Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/05HFNBKDoOC3t-zj4ujEVP5-DpU.roa
File: 05HFNBKDoOC3t-zj4ujEVP5-DpU.roa (raw, json)
Hash identifier: w0muXRt8xdtHdC8V9OrOKcojQ5PPjqpULCplVIh9TuY=
Subject key identifier: D3:91:C5:34:12:83:A0:E0:B7:B7:EC:E3:E2:E8:C4:54:FE:7E:0E:95
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192DE88D5973D4DBA5FC8A1CC590DE1100B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/05HFNBKDoOC3t-zj4ujEVP5-DpU.roa
Signing time: Wed 30 Oct 2024 17:46:02 +0000
ROA not before: Wed 30 Oct 2024 17:46:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
45.95.3.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
93.123.31.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
193.8.185.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 12:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:88:d5:97:3d:4d:ba:5f:c8:a1:cc:59:0d:e1:10:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 30 17:46:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d391c5341283a0e0b7b7ece3e2e8c454fe7e0e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:27:df:55:53:6e:7c:79:44:37:7a:6d:3e:3b:
2f:03:c4:56:26:16:5b:c4:54:46:91:b2:70:9f:6b:
a7:65:03:63:f2:d7:ec:11:68:19:a6:33:22:6a:8c:
0a:c0:f8:32:46:a6:2f:65:93:0d:14:eb:2c:8f:42:
f0:37:3f:c6:52:46:59:05:7b:a8:5f:c4:9b:39:c8:
d2:77:13:bc:6b:80:29:2d:9c:3f:65:1b:dd:11:39:
35:2f:1d:24:87:5b:cb:b9:71:d1:40:ae:f1:19:e3:
7c:97:f6:03:f5:15:1a:69:8c:49:31:6f:df:56:27:
92:60:7f:e1:7b:f4:53:d3:74:98:8a:5b:94:bd:c5:
c1:55:dc:0e:d3:7e:74:1a:67:d8:e4:02:cc:65:02:
74:c4:1b:d8:bc:1b:2e:8a:e8:4d:b0:57:b8:66:cf:
9a:f5:0c:6b:e8:9b:73:e7:30:35:5f:94:00:47:d6:
f9:dd:cc:3a:fb:d0:df:d7:55:40:99:f0:01:32:a5:
6f:db:1b:ee:f6:23:be:8e:09:de:5f:47:b5:a0:f9:
ef:0b:81:ea:35:25:fa:46:28:fe:99:d0:dd:60:7a:
40:d1:18:74:9c:af:c2:33:4c:8c:80:a5:f8:ce:43:
2f:b6:ac:17:86:6b:fe:22:47:6a:5c:e2:e8:a3:b2:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:91:C5:34:12:83:A0:E0:B7:B7:EC:E3:E2:E8:C4:54:FE:7E:0E:95
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/05HFNBKDoOC3t-zj4ujEVP5-DpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
45.95.3.0/24
45.149.235.0/24
83.143.113.0/24
85.208.139.0/24
87.120.36.0/24
87.120.88.0/24
87.121.98.0/24
87.121.218.0/24
93.123.31.0/24
94.125.100.0/23
109.206.236.0/24
109.206.242.0/24
185.218.137.0/24
185.246.222.0/24
193.8.185.0/24
193.168.196.0/23
193.168.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a4:72:d0:07:fe:28:64:84:68:15:55:58:78:62:8b:42:69:
be:53:24:bd:af:29:7e:bc:34:f6:38:02:b7:aa:bd:ca:2e:2a:
7f:e1:0c:24:40:cd:fa:7a:3f:8d:05:17:05:01:91:92:8a:6d:
d6:98:25:39:01:0c:67:5d:b2:1d:81:6c:5f:40:1d:02:e2:88:
25:33:a2:0e:c8:3e:fd:fa:75:4c:3d:0c:31:30:5d:72:6c:54:
7b:2d:37:61:8e:b8:8b:f6:e0:a3:d4:81:b9:ec:69:ed:01:3d:
84:74:6c:0d:5b:15:94:21:1e:31:64:76:62:0a:f3:26:35:a0:
c5:7e:35:47:22:78:42:e4:72:a8:4c:c9:60:9c:15:58:71:1c:
e0:7c:1d:91:32:93:fc:23:a7:f9:5a:1e:7c:a5:2f:cf:56:6a:
2a:82:6b:a4:10:8c:84:2a:a2:9e:8c:8c:33:ab:ac:44:7e:f9:
30:1f:1e:20:b6:ca:80:4e:45:60:ee:72:24:23:74:d0:37:fe:
ec:86:a2:13:93:07:14:4b:94:43:4c:4a:a7:84:30:13:e2:d6:
ed:e3:a0:7e:af:3e:9f:15:89:73:50:89:c2:ab:e2:7c:b8:88:
5f:f9:57:1e:c2:a9:69:b4:58:cc:23:5b:db:e4:a8:e5:09:c2:
82:1f:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 13:18:32 2024 by rpki-client on console-fra.rpki-client.org