Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ANwTYFowFgdNafUtYH90c3-hhjc.roa
File: ANwTYFowFgdNafUtYH90c3-hhjc.roa (raw, json)
Hash identifier: u/ZuXFm3eHEGQyPNCdnTTe4DvCvIyY61EtyhS9zqnno=
Subject key identifier: 00:DC:13:60:5A:30:16:07:4D:69:F5:2D:60:7F:74:73:7F:A1:86:37
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01919DB27149E7DC3DA4209A75FB35745BE8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ANwTYFowFgdNafUtYH90c3-hhjc.roa
Signing time: Thu 29 Aug 2024 10:33:22 +0000
ROA not before: Thu 29 Aug 2024 10:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.88.90.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 13:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:b2:71:49:e7:dc:3d:a4:20:9a:75:fb:35:74:5b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 29 10:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00dc13605a3016074d69f52d607f74737fa18637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:31:1a:73:40:a9:7f:db:a8:95:cd:9e:e1:
ab:95:14:56:aa:83:db:f3:af:94:02:7d:c8:89:78:
e4:41:35:55:de:2a:09:58:11:c1:7e:ad:49:06:12:
b9:60:a4:a5:42:43:c9:52:f8:f1:26:84:5b:0f:dc:
b0:8f:68:a5:48:33:d3:04:c4:ac:a2:ae:7b:8d:02:
d5:e5:69:b0:cf:b7:80:c5:98:de:75:bb:41:3c:2d:
d7:10:90:b9:c9:43:65:7a:e8:79:95:32:bb:89:f5:
5d:0f:ee:90:c1:f8:37:18:e0:36:be:aa:9f:ca:cc:
64:97:b0:80:40:4c:2b:b2:67:2e:23:42:f6:4a:fa:
0f:67:19:12:bd:40:c7:b6:e7:8b:94:5f:c1:e0:69:
35:1c:48:47:66:ad:61:a1:01:0a:7c:58:9c:d5:16:
ff:81:bf:41:da:4e:56:aa:dc:8e:7d:74:98:86:b9:
76:91:12:38:1d:62:75:ce:c6:49:c1:f4:ed:6c:bf:
92:e7:eb:f4:e8:f9:30:7f:b5:23:92:4a:d9:ed:73:
e2:33:24:5c:32:61:b8:b2:2f:b8:38:f8:c4:00:3d:
8f:3b:40:8d:b9:9e:4b:08:55:f2:45:57:6b:00:e0:
a8:26:bd:d0:44:57:7a:2d:aa:15:28:61:92:21:43:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DC:13:60:5A:30:16:07:4D:69:F5:2D:60:7F:74:73:7F:A1:86:37
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ANwTYFowFgdNafUtYH90c3-hhjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.144.154.0/24
45.151.89.0/24
45.151.91.0/24
80.76.51.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
93.123.39.0/24
94.103.125.0/24
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ec:77:99:20:74:42:69:dc:98:33:32:04:80:59:5b:fd:4f:
99:cb:cf:94:ac:24:29:ab:ca:41:dd:2d:5f:ea:8f:c5:93:7b:
1d:4c:22:da:82:2c:3b:04:c8:eb:78:f8:cc:ce:19:5d:d9:4f:
f5:0b:73:ec:1c:bd:a7:f2:71:9b:64:79:2f:c1:b1:2a:a2:d3:
31:89:5b:2c:4a:03:98:30:e6:4b:8a:7b:7b:b0:40:98:f1:09:
0b:b5:72:d3:5a:4d:ad:dc:7d:ee:e4:13:ad:81:4f:18:65:5d:
d8:d5:51:d3:e9:26:7b:64:72:48:07:39:72:f7:28:f4:c2:64:
e8:7c:a3:1e:21:7f:26:1e:c1:90:ab:c5:8b:6f:a2:c7:fb:8d:
f9:b7:de:7f:61:ee:b4:54:90:30:25:89:b3:43:7c:8f:17:5b:
cb:fd:f8:8e:bd:63:f1:91:69:61:16:66:3b:a7:6e:7f:2b:65:
2b:84:d2:e6:6c:68:15:14:60:05:98:5c:ef:49:c0:99:72:34:
43:f3:47:b8:c1:6a:ab:80:2f:a4:5f:12:1c:45:52:8b:30:62:
58:85:dd:99:89:40:cc:81:06:98:b9:40:82:41:15:50:d7:82:
77:9f:a4:3a:95:43:c3:d1:81:e9:f2:0f:76:07:98:f9:ee:d8:
fb:be:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 18:31:11 2024 by rpki-client on console-ams.rpki-client.org