:c5:62:77:31:47:70:d7:7b:
b5:79:3c:bc:a8:36:ec:8b:5f:20:86:a5:cd:25:46:4e:24:13:
23:49:5a:46:fd:2f:60:be:f0:6b:63:1b:20:41:40:67:81:24:
88:7f:fc:8e:bc:b2:b9:99:82:8a:83:ad:28:50:0b:b8:ae:fb:
5a:61:a3:f1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgISAY0M4mh39R02XV5w4BcM4wvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjQwMTE1MTEyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjkwNWE5YTdkNGI4Y2QzY2M5MGI2NTQ3ZTc3NDc3ZjNjOTcwMzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQMW7a9Wk4C6eeuXQ3q9fzn8E7is
eteKc5C6DhFo0yv+MmSI9W7EUytNE7HL3YtwAAi6LTmE0uAUVqHK8GPDpuxnbL7a
W91qHT8xRY6msNTtMoiHR2VuDBz3i8XWwud5QcIMACfAmtbxc7EN+TG9eR6aRdNa
cLH0aC4JfkJfNWTm+kjnrhoIs0ITjH2UydtvFCE63weNTnYFU+hUajKpIjN5qUVl
3CbDjiQzWJA9BNJgUB1adMNVmL0NV9y2Lq4BJFiEiIyeEJrPdvcZlqLphFJ7ZeBF
3aWROSRcaAmK6YQd3l9YKlhzGv9YWOBreV9DnK+NrddVYAwl+mKztK2eUwIDAQAB
o4ICyjCCAsYwHQYDVR0OBBYEFLaQWpp9S4zTzJC2VH53R388lwMEMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvdHBCYW1uMUxqTlBNa0xaVWZuZEhmenlYQXdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCByQQCAAEwgcIDBAIF
tlADBAItDtADBAItVuADBAItWSgDBAItiCADBAItivwDBAItk8wDBAItmAwDBAJR
FugDBAJcdvgDBAJeZ/QDBACX7TsDBACX7YMDBAK5GTQDBAK5lDQwDAMEALm94QME
Arm94AMEArnASAMEArnAdAMEArnDJAMEArnGbAMEArnRCAMEArnSPAMEArnSSAME
AbnwFgMEArn/SAMEArzw7AMEAcHkwgMEAcHkzAMEAsIkaAMEAsI7xAMEAsKTkDAN
BgkqhkiG9w0BAQsFAAOCAQEAMnGtaWSLOFI8sPRH6KuydNRMnmXEfMdOVgtiKZ8H
/fA56Kcr57qB1ycxTULQLj1C92u0RBM6F0QCxQjuY+QU94W8hlS+2vscwAzGhSqa
Uwmbrlmt/Jg5rc2thgDnd8I13oeazAAP0KFr3x81kNeWE2AKvXdgrcRmQfv+eNsU
98Jh3ClWcnOWodOLJcf9r7k4FCX71/oZkAxmzhbniZ2FhYpmYU4z6vI99U60t1L+
vqUf8AUp7P9786UMybRf58VidzFHcNd7tXk8vKg27ItfIIalzSVGTiQTI0laRv0v
YL7wa2MbIEFAZ4EkiH/8jryyuZmCioOtKFALuK77WmGj8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org