Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AUCev0L8zxNt2KL8OTp-UmuaWcE.roa
File: AUCev0L8zxNt2KL8OTp-UmuaWcE.roa (raw, json)
Hash identifier: DUXmylcUPDX58sN4i5qmO60vx8JjARCCQW3bfkmgDu8=
Subject key identifier: 01:40:9E:BF:42:FC:CF:13:6D:D8:A2:FC:39:3A:7E:52:6B:9A:59:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E55D8589653B572F44883042F2FDCE2F4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AUCev0L8zxNt2KL8OTp-UmuaWcE.roa
Signing time: Tue 19 Mar 2024 08:33:45 +0000
ROA not before: Tue 19 Mar 2024 08:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.59.255.0/24 maxlen: 24
45.129.86.0/23 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.72.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 10:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:55:d8:58:96:53:b5:72:f4:48:83:04:2f:2f:dc:e2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 19 08:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01409ebf42fccf136dd8a2fc393a7e526b9a59c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:74:da:83:10:b5:c6:0b:ba:f7:5a:a9:06:
63:30:32:fa:10:d2:c3:55:14:8e:48:e4:ff:1e:28:
ec:f7:d3:f5:03:e8:39:e4:63:b8:7a:f6:f5:0a:5b:
70:f2:37:49:14:36:ef:75:3e:ff:e0:3b:08:a0:84:
b9:1c:c5:b1:72:3f:ec:29:21:5a:b0:de:b8:7f:09:
5a:78:c5:d6:aa:61:1c:b9:9f:b6:ee:b0:92:81:77:
c7:08:b5:9e:70:a5:7d:e3:04:75:ad:ff:8f:59:c3:
cb:c0:3a:8b:7c:3c:f8:6f:64:66:67:39:f1:fc:8c:
5a:d9:5c:e5:b4:d5:bf:f1:f4:a4:37:7f:08:da:a3:
5f:b8:3c:da:4b:1f:c9:99:b5:14:6a:b0:83:87:54:
4c:e9:df:e2:43:1e:cc:4f:1b:f0:51:91:cd:a5:b8:
29:e2:2f:c0:2c:18:21:57:08:5e:6c:2e:13:56:92:
e1:c0:30:1b:62:79:ef:44:4e:a6:45:1e:f4:09:bb:
b7:4a:fc:c0:a0:11:57:b9:0b:50:c1:31:13:28:85:
79:36:a3:6e:27:7c:63:c3:de:e9:04:b8:cf:6b:5b:
f0:d2:47:7d:90:49:b5:7c:e5:b4:92:59:91:48:0c:
fd:ce:6d:00:e6:24:fe:12:97:db:2b:91:ad:67:ec:
c0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:40:9E:BF:42:FC:CF:13:6D:D8:A2:FC:39:3A:7E:52:6B:9A:59:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AUCev0L8zxNt2KL8OTp-UmuaWcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.255.0/24
45.129.86.0/23
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.72.0/23
94.156.239.0/24
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.252.176.0/24
185.254.37.0/24
193.37.41.0/24
194.55.186.0/24
194.55.224.0/24
194.169.172.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:9a:e8:52:df:ec:99:25:ca:2f:49:71:86:fd:e3:27:d0:f1:
01:a0:74:1e:07:30:ee:da:e5:4f:61:36:76:70:54:0c:8f:27:
2e:28:41:e8:dc:cc:0a:5e:79:d0:9d:c9:91:96:8a:11:b6:93:
74:19:16:7b:71:77:b0:82:0b:65:b3:db:17:bd:8d:0e:31:86:
8f:96:43:6e:0b:cf:c6:02:ef:31:eb:ac:11:96:26:29:63:30:
b0:89:d2:53:40:76:d7:0a:f3:7c:e9:06:60:21:33:64:5e:2d:
de:b0:3b:22:09:fc:0a:82:0c:ca:67:40:68:9d:2d:aa:8d:96:
55:aa:41:34:35:49:fe:6e:9f:b0:99:07:ac:ca:3b:61:14:35:
6f:12:d9:3e:ce:a5:74:62:d5:51:bf:eb:ac:c5:cf:2d:ae:fb:
40:8e:ca:d4:90:6f:00:62:e7:52:51:fb:3d:a1:b2:76:00:af:
0a:34:a7:af:44:6d:56:fb:20:51:35:b6:32:d5:60:66:ce:bd:
88:ec:b5:71:c0:18:cc:88:85:8d:d2:29:69:8f:a8:c4:5e:f6:
e4:d3:ff:b4:28:8d:47:48:b8:08:a4:fe:7b:b8:56:7f:e1:63:
a3:ed:fc:2f:14:b6:8a:5e:40:11:2f:2a:ce:6f:a5:34:74:95:
3b:d6:81:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 15:17:41 2024 by rpki-client on console-ams.rpki-client.org