Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/97Kw3Pf9VMcFRLEurRhqkOXDtbE.roa
File: 97Kw3Pf9VMcFRLEurRhqkOXDtbE.roa (raw, json)
Hash identifier: MrdmEkL60vD12/QUTIXqn+sVJVvnZp5yyqPh5ZgA/Dw=
Subject key identifier: F7:B2:B0:DC:F7:FD:54:C7:05:44:B1:2E:AD:18:6A:90:E5:C3:B5:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D7E3ABFF204464B3041F4A8EFBF5533B8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/97Kw3Pf9VMcFRLEurRhqkOXDtbE.roa
Signing time: Tue 06 Feb 2024 11:43:15 +0000
ROA not before: Tue 06 Feb 2024 11:43:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 2.59.254.0/24 maxlen: 24
37.221.120.0/22 maxlen: 24
85.31.45.0/24 maxlen: 24
85.209.132.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
192.145.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 10:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:3a:bf:f2:04:46:4b:30:41:f4:a8:ef:bf:55:33:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 6 11:43:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7b2b0dcf7fd54c70544b12ead186a90e5c3b5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:10:c3:92:a1:72:cb:81:ae:6a:d3:0e:65:93:
40:d7:8e:36:81:4b:28:06:df:f8:cc:8e:ad:a9:a3:
13:66:d3:b3:26:18:54:13:f0:17:65:63:80:9e:f5:
e9:52:60:d5:19:c1:a2:f5:de:2d:b2:2a:56:d5:d5:
7d:fb:10:66:8c:89:b7:0c:a6:af:57:bd:7f:a1:da:
50:4d:e2:8c:01:93:f2:f4:22:74:76:9b:4d:3b:25:
c3:f9:69:ee:eb:bf:b0:17:c3:13:5b:6e:d1:3c:47:
df:3a:92:eb:69:ae:ef:84:89:fb:28:ff:8f:7d:bc:
40:73:41:7a:6b:38:0b:1c:b8:ce:2c:0d:6b:09:a4:
4b:cb:8e:6b:2d:2e:36:6e:ea:ca:24:e2:e0:b5:2d:
2b:01:03:dd:2c:a3:52:e4:2e:a4:24:4c:2b:25:88:
00:4c:c1:5f:05:e6:a1:fc:35:a5:22:1a:18:6a:61:
48:6b:23:5d:1a:9c:2f:5e:2c:74:c3:e6:1d:51:06:
20:3f:25:c9:00:20:e0:f3:b4:93:43:39:a0:cf:4a:
c0:3a:96:35:75:2f:95:1b:3c:7b:60:dc:58:13:7f:
e6:b7:47:01:a7:f7:3e:57:e2:1e:9d:ff:ba:ad:33:
92:b6:42:19:45:19:55:cb:08:c4:e8:81:05:d8:3f:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B2:B0:DC:F7:FD:54:C7:05:44:B1:2E:AD:18:6A:90:E5:C3:B5:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/97Kw3Pf9VMcFRLEurRhqkOXDtbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.254.0/24
37.221.120.0/22
85.31.45.0/24
85.209.132.0/24
178.215.226.0/24
185.225.73.0/24
192.145.28.0/22
Signature Algorithm: sha256WithRSAEncryption
45:27:f4:dc:51:fc:2a:43:3d:75:d8:c0:5a:f9:29:92:a5:d0:
ef:6d:89:d8:99:1d:86:9f:0f:4c:17:17:75:e0:8f:25:ca:ab:
03:79:ac:ab:ef:54:32:4d:3f:a9:29:83:ac:ce:03:48:a5:26:
bc:72:e0:f9:b1:ce:54:5c:2d:37:81:95:d7:1e:bd:ef:f1:bb:
be:4f:d6:0d:0a:d5:b5:f0:cc:cd:5a:4d:55:07:b2:4a:ae:1f:
34:69:07:d1:99:79:95:23:83:59:dc:fb:ef:e0:c9:5a:38:5c:
9c:ac:b6:9d:5c:15:d1:ea:25:a6:5b:d0:24:bc:ed:d5:c7:dd:
9e:1c:7c:a8:e1:ab:35:fd:cc:2e:ea:2c:be:a0:9d:18:b5:63:
69:48:1d:e6:b2:57:55:cb:eb:34:9a:1d:f3:39:2f:31:ed:be:
41:0b:07:aa:36:86:31:d7:a4:c1:bf:f0:23:62:5b:d6:d7:10:
c2:d6:ab:83:50:38:58:07:56:f4:45:9d:d5:32:d0:0e:b5:61:
5a:e8:5e:45:3c:b7:a9:d5:62:35:79:1c:02:70:c7:0e:8a:15:
61:dd:b6:5d:a8:30:47:44:e0:f4:3a:51:6f:7a:f2:a5:a1:0f:
b2:7d:2c:b5:fb:30:1c:42:21:ad:51:75:4a:db:35:9e:66:78:
48:1f:e1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 15:57:06 2024 by rpki-client on console-ams.rpki-client.org