Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1dFbLKn75Grb4UydSsvNmCn2QGo.roa
File: 1dFbLKn75Grb4UydSsvNmCn2QGo.roa (raw, json)
Hash identifier: w3wdlgLMCzn79yWLLNv3vCwBXN40wpZQJhZFvTJWrZs=
Subject key identifier: D5:D1:5B:2C:A9:FB:E4:6A:DB:E1:4C:9D:4A:CB:CD:98:29:F6:40:6A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F0ABC8A0612FAA4BDF4DA19F6A53EC711
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1dFbLKn75Grb4UydSsvNmCn2QGo.roa
Signing time: Tue 23 Apr 2024 11:34:39 +0000
ROA not before: Tue 23 Apr 2024 11:34:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.9.156.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.163.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.246.223.0/24 maxlen: 24
193.42.32.0/23 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 05:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:bc:8a:06:12:fa:a4:bd:f4:da:19:f6:a5:3e:c7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 23 11:34:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5d15b2ca9fbe46adbe14c9d4acbcd9829f6406a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:cc:79:7d:9a:49:86:2e:8e:4f:8d:d0:db:
3e:2f:ae:d4:be:e9:51:e0:2b:fa:ad:7e:f3:ba:6b:
bb:8c:9d:25:11:bd:08:10:84:f0:06:91:84:43:4f:
f0:7a:38:2d:56:6b:45:21:44:86:4b:33:7f:c9:08:
a2:97:3c:38:29:c4:d8:84:c8:a3:20:00:bf:fd:9e:
ad:86:5a:0a:7d:da:6d:e2:c1:4f:29:d2:cb:3e:77:
59:d2:9a:e8:d3:90:c9:86:c3:01:26:8c:00:4e:5d:
13:b0:7d:cc:3c:77:80:4e:d9:b6:13:f6:81:70:32:
0b:5d:2d:7f:9d:d4:4e:18:11:4e:b0:ae:cc:32:0e:
44:81:12:23:3f:49:cb:e0:e6:91:1c:33:66:27:18:
a3:e5:e0:cc:ce:6b:63:9a:23:60:8a:e9:12:af:bb:
bd:7a:98:c2:37:d6:ac:5a:f7:a9:68:3e:5c:74:15:
e2:0e:c8:95:26:15:e1:6c:11:25:b8:df:6d:a0:55:
af:6b:7b:a9:4a:cd:8d:1c:4b:b7:8d:16:b1:f1:f1:
62:b9:83:63:c7:eb:39:39:1d:42:ee:e5:ee:49:20:
7f:55:9f:17:26:27:88:7a:44:02:72:42:01:21:63:
b1:29:a8:34:1f:d1:76:eb:44:46:1c:ae:a3:02:80:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D1:5B:2C:A9:FB:E4:6A:DB:E1:4C:9D:4A:CB:CD:98:29:F6:40:6A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1dFbLKn75Grb4UydSsvNmCn2QGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.88.88.0/24
45.151.89.0/24
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.239.0/24
95.214.25.0-95.214.26.255
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.246.223.0/24
193.42.32.0/23
194.48.248.0/24
194.55.186.0/24
194.55.224.0/24
194.59.31.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a0:34:c8:3d:4f:b4:5e:bc:29:fe:33:bb:5f:41:36:97:7e:
e7:4b:ca:2c:d7:87:6e:0d:b0:36:e2:52:bd:63:39:7b:1c:0c:
e3:f0:8d:40:63:fe:c4:26:98:f8:39:35:d0:5a:f3:50:ad:01:
10:08:e4:2b:0d:90:99:08:01:36:72:ce:50:be:e9:ec:10:0f:
71:fd:80:33:f0:83:ff:d0:87:af:b4:c8:4b:5c:b9:56:c5:08:
37:85:d6:69:26:cc:38:51:62:d9:53:b1:21:d5:c1:d3:ae:0e:
c4:c6:e3:e7:c6:46:e0:f9:b3:b4:18:27:88:db:43:2d:5d:41:
47:e0:c5:6b:23:bd:e7:c1:79:95:d2:73:5d:f8:89:c7:1c:21:
5a:f9:f6:9b:f6:35:ed:49:73:6a:f7:e7:88:72:44:a6:1e:fc:
51:9a:18:19:96:8b:06:a8:df:63:10:71:75:4c:8b:c3:94:ea:
30:62:2f:51:2f:7c:51:10:ab:58:c8:5c:c9:83:3e:bc:52:cb:
9e:1c:f7:48:47:6f:d3:18:2e:63:e6:80:f3:7c:39:66:77:fe:
37:8c:dd:39:8f:cb:d1:d5:ad:03:cb:4d:cf:96:71:a2:67:f8:
04:40:fc:48:fb:ba:6f:61:8f:97:41:11:51:c1:8b:a0:39:c5:
d8:89:14:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:22 2024 by rpki-client on console-ams.rpki-client.org