Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9rlGTm87SecKupJ-Q4HoSbT_6j4.roa
File: 9rlGTm87SecKupJ-Q4HoSbT_6j4.roa (raw, json)
Hash identifier: FiKXlibHOEHqU4YH2hBCBYC63wEs8TgUZcuObB1q8nk=
Subject key identifier: F6:B9:46:4E:6F:3B:49:E7:0A:BA:92:7E:43:81:E8:49:B4:FF:EA:3E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E1E59926FDAF9B367A57E8CACA0B19D91
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9rlGTm87SecKupJ-Q4HoSbT_6j4.roa
Signing time: Fri 08 Mar 2024 13:56:10 +0000
ROA not before: Fri 08 Mar 2024 13:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.129.86.0/23 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.44.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.72.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 07:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1e:59:92:6f:da:f9:b3:67:a5:7e:8c:ac:a0:b1:9d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 8 13:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6b9464e6f3b49e70aba927e4381e849b4ffea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:97:b9:d1:f5:83:36:e0:3a:47:2d:cb:06:1d:
2f:3e:8a:62:8c:73:e3:23:35:df:b3:b7:ae:3f:96:
d7:b6:e4:04:49:b1:d8:86:8b:da:35:de:d6:c0:69:
7d:1c:5a:cd:9f:86:7c:42:59:82:8b:f9:ac:28:01:
c6:ed:e7:c0:25:ae:82:72:d0:6a:18:a4:3e:2a:64:
11:82:f4:30:2e:3b:39:c9:4d:56:5b:12:9f:87:e3:
23:31:23:40:65:a2:9b:67:44:be:57:94:b2:84:e7:
aa:a2:74:51:a3:14:bc:29:f5:7f:95:53:10:cd:93:
35:ae:3a:eb:10:e5:47:a2:b0:5a:4b:04:bc:e9:c4:
72:21:65:58:f4:ab:fa:53:ea:af:3e:d0:24:e9:1c:
8f:4c:b4:81:c7:5b:73:b7:2e:df:62:91:9b:ae:55:
9a:4f:84:9a:69:d2:5a:bd:99:92:af:94:8d:50:b4:
02:cb:58:2c:06:50:96:f2:ee:3e:3c:00:6b:90:57:
31:f7:7b:c3:17:08:91:62:64:a3:c3:7a:79:b1:8e:
62:80:d0:c7:96:04:d6:59:35:39:59:e7:c5:4f:cb:
c9:4a:b2:76:7d:79:62:08:d9:f7:dd:ce:30:9e:a9:
7b:d7:ec:30:11:79:7f:d2:60:6c:82:36:32:47:76:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B9:46:4E:6F:3B:49:E7:0A:BA:92:7E:43:81:E8:49:B4:FF:EA:3E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9rlGTm87SecKupJ-Q4HoSbT_6j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.86.0/23
45.151.89.0/24
87.120.87.0/24
87.121.44.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.72.0/23
94.156.239.0/24
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.252.176.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:6f:36:49:e8:48:71:90:71:4d:8b:80:82:87:84:1b:49:e1:
1e:3b:79:23:e0:1a:b8:b0:05:e4:07:ab:92:4a:2a:16:7d:01:
89:9c:44:6f:f2:5c:fa:df:7b:f4:07:dd:f3:11:19:74:3a:64:
8b:19:a8:79:8b:c5:2a:30:66:b8:8e:c4:4a:28:05:6b:96:ea:
41:c4:8c:06:ca:67:bb:3f:fc:7a:8b:08:b9:99:39:81:ec:73:
55:ed:48:03:79:1a:98:a0:15:d3:c2:3a:ed:d9:69:1a:1e:2a:
72:d2:85:80:7a:91:62:c8:02:7c:d8:d2:03:60:ed:d0:eb:17:
e3:e7:84:0f:23:5d:37:8b:c6:83:1d:f7:94:0e:c8:13:e5:f8:
6b:72:d3:91:3c:92:19:3a:86:96:8e:c0:36:73:91:8a:ee:24:
05:e3:0b:8f:70:81:74:c7:0f:76:99:7b:61:10:09:d8:0d:eb:
5e:79:8c:07:11:44:13:8c:07:ee:1f:94:0c:e7:94:9e:ed:3f:
3f:4b:8c:c0:df:23:58:cc:a4:11:4a:48:3f:5e:af:42:90:75:
93:17:c8:64:b7:17:fb:b9:ad:42:21:eb:f1:9d:2f:7f:97:d0:
a6:24:86:f6:21:ba:3b:33:33:56:79:d6:3a:02:ea:b1:c0:ae:
c7:64:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 12:10:45 2024 by rpki-client on console-ams.rpki-client.org