Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-_dl5-OzgJyW-XH9ECswSeEqFks.roa
File: 1-_dl5-OzgJyW-XH9ECswSeEqFks.roa (raw, json)
Hash identifier: keh0/WbzNdKc6f506SQNidzGeMD4wdCveR/5yhov/h8=
Subject key identifier: FB:F7:65:E7:E3:B3:80:9C:96:F9:71:FD:10:2B:30:49:E1:2A:16:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01919D4928AF8E1F384AF3820BCDAC471FED
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-_dl5-OzgJyW-XH9ECswSeEqFks.roa
Signing time: Thu 29 Aug 2024 08:38:23 +0000
ROA not before: Thu 29 Aug 2024 08:38:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.88.90.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 10:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:49:28:af:8e:1f:38:4a:f3:82:0b:cd:ac:47:1f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 29 08:38:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbf765e7e3b3809c96f971fd102b3049e12a164b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:71:de:62:4b:78:ed:4d:01:83:5e:ce:7f:
7b:0b:65:86:f1:34:07:10:16:c4:50:9e:c6:69:e8:
34:1f:66:04:63:56:be:1e:e0:df:3f:f7:3b:3c:ab:
9b:0e:53:c7:08:02:67:15:7d:b5:01:58:55:f6:f4:
7c:49:72:70:47:37:9d:6b:54:51:fc:c5:bd:56:e6:
86:35:40:53:3a:2c:76:3a:47:a7:57:7f:db:c2:cf:
60:44:ad:d5:bc:6c:e8:e4:9b:d9:1d:e7:4d:07:06:
0b:4d:fa:8b:43:69:88:72:6b:79:67:09:ae:dc:98:
c1:75:b2:94:b1:d3:8e:8e:74:10:05:45:85:29:fd:
58:98:68:5c:93:da:30:6c:56:a5:3e:08:8e:1c:63:
f3:45:1a:11:3f:40:c1:b4:81:85:8d:3f:f9:c0:8d:
1d:df:11:f1:2a:a2:b3:ea:f1:f3:22:94:82:8a:ac:
c3:45:c7:9e:45:59:1a:27:d8:d8:59:24:2f:93:8c:
2f:1d:66:a4:a2:08:55:f0:18:95:25:cb:db:cf:99:
44:c7:71:be:1c:cb:ad:94:f2:3a:ff:21:f8:32:2b:
98:3a:f0:65:b2:49:7a:94:48:e5:18:fb:2a:50:e3:
ff:c3:87:83:bc:05:95:18:51:05:30:8b:71:f6:f5:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F7:65:E7:E3:B3:80:9C:96:F9:71:FD:10:2B:30:49:E1:2A:16:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-_dl5-OzgJyW-XH9ECswSeEqFks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.144.154.0/24
45.151.89.0/24
45.151.91.0/24
80.76.51.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
93.123.39.0/24
94.103.125.0/24
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:b1:04:15:ba:18:55:ca:d7:4c:01:42:9b:af:6e:f4:ca:a9:
c6:8b:3a:86:da:05:54:51:96:f6:73:5f:24:fd:d4:c4:3f:75:
8c:3c:50:cc:52:86:75:3f:5a:7a:2e:1a:6f:fe:57:10:14:99:
b2:b6:bb:7a:52:ae:50:61:5a:d7:b4:ed:69:33:aa:8e:49:89:
c9:2c:41:78:53:45:da:44:27:a9:c2:a8:bb:85:95:e7:2e:c8:
8d:30:89:07:4d:c1:b4:a9:9d:db:5e:ca:18:a1:92:61:b0:a9:
2d:c4:c9:42:a0:d4:fa:38:28:a7:34:19:eb:1b:59:5f:43:0e:
49:8f:96:2f:23:04:f3:9d:97:56:02:a6:49:93:5f:0e:29:d4:
33:57:fc:ce:58:0e:fe:1d:89:5c:0b:20:c1:f3:83:7b:56:4c:
e0:40:cf:c6:b4:d2:bd:c7:cb:6d:f5:5c:d6:1a:b0:ce:51:c9:
7e:1c:09:63:94:ab:cf:21:9d:64:1e:aa:96:02:09:37:05:5b:
b0:4d:23:e1:ca:07:08:cf:f4:b9:66:d6:5a:ed:33:a8:3d:85:
57:19:d1:ba:bd:95:c5:02:4c:8f:c2:bd:77:ca:42:0d:bc:30:
ff:17:26:e8:b0:38:24:c5:75:d9:d8:d0:61:ef:70:94:7f:73:
61:5b:a3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 13:19:42 2024 by rpki-client on console-fra.rpki-client.org