Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/vMAWdtlBAPMzSS484P33zmCIw-8.roa
File: vMAWdtlBAPMzSS484P33zmCIw-8.roa (raw, json)
Hash identifier: iCSIDm0RorbS2Uib4FUjzWpSvLgav9sR6jlds+dS4Z8=
Subject key identifier: BC:C0:16:76:D9:41:00:F3:33:49:2E:3C:E0:FD:F7:CE:60:88:C3:EF
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018C7DA617B9F5EC52D106D6C2C01C9F45F7
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/vMAWdtlBAPMzSS484P33zmCIw-8.roa
Signing time: Mon 18 Dec 2023 15:58:06 +0000
ROA not before: Mon 18 Dec 2023 15:58:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48146
IP address blocks: 92.118.248.0/22 maxlen: 24
185.148.52.0/22 maxlen: 24
151.237.131.0/24 maxlen: 24
185.240.22.0/24 maxlen: 24
188.240.236.0/22 maxlen: 24
185.240.23.0/24 maxlen: 24
185.255.72.0/22 maxlen: 24
45.86.224.0/22 maxlen: 24
81.22.232.0/22 maxlen: 24
194.36.104.0/22 maxlen: 24
185.209.8.0/22 maxlen: 24
194.147.144.0/22 maxlen: 24
45.89.40.0/22 maxlen: 24
5.182.80.0/22 maxlen: 24
45.147.204.0/22 maxlen: 24
45.14.208.0/22 maxlen: 24
185.198.108.0/22 maxlen: 24
45.136.32.0/22 maxlen: 24
193.228.194.0/23 maxlen: 24
185.210.60.0/22 maxlen: 24
193.228.204.0/23 maxlen: 24
185.210.72.0/22 maxlen: 24
151.237.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:a6:17:b9:f5:ec:52:d1:06:d6:c2:c0:1c:9f:45:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 18 15:58:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcc01676d94100f333492e3ce0fdf7ce6088c3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:87:c7:e4:2b:af:eb:7e:db:00:01:68:ed:e7:
50:3a:fd:2a:cc:6f:74:e0:0d:f1:5c:30:2d:23:e5:
cb:32:50:2d:f4:4c:8c:a9:2b:33:a0:c3:7f:3b:df:
45:fd:b4:52:24:d8:61:c1:09:6c:6d:b9:ae:51:2e:
72:ad:3a:60:3d:89:11:e7:db:b4:63:cd:8c:83:7e:
ee:9d:ed:f5:c3:7f:93:cc:2b:1b:2d:b6:f0:fc:db:
96:b2:b5:5b:74:12:68:91:3e:b0:fd:e2:9e:83:de:
94:ba:36:42:45:4a:e4:8b:b8:4f:e2:ff:3b:02:d0:
eb:d9:e4:17:c3:74:8c:5b:2c:7b:00:04:7b:2c:43:
ce:b3:dc:de:22:a8:9b:d3:32:92:e4:9f:93:33:8b:
d8:c8:93:87:21:c6:58:87:57:e0:e9:46:36:68:04:
40:b5:d6:1e:95:b5:45:03:4a:e6:36:80:f8:bd:66:
18:44:0b:9b:eb:4f:f5:04:74:45:f0:a2:8e:29:b2:
da:e2:6a:dd:53:dd:75:10:e2:60:f4:c1:a4:c6:b5:
8d:9a:3e:ad:8e:df:f8:d7:7c:d9:ab:64:bb:d2:ce:
7a:66:02:14:15:2b:d1:96:2f:5e:b4:ea:7b:d3:73:
95:2d:3d:f3:01:27:3b:97:07:78:21:cd:01:11:e4:
0f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C0:16:76:D9:41:00:F3:33:49:2E:3C:E0:FD:F7:CE:60:88:C3:EF
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/vMAWdtlBAPMzSS484P33zmCIw-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.80.0/22
45.14.208.0/22
45.86.224.0/22
45.89.40.0/22
45.136.32.0/22
45.147.204.0/22
81.22.232.0/22
92.118.248.0/22
151.237.59.0/24
151.237.131.0/24
185.148.52.0/22
185.198.108.0/22
185.209.8.0/22
185.210.60.0/22
185.210.72.0/22
185.240.22.0/23
185.255.72.0/22
188.240.236.0/22
193.228.194.0/23
193.228.204.0/23
194.36.104.0/22
194.147.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:5e:b0:a5:fa:d7:d1:a5:93:f0:3f:8c:92:cb:a7:d4:86:e1:
c8:46:85:0d:4d:3a:ad:43:e3:82:b0:fa:b5:05:e8:3c:73:61:
38:a7:4e:7f:73:d4:59:0e:e6:59:d7:20:71:65:67:42:77:07:
27:22:44:18:e5:95:b5:e9:cf:bf:57:50:dc:72:71:0f:08:fc:
93:a3:bd:3b:77:e1:a4:8e:6b:a3:43:21:dc:8d:02:95:28:9c:
db:13:ee:60:74:6d:01:6e:8c:50:a0:22:33:be:cb:ad:f7:36:
51:c7:42:35:27:64:12:ce:3a:b3:09:23:2f:cd:e3:8c:f2:7e:
48:90:59:83:a1:5b:1f:2a:86:6e:41:6c:58:2f:75:53:fe:56:
4d:a2:97:0d:52:40:f7:68:a6:96:0d:c9:3b:82:72:9d:93:d4:
b2:7e:ac:38:03:27:88:bf:6e:c9:6d:29:89:e3:91:0a:fc:89:
f0:02:1b:4e:7a:5a:60:03:4f:eb:71:e7:7a:84:b7:55:21:ce:
fa:8e:fb:6f:9c:e1:13:47:88:dd:cc:6d:c5:b4:c5:e1:f9:d4:
2c:0e:5a:a8:fb:09:c8:a7:a2:30:3c:ae:87:40:1a:0a:6f:97:
dd:7d:c0:00:4e:13:45:5e:7f:5e:93:2f:4a:01:af:7f:f5:58:
a6:3c:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org