Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8ufQohN3OSixk6iX9I1dQKzznyU.roa
File: 8ufQohN3OSixk6iX9I1dQKzznyU.roa (raw, json)
Hash identifier: pZLTZK7vKmF4fuxg58XDojewqpntgx25qxHMgZOj/EA=
Subject key identifier: F2:E7:D0:A2:13:77:39:28:B1:93:A8:97:F4:8D:5D:40:AC:F3:9F:25
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191BC31249DAF673ACCCD34E27A6819E17C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8ufQohN3OSixk6iX9I1dQKzznyU.roa
Signing time: Wed 04 Sep 2024 08:40:22 +0000
ROA not before: Wed 04 Sep 2024 08:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.88.90.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 13:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bc:31:24:9d:af:67:3a:cc:cd:34:e2:7a:68:19:e1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 4 08:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2e7d0a213773928b193a897f48d5d40acf39f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:7a:9c:16:e2:70:8f:b5:56:7b:9e:26:fd:
50:c5:c6:9d:48:12:d6:16:01:6f:46:ee:08:a2:11:
70:f8:89:11:85:5e:1f:65:98:47:e9:31:a7:fe:50:
d5:44:2d:05:f0:70:01:6e:bb:d9:55:15:4b:66:09:
c1:28:18:9a:3e:16:40:c3:18:e9:7e:e7:38:23:81:
c2:c5:02:d8:41:4d:86:71:84:a8:7a:16:e2:72:c5:
13:ce:e3:6d:06:37:51:21:79:ed:64:26:1d:ff:4c:
08:d1:57:23:15:76:92:14:42:8f:9c:1b:1e:76:6d:
39:f8:5e:39:07:30:57:66:b8:e1:e0:74:a5:03:27:
42:bb:b0:22:a0:b1:80:91:73:0a:86:0e:e0:62:05:
d8:15:b2:50:5c:2c:1e:18:17:89:45:0c:93:02:ab:
78:65:e4:43:5c:44:97:ec:f1:2c:5b:14:55:ba:0e:
47:30:47:eb:1b:5e:9e:c2:b9:f9:27:28:07:bc:f5:
e8:47:e0:00:70:ef:c0:4d:33:1a:21:87:61:4a:7f:
a9:ea:f6:8d:ce:56:89:6c:63:c1:72:bd:00:ee:5d:
97:2a:bd:fc:d8:39:88:34:04:14:25:b8:c3:fc:89:
ba:05:3b:61:77:5a:49:ca:22:a5:9e:f0:2e:d5:8a:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E7:D0:A2:13:77:39:28:B1:93:A8:97:F4:8D:5D:40:AC:F3:9F:25
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8ufQohN3OSixk6iX9I1dQKzznyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.149.241.0/24
45.151.89.0/24
45.151.91.0/24
80.76.51.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
93.123.39.0/24
94.103.125.0/24
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ca:a1:0f:63:96:aa:b1:97:53:96:c9:2d:d2:e5:82:66:f6:
06:9b:55:c0:85:9c:ad:32:e8:1a:fa:1b:35:80:d8:63:97:31:
8d:91:41:59:ad:64:f7:1e:1e:99:b0:85:8a:be:31:f2:03:53:
c5:e8:f3:37:6a:90:c9:de:6b:59:ca:b7:cf:05:16:35:d4:fc:
96:cb:a9:6b:6a:a6:e4:39:fe:7e:ff:c1:ff:57:d5:99:cd:1f:
06:e1:38:d9:f1:48:48:f0:b8:ac:31:be:a8:e2:7f:c5:bc:da:
6a:cc:1a:e4:52:28:b7:af:63:2a:29:56:f1:ae:98:6d:44:ed:
4f:14:c5:19:d0:13:b4:ae:3b:6a:a6:9d:50:52:52:19:d1:52:
82:83:73:7d:3c:bc:4a:20:ab:04:97:23:7e:04:23:69:f2:1d:
6c:22:95:b5:93:f2:8b:98:22:65:c7:ee:ae:3b:c2:74:1f:6d:
71:52:88:48:6c:23:13:54:3a:90:44:d2:2d:76:e8:33:ec:d6:
d9:76:b9:79:11:24:ac:b5:fd:a1:a6:55:d8:9c:47:64:6c:89:
d3:72:83:ab:f8:ba:30:f5:0b:d9:0a:fd:e8:c5:fa:cd:5d:50:
f9:65:dd:55:50:6b:9a:62:23:ab:1b:15:f8:cb:97:0e:fd:f5:
e9:d5:99:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 15:47:48 2024 by rpki-client on console-fra.rpki-client.org