Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CVW6VZCSVKtIR90ibaNQDeHC5DY.roa
File: CVW6VZCSVKtIR90ibaNQDeHC5DY.roa (raw, json)
Hash identifier: 90AfhwqqOK7ditYMXJDsEjSBIdJnmbSpn92aue/EqAg=
Subject key identifier: 09:55:BA:55:90:92:54:AB:48:47:DD:22:6D:A3:50:0D:E1:C2:E4:36
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190C48A6F138216DCA717E41B75B3847C69
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CVW6VZCSVKtIR90ibaNQDeHC5DY.roa
Signing time: Thu 18 Jul 2024 06:32:05 +0000
ROA not before: Thu 18 Jul 2024 06:32:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.24.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 11:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c4:8a:6f:13:82:16:dc:a7:17:e4:1b:75:b3:84:7c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 18 06:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0955ba55909254ab4847dd226da3500de1c2e436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4f:26:eb:a1:8a:81:e8:ab:97:e2:75:ea:fa:
01:30:25:cd:8a:a6:7e:d9:2f:a9:57:09:ba:ea:2c:
b5:9c:cb:ae:18:e6:46:44:56:98:da:a9:99:6f:8b:
99:d8:4f:ca:57:81:2e:e9:29:32:9a:98:3b:db:5f:
ff:9d:76:89:cf:0c:c1:75:2c:25:d2:9e:12:7f:3c:
7e:bd:94:17:de:ba:f7:eb:07:a5:63:6d:a2:00:8c:
52:23:77:eb:a5:bb:c7:d6:48:5c:19:9c:5a:86:19:
6b:1b:91:3f:d4:26:0f:ee:8f:f5:dc:8e:f1:48:c4:
94:ac:77:4a:0d:90:88:eb:4e:15:d7:7a:00:87:c4:
d7:bd:a1:4d:e5:d8:d3:a6:05:7f:35:d8:32:c8:01:
7f:c1:91:91:6d:94:b6:73:b1:a9:9e:98:57:1b:7b:
fa:49:47:31:ca:7f:3e:92:63:88:30:96:db:9c:7d:
d0:d5:35:bf:53:ed:39:13:9e:97:76:fb:ad:33:1d:
5a:5b:c1:0f:b0:fa:20:b7:7f:3a:ec:15:01:9f:e7:
01:21:c3:2a:f5:c5:fb:fc:9f:97:7e:db:f9:c6:b6:
ed:e2:59:19:5f:c0:c0:17:e6:0b:88:40:b9:81:d8:
0f:a2:34:95:98:de:58:77:31:75:74:26:12:e9:bd:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:55:BA:55:90:92:54:AB:48:47:DD:22:6D:A3:50:0D:E1:C2:E4:36
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CVW6VZCSVKtIR90ibaNQDeHC5DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.154.0/24
45.151.89.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.121.38.0/24
87.121.45.0/24
87.121.221.0/24
91.92.16.0/24
92.119.196.0/23
93.123.24.0/24
94.154.160.0/22
94.156.2.0/24
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ae:5e:21:b6:fc:b9:5a:76:c9:07:32:f1:7f:d0:b6:f8:67:
9c:e2:9c:25:2d:24:1c:63:35:b6:7a:9f:68:2b:72:35:dc:58:
21:63:e3:d0:27:d6:6b:d7:db:92:71:1c:c6:b5:c3:52:39:9b:
7a:a0:ee:84:d9:04:a2:80:f3:a3:5f:71:34:57:2d:4f:69:ec:
0c:65:d5:ad:47:f2:34:88:f3:d7:b7:0f:8c:9d:b8:42:0d:bb:
fb:d3:07:b9:6c:3c:fb:af:46:33:2e:00:e6:c7:a2:53:9f:35:
4f:33:44:7f:2e:d9:e9:88:04:17:47:4e:36:50:5f:49:5a:57:
58:00:0b:0e:37:4f:71:79:fe:d0:91:5a:e8:fd:cd:09:02:c6:
83:b3:07:12:7b:e9:86:d0:81:34:04:b8:02:8c:2b:c0:33:72:
41:f8:1e:1c:00:cc:b4:50:0c:ce:7c:3e:81:08:e4:81:9f:93:
cb:fb:1d:45:13:8e:58:85:91:b0:5f:0c:7d:5c:38:5d:17:07:
c7:b4:5b:db:59:76:15:7e:e1:5d:c1:cb:ab:39:18:0e:1a:c0:
e9:51:50:41:c5:59:aa:f8:14:03:df:a5:61:1e:60:db:40:11:
04:2e:8e:b1:f1:90:2e:d2:1a:e7:8d:c9:58:8c:85:9c:25:90:
6e:ab:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 16:37:41 2024 by rpki-client on console-fra.rpki-client.org