Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wSE8F8QWQ2OzFAub6MSOQ57_45A.roa
File: wSE8F8QWQ2OzFAub6MSOQ57_45A.roa (raw, json)
Hash identifier: BIQI9mRR0QWXl8qVQc/FSvvyJ01e9PGc77yLUlEgEH8=
Subject key identifier: C1:21:3C:17:C4:16:43:63:B3:14:0B:9B:E8:C4:8E:43:9E:FF:E3:90
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019130C41E1B7EAAEACE0702D748C17B073D
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wSE8F8QWQ2OzFAub6MSOQ57_45A.roa
Signing time: Thu 08 Aug 2024 06:54:04 +0000
ROA not before: Thu 08 Aug 2024 06:54:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.91.0/24 maxlen: 24
82.115.28.0/23 maxlen: 24
89.251.10.0/24 maxlen: 24
91.132.57.0/24 maxlen: 24
159.255.32.0/22 maxlen: 24
185.231.172.0/22 maxlen: 24
188.214.236.0/22 maxlen: 22
188.253.8.0/21 maxlen: 24
202.133.90.0/23 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 16:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:30:c4:1e:1b:7e:aa:ea:ce:07:02:d7:48:c1:7b:07:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 8 06:54:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1213c17c4164363b3140b9be8c48e439effe390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ba:ad:1a:19:0e:3e:b7:ad:0f:8b:e8:bf:32:
75:df:70:3f:21:92:08:f3:ac:05:99:04:05:ad:10:
d4:67:b4:14:81:c0:d0:29:02:53:cc:10:2d:d8:ed:
54:7f:04:81:21:bb:b6:af:49:85:ff:42:fb:c0:ae:
1b:bf:ab:1b:2f:90:7d:91:2d:4f:80:78:1c:13:bc:
d8:0c:00:30:68:2c:cc:07:b6:1d:b7:b4:74:fc:44:
86:9b:dd:ae:d2:5c:50:0f:76:56:ac:08:55:5e:85:
7d:86:b5:00:ad:be:24:8e:bd:49:c4:8a:94:c8:e4:
50:89:b6:a8:3e:f2:2d:61:65:66:d1:3b:53:2f:2d:
f8:1d:ca:c3:fc:8c:bf:9e:fc:dd:88:4f:2c:8a:fb:
6a:c5:1e:c1:67:6e:bc:c5:1c:0c:46:ff:e4:f7:29:
b2:85:3f:38:a0:ee:9c:07:1f:84:a9:5d:ca:4b:d7:
0d:ba:d5:91:87:05:7b:f4:df:c2:a6:e4:d6:65:ce:
64:04:bc:69:d2:2e:0c:fb:9a:4a:0f:a6:9b:ab:1a:
a2:fc:b2:34:9d:5c:75:75:26:08:f2:ad:11:3a:34:
e6:d7:3a:ec:70:f7:ed:14:52:1e:4d:3d:22:87:f3:
af:59:c9:13:ef:e3:4f:e5:fc:2f:b4:f1:50:42:60:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:21:3C:17:C4:16:43:63:B3:14:0B:9B:E8:C4:8E:43:9E:FF:E3:90
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wSE8F8QWQ2OzFAub6MSOQ57_45A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.91.0/24
82.115.28.0/23
89.251.10.0/24
91.132.57.0/24
159.255.32.0/22
185.231.172.0/22
188.214.236.0/22
188.253.8.0/21
202.133.90.0/23
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:f8:f5:69:81:ca:64:ca:e9:17:46:39:33:a2:5e:9c:f4:c6:
e8:ed:8f:58:2a:13:6c:c8:22:e0:71:19:26:56:0d:ea:9d:aa:
bb:8c:a7:a6:ce:f8:97:64:85:96:24:67:a4:40:bb:c4:26:31:
44:2d:da:2c:e1:20:22:9e:a6:59:a8:97:af:36:b5:c6:55:80:
b3:82:22:ae:d5:ac:09:c5:42:0f:e1:c7:e8:39:45:d1:67:23:
b5:d1:5b:34:14:49:57:70:3b:34:f0:6e:bd:63:1f:db:09:5e:
b7:69:3d:91:57:ab:41:6b:63:12:d3:75:0a:94:87:d9:43:a2:
a9:78:7b:a2:17:77:17:04:0c:9b:3c:1e:13:01:e5:5a:63:ea:
41:d5:a5:a6:d1:e2:e7:8b:af:6c:0c:9d:17:d8:b8:7b:bd:d1:
74:2d:2e:9d:f3:35:7d:72:ae:6b:32:7a:49:1f:26:90:56:b4:
21:e8:4f:65:cc:0a:1a:f9:09:27:7e:59:e9:81:7d:4d:1c:3e:
ab:a4:14:c9:58:50:1d:b6:ed:b1:d6:99:13:88:30:e9:1a:e7:
6c:47:55:db:bd:09:5b:cb:36:22:a0:b8:e7:a1:1c:3c:e2:5a:
80:da:59:10:18:26:14:db:b5:51:d6:d4:e7:d6:ad:13:96:44:
e0:99:8a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 20:09:18 2024 by rpki-client on console-ams.rpki-client.org