Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-2GvBceKQdni7sYwEjrW-ERSkYU.roa
File: 1-2GvBceKQdni7sYwEjrW-ERSkYU.roa (raw, json)
Hash identifier: KNcLLWpxi65DuC0wLOm2FwDob7s0jX2kjlTf4e/O+h8=
Subject key identifier: FB:61:AF:05:C7:8A:41:D9:E2:EE:C6:30:12:3A:D6:F8:44:52:91:85
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E14533769DCAF7B983E5B8837D4E85359
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-2GvBceKQdni7sYwEjrW-ERSkYU.roa
Signing time: Wed 06 Mar 2024 15:13:01 +0000
ROA not before: Wed 06 Mar 2024 15:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.59.255.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.44.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.10.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.173.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 17:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:53:37:69:dc:af:7b:98:3e:5b:88:37:d4:e8:53:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 6 15:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb61af05c78a41d9e2eec630123ad6f844529185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:99:13:32:56:d4:77:06:bb:ed:ec:e7:cc:
87:ab:32:68:c2:de:dd:e1:7b:c4:f1:f2:3d:4d:bd:
56:71:9a:c0:0b:3d:7a:f6:73:43:8d:e7:67:f2:84:
0c:1d:f8:ca:f0:c7:32:e0:b6:c0:0b:53:f3:f1:4d:
53:ed:d0:50:34:fb:3c:f8:60:f9:62:b4:27:a3:ee:
28:8c:cc:6f:e7:3b:f5:7b:69:33:2d:af:a4:ff:11:
d3:45:07:a2:8a:db:dd:09:b9:fd:2c:22:6a:46:0a:
d5:53:75:6d:4c:9c:bc:36:d9:86:d9:6b:72:9d:15:
4a:1f:dc:c6:0c:b2:af:4c:ed:39:5d:d1:cb:2f:6c:
e2:bb:ce:40:bb:4d:b7:f7:10:28:36:f8:f0:10:97:
67:5e:19:06:85:ff:02:4a:33:69:bf:56:1a:19:f6:
58:b3:ea:dc:b9:b0:0c:1d:25:0c:c2:d0:90:53:a8:
a6:68:2e:c5:45:b5:04:52:ff:df:2f:e3:86:c2:54:
f5:d7:03:ee:7a:6f:7f:5a:c1:b7:1a:e7:60:f4:df:
b2:df:08:2b:a2:1b:20:57:70:87:ec:0d:a9:07:7d:
23:c2:df:be:4b:6f:58:44:c9:b5:99:df:20:50:6a:
84:51:d3:cb:b2:0b:9e:5b:90:3d:0e:3e:63:cf:d9:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:61:AF:05:C7:8A:41:D9:E2:EE:C6:30:12:3A:D6:F8:44:52:91:85
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-2GvBceKQdni7sYwEjrW-ERSkYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.255.0/24
45.151.89.0/24
87.120.87.0/24
87.121.44.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.10.0/24
94.156.239.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.252.176.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3b:bf:9f:b0:e4:fc:24:d1:ec:59:6b:7b:1a:4b:0b:74:44:
7f:1c:5d:03:41:0e:53:10:fe:6c:ba:1d:c2:dd:5c:ec:89:9e:
84:1a:e8:07:e9:8c:7d:14:d2:40:2e:58:59:9c:d1:71:13:e2:
88:48:62:02:21:47:3f:8f:e7:07:87:52:13:73:6e:5c:8d:da:
5c:36:b9:76:c7:ac:a1:55:61:45:c2:74:8c:0d:5d:67:92:66:
26:5c:85:95:f2:27:6f:dd:20:1f:9a:80:1d:ca:b3:8d:72:cc:
bc:2b:98:be:54:0b:db:e8:c0:b6:37:cf:8a:ce:c1:3b:13:b1:
6a:af:03:4e:d6:48:46:7a:32:a0:79:73:4d:96:79:c8:7f:26:
b7:50:b9:6c:ac:f5:3b:e0:0c:db:ae:4b:a7:cb:33:3c:bd:71:
fa:dd:42:39:b6:cf:6e:ea:25:ea:1d:13:91:db:a4:1d:d7:ba:
f3:00:73:b7:48:87:10:35:6e:9a:03:c9:4d:72:91:37:5f:47:
0b:39:b2:a6:5a:65:77:45:d2:5b:0a:9b:32:8c:0d:89:b5:a1:
81:ea:d1:e6:2d:1a:20:65:06:ec:e4:d1:08:41:ac:ce:ba:b2:
27:8b:4f:0e:2d:23:89:d2:06:d3:c5:2e:14:ed:e7:4d:12:ae:
5e:d2:8b:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 6 21:47:26 2024 by rpki-client on console-ams.rpki-client.org