Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1fo1rEuDwPkP-RSP8brsmwBkex0.roa
File: 1fo1rEuDwPkP-RSP8brsmwBkex0.roa (raw, json)
Hash identifier: 8SFGL0NB3GYIU5w/yBRc/mkPOhcnGuAC4U5b1guh/0o=
Subject key identifier: D5:FA:35:AC:4B:83:C0:F9:0F:F9:14:8F:F1:BA:EC:9B:00:64:7B:1D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D0DC74BE0DC311002C8FD1FF3497CF72A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1fo1rEuDwPkP-RSP8brsmwBkex0.roa
Signing time: Mon 15 Jan 2024 15:39:41 +0000
ROA not before: Mon 15 Jan 2024 15:39:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206003
IP address blocks: 171.22.31.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
81.161.239.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.248.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 11:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:c7:4b:e0:dc:31:10:02:c8:fd:1f:f3:49:7c:f7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 15 15:39:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5fa35ac4b83c0f90ff9148ff1baec9b00647b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:08:cc:c6:4b:0c:95:4f:ed:f1:74:85:2d:
c3:ba:87:9c:93:62:e6:59:ab:84:96:39:9d:50:16:
68:a9:72:ba:a3:14:d8:19:b2:08:b7:3d:9d:63:05:
ea:68:1e:fd:0d:ce:a6:c5:ad:cf:17:83:13:06:c2:
35:fc:a9:af:53:d0:53:0c:c3:4a:4e:11:23:5a:43:
7e:9f:42:82:b3:a5:2a:bb:ae:e2:07:d3:d7:4c:18:
db:03:a6:85:6d:b2:dd:3c:26:e9:bf:bc:26:28:a2:
dc:0f:ee:4d:40:a0:39:5e:66:8c:b4:b9:e7:06:c3:
bf:93:db:70:55:23:65:5c:35:02:c1:a5:d4:40:99:
2e:86:40:39:6f:7e:32:4b:49:61:05:e4:a0:87:d0:
07:53:5a:fc:6e:9e:20:34:30:f2:50:93:cb:b2:fd:
ba:07:f3:2d:c6:c0:ab:e4:49:3f:90:09:b8:a5:4e:
a1:30:dd:d0:fd:e5:c4:44:41:a6:a3:3b:de:93:56:
ff:16:5d:44:d3:ad:3b:63:d3:83:99:64:cf:0f:07:
5e:5b:48:62:c3:eb:3a:70:c3:5f:f4:df:8a:a1:2a:
d2:18:f8:d4:a7:d5:45:b2:ce:f5:64:b5:e5:8c:6c:
70:59:a8:80:19:2b:11:a2:c9:52:7c:1b:c8:f1:54:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FA:35:AC:4B:83:C0:F9:0F:F9:14:8F:F1:BA:EC:9B:00:64:7B:1D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1fo1rEuDwPkP-RSP8brsmwBkex0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.129.84.0/24
45.141.158.0/24
79.110.61.0/24
81.161.239.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
94.156.248.0/24
171.22.17.0/24
171.22.31.0/24
193.25.216.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:33:9e:8a:48:4b:35:11:e2:68:c4:d0:31:93:9f:46:b3:71:
f1:aa:b8:c3:82:38:dc:1a:d8:c4:aa:f7:d5:03:1a:b5:f0:9e:
a7:08:7c:b1:41:83:df:6e:24:56:54:c0:a1:ea:10:d1:21:43:
2e:25:68:03:33:2b:68:e4:9a:f8:32:a3:33:51:08:6a:29:87:
c6:ef:fb:a4:9e:31:08:32:a2:9d:44:d2:07:9c:56:ef:81:c7:
c1:c8:24:f4:e5:48:3f:7f:7e:24:44:c6:3a:06:fe:bc:16:e7:
ac:ae:52:c8:6f:26:1c:67:35:4e:e3:ca:e0:20:2e:44:39:cb:
f5:51:10:a5:17:0a:47:c2:6d:47:2c:28:81:7e:80:4d:d5:c6:
a3:1e:4a:55:2c:cc:60:fe:5b:3a:9b:c7:96:f4:0c:1f:36:56:
8e:37:74:68:cf:55:12:d6:f5:ce:20:55:12:68:41:6d:e9:38:
29:77:d3:2b:6b:a3:1c:39:e0:dd:f8:26:96:07:ec:37:cc:34:
5c:f7:10:94:f2:55:c2:06:0b:7e:80:a6:73:a5:e5:2d:3e:b2:
6c:81:ba:77:c0:c3:b2:a5:3c:ea:8c:87:59:81:5f:64:a9:17:
79:89:17:fb:b6:e7:68:9a:37:59:bb:7d:b7:16:2b:c5:f3:34:
5e:50:29:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 15:15:05 2024 by rpki-client on console-ams.rpki-client.org