Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/hzRijwr0-jSx6u6-qqiWGs8vRTI.roa
File: hzRijwr0-jSx6u6-qqiWGs8vRTI.roa (raw, json)
Hash identifier: TNMXTCCgMt/iZamuXLCQg6C3zJ8L6OphdSeHaAbK5Fs=
Subject key identifier: 87:34:62:8F:0A:F4:FA:34:B1:EA:EE:BE:AA:A8:96:1A:CF:2F:45:32
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018EBF7754AC1955DD8B74BD649611AA0855
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/hzRijwr0-jSx6u6-qqiWGs8vRTI.roa
Signing time: Mon 08 Apr 2024 20:47:32 +0000
ROA not before: Mon 08 Apr 2024 20:47:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
178.210.224.0/24 maxlen: 24
178.210.225.0/24 maxlen: 24
178.210.226.0/23 maxlen: 23
178.210.228.0/22 maxlen: 24
178.210.232.0/22 maxlen: 22
178.210.236.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.240.0/22 maxlen: 22
178.210.244.0/22 maxlen: 22
178.210.248.0/24 maxlen: 24
178.210.249.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
178.210.251.0/24 maxlen: 24
178.210.252.0/22 maxlen: 22
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a0c:f1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 11 Apr 2024 15:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bf:77:54:ac:19:55:dd:8b:74:bd:64:96:11:aa:08:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 8 20:47:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8734628f0af4fa34b1eaeebeaaa8961acf2f4532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:f4:bb:8e:12:a8:d0:ed:1c:6d:46:79:85:
63:b3:b2:9f:e0:94:8c:6b:a1:eb:23:73:6d:35:06:
72:32:10:a9:6b:1a:e1:0d:bc:ab:a1:ff:23:15:0b:
ec:e0:f8:45:6e:d0:5e:a6:b9:23:a5:3e:38:da:9b:
d4:3f:92:fd:50:d8:9b:c9:e9:6b:37:48:2e:da:20:
35:ca:85:ec:4f:0b:59:c4:e2:d4:8e:c2:e1:c7:8b:
de:e6:4f:ef:97:dc:8d:03:4a:48:c4:ce:0e:0f:93:
af:b7:ee:d5:08:91:c5:ef:af:75:65:d2:df:2c:c5:
c1:e8:3a:e4:f5:37:dc:50:b3:5c:c5:d3:42:65:66:
0a:a6:ca:c7:f6:e4:e3:93:eb:99:3c:d5:d2:a9:ac:
5f:98:88:bd:10:bb:21:07:00:b9:8b:22:54:b2:2f:
84:83:1f:6d:f4:2b:90:00:e9:fc:0d:99:87:1a:48:
5c:dc:05:ff:86:d6:67:26:03:5b:7b:0c:b6:68:9f:
b7:6a:9d:78:0e:31:30:e7:c6:18:e9:92:2b:81:3d:
73:d1:f0:02:ea:48:54:32:21:0b:a4:13:da:d0:84:
35:5f:36:8d:7c:9a:90:86:7c:ec:7b:93:79:6a:fd:
c1:d6:5e:bf:5f:c0:07:7e:e0:82:c5:15:6b:01:f7:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:34:62:8F:0A:F4:FA:34:B1:EA:EE:BE:AA:A8:96:1A:CF:2F:45:32
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/hzRijwr0-jSx6u6-qqiWGs8vRTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.246.0/23
92.52.208.0/21
92.52.219.0/24
178.210.224.0-178.210.237.255
178.210.240.0/20
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
b8:c2:9d:95:a2:18:91:2e:e4:5e:8e:de:54:72:78:c2:77:48:
8e:e5:28:d7:80:ad:77:77:be:5c:da:aa:6a:a8:f9:88:84:26:
78:05:a2:39:07:7e:7a:f4:38:92:78:42:dc:87:b4:1b:4f:9d:
92:f0:1d:78:b8:79:6c:bb:d6:47:7f:2c:7e:be:fb:b3:e4:3a:
86:53:ec:56:02:e1:4b:81:2b:e1:99:a4:c6:40:57:57:20:08:
43:14:bb:42:11:ec:ac:c9:49:f3:b2:5d:8a:7f:31:d3:8e:fd:
9c:76:85:90:8d:f5:1c:a5:bd:88:e4:0a:20:a3:e6:3f:25:c1:
55:16:b1:25:55:51:8a:d9:65:cc:76:0d:fb:b4:37:e9:18:4f:
02:e8:ee:0b:eb:52:16:80:19:56:17:c0:64:d6:d4:f3:6a:a1:
69:d9:43:91:8d:cc:53:f7:55:32:90:ec:27:08:99:30:2f:00:
f8:a4:cc:1a:9e:36:a9:b5:c7:12:85:79:ac:b2:05:41:24:9a:
97:9c:ff:e8:ea:a3:7a:1a:08:bb:9d:1c:4e:39:6a:18:86:10:
78:46:8b:05:32:a6:7a:ab:b5:06:0f:a1:55:d1:59:b6:68:49:
3a:38:7d:b3:6c:86:e8:a1:45:b8:4f:a2:3b:00:9f:f2:20:e2:
45:68:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 19:04:46 2024 by rpki-client on console-ams.rpki-client.org