Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4K9hiec8PzpcKRGbOrBhcfL14bU.roa
File: 4K9hiec8PzpcKRGbOrBhcfL14bU.roa (raw, json)
Hash identifier: Wq6C79BlSouhhfxJR6+mm+iYenX4jFHBig9mc0TACyI=
Subject key identifier: E0:AF:61:89:E7:3C:3F:3A:5C:29:11:9B:3A:B0:61:71:F2:F5:E1:B5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CE8B05C6CA54D6D8A8D4E7D72A9FE4CFD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4K9hiec8PzpcKRGbOrBhcfL14bU.roa
Signing time: Mon 08 Jan 2024 10:48:41 +0000
ROA not before: Mon 08 Jan 2024 10:48:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
185.226.172.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
45.88.90.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 14:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:b0:5c:6c:a5:4d:6d:8a:8d:4e:7d:72:a9:fe:4c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 8 10:48:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0af6189e73c3f3a5c29119b3ab06171f2f5e1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:69:75:7a:2b:f0:d6:39:f5:ae:7e:54:72:
16:59:0e:65:41:dd:1a:d8:30:30:47:21:c0:a1:ac:
e0:8f:07:9b:74:22:25:7a:06:ba:88:28:d2:5b:5a:
c1:59:62:95:f1:9a:33:19:d0:da:4c:16:cf:d5:4a:
10:7c:3d:65:30:49:15:fb:31:a7:5a:c7:91:05:69:
96:3d:f8:e2:c5:47:5a:65:eb:2d:01:8c:b0:d2:bd:
13:ed:5c:12:42:3a:0c:ce:11:8c:77:c1:f1:02:df:
19:73:e1:c0:55:08:d9:b3:e0:ae:af:3a:06:89:a7:
66:c8:ff:cf:ab:57:4f:94:59:14:1f:50:72:ca:27:
0a:04:4c:b3:26:1a:77:c8:ea:a3:2a:0f:1f:7e:f5:
28:c6:ed:36:1b:4f:3b:0a:19:f1:02:6f:70:78:11:
ff:08:62:ba:45:95:50:67:cb:06:3d:08:a8:c5:bd:
31:e1:db:fe:38:5c:21:d5:b6:45:dc:6f:df:61:37:
80:c5:b6:ce:d9:5d:51:64:13:25:bf:78:4f:71:48:
29:5a:64:0f:1f:68:82:31:21:e2:07:02:99:34:ae:
ae:2c:14:b9:17:2d:8c:f3:48:5d:d0:ea:50:88:a8:
bf:2b:5b:b5:f5:38:9c:de:34:0b:82:e1:89:e0:bc:
e4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AF:61:89:E7:3C:3F:3A:5C:29:11:9B:3A:B0:61:71:F2:F5:E1:B5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4K9hiec8PzpcKRGbOrBhcfL14bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.88.90.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.154.172.0/24
94.156.239.0/24
147.78.101.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.172.0/24
185.226.175.0/24
185.252.176.0/24
193.37.41.0/24
194.55.186.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:5a:56:21:c5:c9:d1:1b:d5:4e:8d:73:e5:60:e9:b9:94:78:
ae:c6:10:e5:63:15:80:93:89:06:5c:51:0d:8f:07:b6:79:2c:
76:6c:df:e3:8b:19:95:97:bf:25:bd:f8:2d:ab:62:9e:c6:db:
13:41:a7:a6:57:92:4b:5d:d6:2a:90:85:64:42:a9:13:86:5a:
bd:fd:34:99:93:5d:4b:e6:1d:bb:f6:af:c1:14:82:71:e1:23:
0a:3f:ae:56:17:e8:30:37:e2:03:de:19:ab:c9:5d:eb:9c:8c:
a1:1f:71:43:31:7f:5b:0c:48:11:00:73:95:f4:49:86:f2:10:
7d:08:f7:25:50:98:0a:49:2e:45:c5:3f:d7:f5:98:06:d4:76:
d3:00:81:c1:18:a4:3f:1e:6b:bd:a6:81:ad:b3:5d:0c:67:39:
a5:b2:1e:a8:54:ff:69:7a:83:30:13:c4:9c:18:57:bc:a2:5c:
52:65:f1:73:55:dc:b2:54:01:6c:ad:31:4d:2b:9f:03:3f:e9:
dc:df:c2:9a:ca:16:ab:65:d5:02:aa:e3:37:e0:e3:4b:5e:56:
af:b3:41:97:77:1f:72:60:89:98:a5:fa:77:cf:0f:ff:bb:54:
4d:ac:dd:81:60:43:01:85:76:7b:77:88:e7:ca:17:28:1c:88:
9f:39:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 17:51:36 2024 by rpki-client on console-ams.rpki-client.org