Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9midjB6_fzp371v_21-esD9hNTk.roa
File: 9midjB6_fzp371v_21-esD9hNTk.roa (raw, json)
Hash identifier: uZfKT5Jz9DajXoYiycfyn+5s8VVSNYpJbFPLsszJY/o=
Subject key identifier: F6:68:9D:8C:1E:BF:7F:3A:77:EF:5B:FF:DB:5F:9E:B0:3F:61:35:39
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019154A1DDC964255C919C86BEC7829805F4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9midjB6_fzp371v_21-esD9hNTk.roa
Signing time: Thu 15 Aug 2024 06:02:59 +0000
ROA not before: Thu 15 Aug 2024 06:02:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.88.90.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.246.223.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 12:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:54:a1:dd:c9:64:25:5c:91:9c:86:be:c7:82:98:05:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 15 06:02:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6689d8c1ebf7f3a77ef5bffdb5f9eb03f613539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:24:21:ff:f3:a2:3b:13:b1:56:64:ab:12:
c3:54:91:a1:14:60:d8:45:45:ba:ed:66:6b:40:b7:
73:74:d8:10:66:ab:71:24:c6:18:b9:0d:64:9a:04:
43:40:cc:0b:e5:95:03:a5:5c:28:ba:ed:cc:64:06:
f5:1e:56:62:7e:1b:0c:06:38:96:0f:ff:5a:00:b8:
bd:25:10:27:d7:68:f4:12:bd:99:81:93:ef:7e:24:
4e:b8:72:fa:96:05:5f:78:05:ed:6b:62:c8:a5:78:
65:12:4e:7d:36:1d:2f:59:75:0d:04:bb:39:f1:d1:
e4:e3:73:c5:c0:6c:74:13:38:02:07:3a:55:bc:09:
4a:c9:3b:97:5a:6a:fc:60:0d:6b:a6:c3:87:82:df:
14:89:a0:b1:de:6b:f1:06:9e:bd:26:79:8f:f4:21:
e8:4d:10:19:ab:f5:44:2b:80:ed:ae:aa:15:f9:7e:
d8:cf:d7:94:28:2a:05:a3:b2:69:0a:5b:3d:8d:35:
9c:9f:7c:1c:56:d8:85:db:ad:3e:5c:6b:3d:c1:20:
92:42:e0:07:81:2b:b8:fb:5c:37:57:cc:ce:5c:f2:
8a:79:8a:6e:5c:99:f1:01:7a:0f:5e:65:1f:94:16:
64:c6:75:99:6e:d5:b6:3c:4c:cc:13:d1:96:a7:d7:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:68:9D:8C:1E:BF:7F:3A:77:EF:5B:FF:DB:5F:9E:B0:3F:61:35:39
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9midjB6_fzp371v_21-esD9hNTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.128.232.0/24
45.144.154.0/24
45.151.89.0/24
80.76.51.0/24
81.161.230.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.69.0/24
87.121.221.0/24
92.119.196.0/23
93.123.39.0/24
94.103.125.0/24
94.154.160.0/22
94.156.8.0/24
94.156.11.0/24
109.206.237.0/24
141.98.1.0/24
147.78.102.0/23
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
185.246.223.0/24
193.35.18.0/24
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b6:a4:7b:c7:bd:ed:c4:70:d7:ca:d2:12:f4:5f:ff:0d:b7:
17:78:5c:4b:b0:4e:d9:01:f0:ad:0b:53:fb:b5:e4:4e:4a:87:
28:0f:42:54:98:f0:9f:85:33:09:3e:7c:0f:08:69:88:16:fe:
02:64:5d:5b:35:18:11:dc:71:fa:1c:47:83:4e:71:30:cf:9a:
bc:11:df:97:fa:c4:3a:5e:3b:b5:7e:bb:5e:34:31:c6:ba:83:
39:11:1e:12:0d:ca:c9:15:b7:71:2f:6d:13:21:fd:c7:ca:10:
10:77:f3:7c:6a:69:b8:3a:f4:66:be:71:49:06:9a:4d:6a:78:
d9:10:0b:4a:c8:1c:36:eb:bc:47:ea:03:5a:d8:a3:1c:89:43:
d5:de:27:c1:88:85:16:09:70:64:2a:08:2b:64:cf:2d:29:2c:
2f:49:fd:64:18:94:03:4e:83:9d:f4:05:b8:ef:4f:38:75:34:
f1:13:fc:7b:73:2a:fa:8a:71:59:fd:20:ea:1d:84:4a:68:96:
1b:2b:87:fa:4b:2e:be:f7:c8:a8:20:11:8e:45:fd:0a:77:c1:
3f:41:03:c7:b6:08:06:f7:8a:2f:7b:58:b0:60:b0:65:76:61:
a9:49:2e:40:09:9e:59:c3:24:bf:3f:04:94:33:b9:59:ae:d9:
0d:8a:3f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org