Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4QQeXZ9ue95PzjTVU8j5GJf5iyQ.roa
File: 4QQeXZ9ue95PzjTVU8j5GJf5iyQ.roa (raw, json)
Hash identifier: ATuHu1x8f3+Gz5IXO4KyZd2BAYuDeYvpLEHcxnL3XWE=
Subject key identifier: E1:04:1E:5D:9F:6E:7B:DE:4F:CE:34:D5:53:C8:F9:18:97:F9:8B:24
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D0DBF0E28DBA5C36289365F9139E55B44
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4QQeXZ9ue95PzjTVU8j5GJf5iyQ.roa
Signing time: Mon 15 Jan 2024 15:30:41 +0000
ROA not before: Mon 15 Jan 2024 15:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 212.87.207.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
193.149.31.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 06:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:bf:0e:28:db:a5:c3:62:89:36:5f:91:39:e5:5b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 15 15:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1041e5d9f6e7bde4fce34d553c8f91897f98b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:ac:c8:19:0e:59:e5:60:83:56:cb:2d:48:
5c:85:e0:6c:c6:a8:5f:92:84:57:ab:a1:aa:c4:2c:
d4:11:89:7c:e3:2a:ab:7d:bf:a6:5a:67:82:5c:13:
4f:0a:dd:52:b9:bf:2a:6b:1a:e9:79:81:4f:f9:03:
38:32:0e:35:ac:ed:2d:f7:ee:c8:8d:4a:2a:33:6f:
11:b2:5d:61:99:43:46:c4:7d:4d:49:1c:02:50:20:
91:33:f7:33:90:40:6a:62:fd:95:a0:d2:6f:40:40:
37:0e:58:72:85:98:d2:f4:a8:97:39:fb:0a:83:01:
e7:a6:18:e4:d0:1b:14:6d:b7:9b:60:f2:eb:16:70:
09:64:b8:a2:46:fe:71:b4:29:b5:24:bf:45:08:4b:
3a:6e:c9:f7:e9:34:9f:fa:3a:87:37:88:0f:c4:b3:
e3:8b:97:d2:1e:a2:2c:fc:eb:d9:6f:a7:1c:2c:f8:
15:dc:f5:59:0f:f2:b3:59:89:67:27:1e:05:56:fa:
82:2e:6d:28:bf:0d:63:74:48:90:0c:d2:a1:a9:e5:
f8:e1:29:24:81:be:e5:fb:95:83:dc:4f:16:3b:e4:
09:be:10:ba:dc:f2:4b:fd:a4:9a:d3:29:40:1b:6b:
6c:81:9a:c6:72:86:f7:89:1c:58:a7:86:23:8e:f5:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:04:1E:5D:9F:6E:7B:DE:4F:CE:34:D5:53:C8:F9:18:97:F9:8B:24
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4QQeXZ9ue95PzjTVU8j5GJf5iyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
45.12.255.0/24
45.66.228.0/24
45.151.90.0/24
79.110.50.0/24
82.115.211.0/24
87.121.105.0/24
94.156.176.0/24
178.215.238.0/24
193.37.47.0/24
193.149.28.0/22
194.180.36.0/24
212.87.207.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c8:a1:1b:57:72:ec:9e:d6:8c:21:b5:86:00:d8:ba:8f:ae:
95:07:0f:e4:60:30:72:d6:1a:44:5f:f4:09:c0:91:30:6e:47:
9b:3d:96:86:d3:92:d7:20:22:5d:c2:c0:7c:bc:6a:19:6f:e1:
b9:3a:fe:38:45:76:27:b9:8a:42:75:16:48:bf:99:05:6a:64:
35:28:f4:c1:d5:b6:5f:bc:94:62:fd:ea:29:97:37:d7:e0:0a:
6d:0d:f8:54:6a:5a:fe:cc:59:ad:ee:97:4e:1f:c7:d5:4d:08:
cd:99:05:b7:dc:0f:1e:3e:72:fd:9f:e7:a7:f1:af:c0:9a:16:
56:e7:cd:0b:06:7a:a4:0a:57:d0:58:88:fa:43:68:bf:bb:9c:
0c:a5:41:9a:b1:ec:9d:7e:d0:71:33:42:27:cc:ca:01:79:ee:
b7:26:5c:ac:32:86:18:fb:83:33:a3:e0:6c:0b:c3:d6:05:7c:
01:9c:4d:54:2c:03:97:dd:5a:75:96:61:f2:59:ad:22:dd:3b:
78:13:bc:24:a9:5f:a6:fe:40:69:42:ef:d5:cf:c0:26:53:dc:
71:fe:2d:f0:06:36:03:11:1c:bd:92:d5:2d:9c:d2:61:c8:6b:
19:f2:5e:62:4c:3a:69:db:69:2f:72:6d:c6:38:8d:e3:20:da:
d6:62:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 06:59:31 2024 by rpki-client on console-ams.rpki-client.org