Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0Ebs2BrsgPc-2yeA8-3XoQONn90.roa
File: 0Ebs2BrsgPc-2yeA8-3XoQONn90.roa (raw, json)
Hash identifier: M/ThV7dgmSsQmA3L4QYS+2GZw4Bvg7o26S3f6BDQLg0=
Subject key identifier: D0:46:EC:D8:1A:EC:80:F7:3E:DB:27:80:F3:ED:D7:A1:03:8D:9F:DD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192B956A957D9334F6664AD2C4118DC576E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0Ebs2BrsgPc-2yeA8-3XoQONn90.roa
Signing time: Wed 23 Oct 2024 12:25:17 +0000
ROA not before: Wed 23 Oct 2024 12:25:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.253.59.0/24 maxlen: 24
31.13.247.0/24 maxlen: 24
45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.217.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
87.121.219.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
193.8.185.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
194.113.38.0/24 maxlen: 24
194.113.39.0/24 maxlen: 24
212.87.220.0/24 maxlen: 24
212.87.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:56:a9:57:d9:33:4f:66:64:ad:2c:41:18:dc:57:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 12:25:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d046ecd81aec80f73edb2780f3edd7a1038d9fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:dc:dd:cf:33:ae:ed:66:af:74:87:35:0f:
e1:a9:36:6d:8a:e3:7b:23:dd:b9:9e:4b:1d:0c:fb:
2a:d2:17:58:fc:f9:1f:53:b4:72:b6:f8:48:46:8e:
26:ca:7f:b5:f3:bd:2b:73:f7:c8:f7:82:4a:93:1b:
7a:5c:28:0c:2b:e3:c6:c7:a0:f1:0c:4e:82:80:d1:
4f:23:cb:82:e6:44:14:6b:44:f1:ef:90:72:37:9f:
69:ce:c6:9b:57:0f:4f:77:b7:8e:1c:6b:32:f0:4a:
f8:27:64:48:2a:2d:b8:a7:ff:c2:8e:3f:6a:f0:1a:
16:58:c6:8e:cb:7f:85:e5:18:ea:c1:4b:50:cf:88:
49:ae:fa:5f:be:c8:69:0f:81:f3:74:97:1c:bd:b5:
e9:fd:e6:ae:3d:bb:87:af:ee:bb:b1:cd:73:75:f6:
c3:8b:97:f9:b4:5d:99:ba:4b:33:d8:70:24:86:5d:
de:be:07:52:ff:4f:f6:45:46:9a:4a:3d:0d:00:9f:
b0:2c:78:81:87:bf:3d:a8:8c:b8:b2:74:1e:63:2d:
42:bd:99:b4:4d:10:f1:fb:cb:28:67:9a:e5:ec:0a:
aa:c1:a8:dd:48:05:f9:c0:d8:25:95:1d:d4:90:d4:
03:b3:c2:2b:04:6c:34:79:68:9e:2f:f6:cc:e9:4d:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:46:EC:D8:1A:EC:80:F7:3E:DB:27:80:F3:ED:D7:A1:03:8D:9F:DD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0Ebs2BrsgPc-2yeA8-3XoQONn90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.59.0/24
31.13.247.0/24
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
87.120.36.0/24
87.120.88.0/24
87.121.98.0/24
87.121.217.0-87.121.219.255
94.125.100.0/23
109.206.236.0/24
109.206.242.0/24
185.218.137.0/24
185.246.222.0/24
193.8.185.0/24
193.168.196.0/23
194.113.38.0/23
212.87.220.0/23
Signature Algorithm: sha256WithRSAEncryption
89:a6:a1:8f:ec:03:c4:3b:61:ba:e1:ca:d5:df:c4:50:e3:7f:
4d:98:e1:ad:b6:30:c2:dd:46:8e:80:1d:c2:53:0b:e8:2b:5c:
00:c1:79:84:e2:63:10:1b:54:44:44:a2:52:59:a5:94:23:df:
3a:6c:67:48:f1:7d:05:85:a1:7a:cc:c3:34:9e:4c:21:ea:82:
db:d0:78:3f:ee:e3:b3:4c:3a:0b:33:52:53:b1:e3:d3:4a:82:
72:59:70:04:72:19:cc:21:68:e1:ec:ee:62:9c:b1:6c:ec:ba:
1f:17:02:2e:16:b9:15:42:02:e3:31:f3:8c:f8:d3:bb:4c:b3:
ca:69:25:e7:fb:5f:b0:98:1c:82:b0:ce:3d:c8:e0:c7:9f:8a:
f9:8c:0f:45:a1:bd:f7:68:ab:50:ce:1c:e6:c3:7d:68:81:cd:
fa:07:8a:a3:85:c2:3d:29:14:2c:65:e6:95:e9:9f:c1:13:0d:
e2:26:76:69:e3:13:f6:12:3f:b7:f5:96:1c:ea:15:f7:b6:ad:
39:35:55:30:dc:5c:93:d5:88:a6:4b:17:d4:1d:ce:3d:a0:ad:
ea:03:85:b7:b3:19:17:00:1d:9f:c2:18:f8:31:f1:e0:a2:41:
eb:6f:d8:66:37:02:be:12:a6:69:c5:10:8b:97:54:70:d4:d6:
54:8b:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 17:39:20 2024 by rpki-client on console-fra.rpki-client.org