Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8DnNS5Pxmy7QPaEeI8Sg-za-y9s.roa
File: 8DnNS5Pxmy7QPaEeI8Sg-za-y9s.roa (raw, json)
Hash identifier: 09WIHB8JtN3Q59WqcBhp1EiyDYKakMNUI78qk+cgL7Q=
Subject key identifier: F0:39:CD:4B:93:F1:9B:2E:D0:3D:A1:1E:23:C4:A0:FB:36:BE:CB:DB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCD6772CAC98A6919EAE1E030A29BB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8DnNS5Pxmy7QPaEeI8Sg-za-y9s.roa
Signing time: Tue 02 Jan 2024 06:29:25 +0000
ROA not before: Tue 02 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 194.31.204.0/24 maxlen: 24
45.90.88.0/23 maxlen: 24
5.252.132.0/22 maxlen: 24
193.58.120.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
94.156.72.0/22 maxlen: 24
193.25.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 09:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d6:77:2c:ac:98:a6:91:9e:ae:1e:03:0a:29:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f039cd4b93f19b2ed03da11e23c4a0fb36becbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:46:55:6e:17:d4:9b:19:54:e3:51:4e:4a:
8f:8e:b7:61:ab:33:92:51:97:73:66:48:3e:93:26:
63:00:74:dd:f3:de:5d:f7:f1:18:b9:a8:02:c5:24:
91:c6:87:38:13:37:29:d4:ec:25:00:87:e7:0c:16:
5d:aa:23:5d:1e:00:9c:8a:e9:11:a7:10:c8:62:26:
37:c2:d7:b2:ae:1f:e2:c9:3d:24:75:00:90:77:fb:
24:f0:92:29:58:fa:14:f4:f2:19:ac:02:b0:3d:aa:
6c:f8:1c:f8:5f:44:06:a9:a5:4b:0b:88:0c:d9:70:
f1:5b:06:10:56:c0:6c:0d:f0:a3:20:db:6e:66:e1:
eb:70:a2:fb:af:9c:f7:bc:2e:43:7d:ae:cd:2c:30:
f1:27:7f:8a:ff:c1:b5:78:7d:16:4a:3c:56:a5:88:
57:c8:92:4a:02:17:d6:4c:2b:5c:70:dc:24:25:52:
72:fd:f8:fc:de:fd:fa:d9:a1:99:e4:14:c0:5c:ae:
2d:d9:ed:70:5c:f8:6d:f7:82:97:44:59:5f:c0:50:
ee:88:d9:b9:14:dc:56:ed:73:50:46:bc:68:37:5e:
ef:52:82:ea:4c:a1:7e:59:68:a1:dc:1f:9c:87:76:
db:dc:ac:0a:de:c5:1d:9e:be:f4:44:dd:b2:c2:02:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:39:CD:4B:93:F1:9B:2E:D0:3D:A1:1E:23:C4:A0:FB:36:BE:CB:DB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8DnNS5Pxmy7QPaEeI8Sg-za-y9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.90.88.0/23
45.149.241.0/24
94.156.72.0/22
193.25.218.0/24
193.58.120.0/24
194.31.204.0/24
Signature Algorithm: sha256WithRSAEncryption
47:5a:3e:06:e3:20:a8:f0:8a:94:fd:b6:8d:ee:71:c8:37:14:
3a:cb:6b:89:9f:7a:cb:27:e5:7b:59:f6:fa:24:44:28:a2:49:
35:14:85:2b:44:a3:4e:36:d8:f7:7b:e4:1e:00:f4:97:36:5f:
0a:6a:9e:9c:76:be:f4:e9:cc:bf:5b:da:b4:31:69:6f:92:fb:
c6:2a:ee:d1:25:ee:f7:2f:14:a1:2a:db:b4:03:0c:32:e2:92:
3d:cc:15:76:90:3f:d4:31:80:e1:95:82:b2:ce:7a:b0:03:00:
5a:c5:b9:aa:d5:91:17:2b:f7:26:5e:d2:a0:44:53:d6:f1:d3:
8b:4f:73:94:c1:d1:4c:9a:5d:03:e2:e7:0d:02:89:94:9e:00:
9a:99:b4:cd:59:b9:d2:4c:e6:1a:61:6d:1b:44:4e:a6:71:f3:
fe:b2:8c:0f:9b:36:bf:13:9d:4d:fc:38:95:43:30:31:4d:97:
e2:f1:5a:8e:0d:4f:28:43:b0:39:f8:b5:1f:3f:d1:ab:2a:81:
d6:b6:5f:d4:65:a7:74:f2:ee:8e:e0:1d:6f:b1:bf:21:67:d6:
7b:60:5a:12:63:ab:f2:5a:bb:61:06:71:35:84:67:b0:46:87:
11:2d:2e:e9:00:40:da:f4:01:e0:31:83:26:c9:b0:af:fe:52:
2d:a3:3d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 13:45:37 2024 by rpki-client on console-ams.rpki-client.org