Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Cs19SzUUz_dbspYgqwuW2RUxtW4.roa
File: Cs19SzUUz_dbspYgqwuW2RUxtW4.roa (raw, json)
Hash identifier: LljGG/FOhBW+F3tirTpGNl8hffbFDxsHeG7l8N3Dd0g=
Subject key identifier: 0A:CD:7D:4B:35:14:CF:F7:5B:B2:96:20:AB:0B:96:D9:15:31:B5:6E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019053AEADC625A33A146E3F08B5882B26AE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Cs19SzUUz_dbspYgqwuW2RUxtW4.roa
Signing time: Wed 26 Jun 2024 08:34:34 +0000
ROA not before: Wed 26 Jun 2024 08:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 45.12.255.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.31.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 07:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:ae:ad:c6:25:a3:3a:14:6e:3f:08:b5:88:2b:26:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 26 08:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0acd7d4b3514cff75bb29620ab0b96d91531b56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:71:b5:4e:1d:c1:d5:d1:a9:32:54:a4:95:
68:3f:5c:93:29:b0:45:04:69:05:5b:cc:e2:ff:3d:
7f:72:1d:53:06:65:70:ce:c5:5b:b9:38:67:f0:bf:
d2:59:e0:a1:09:99:fa:2f:8c:c3:95:b4:2d:55:70:
5c:ff:60:f4:cf:7d:82:08:17:c6:7d:4c:d6:97:75:
e2:cf:4c:0e:bb:81:2d:9f:dd:23:a9:0b:42:47:e9:
7f:ad:b6:98:2f:83:0c:5a:9c:48:f1:3d:c1:75:85:
ad:76:e2:5d:8c:2d:8d:d7:8c:c0:ed:4c:8e:db:53:
2b:0b:5a:3b:64:e5:98:ae:ee:97:6a:ef:ff:10:41:
1d:f4:f8:5e:36:30:f7:13:f6:51:10:0e:f2:be:3e:
1a:85:1b:6e:91:c6:52:60:f8:8c:88:6c:7b:a1:53:
0c:03:30:a6:9c:61:c0:17:10:b2:54:6a:89:4c:0f:
fa:1f:2b:1d:3c:c6:27:5c:1f:da:87:e8:26:7a:85:
96:11:4c:84:34:2b:1c:07:b1:03:eb:97:5e:45:cd:
c0:5d:49:89:57:e0:0c:78:d5:ce:77:c4:8c:1d:f4:
30:69:03:f3:32:74:d4:b8:76:f6:c3:30:c1:68:9f:
e6:79:3f:ec:47:de:95:9a:8f:30:7c:c2:9f:12:70:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CD:7D:4B:35:14:CF:F7:5B:B2:96:20:AB:0B:96:D9:15:31:B5:6E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Cs19SzUUz_dbspYgqwuW2RUxtW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
45.66.228.0/24
141.98.5.0/24
178.215.238.0/24
193.149.28.0/22
194.180.36.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
05:dc:21:70:d8:b6:b2:14:dc:1f:e4:e6:44:cd:5d:4d:74:83:
a0:b6:f7:ad:66:e9:03:96:00:1e:cd:0b:16:19:f9:11:5a:f4:
58:f2:c9:8f:f3:d5:cd:5d:a0:41:f5:64:72:c4:b7:aa:0d:39:
0d:ad:5a:32:62:b0:5e:fc:2d:b9:66:87:4c:db:26:1b:c8:1d:
96:0d:94:82:20:57:ea:f6:dd:76:24:cd:0c:ce:ac:b3:68:fc:
53:22:d4:2f:eb:55:2b:4d:cf:10:b5:17:6a:f6:b2:e8:43:ab:
3b:ac:cf:4d:13:73:46:eb:15:7e:5b:fe:52:5a:39:95:43:b0:
b5:14:d9:eb:a7:02:ac:88:ed:e8:fd:4a:fa:da:d3:4f:4c:86:
6e:94:f0:0f:7a:06:12:e0:70:d9:ed:b1:10:8e:0a:63:32:a8:
d0:af:f1:e1:5c:ec:1a:be:dd:57:05:05:30:db:da:ee:b4:46:
8f:2f:92:97:0a:22:23:63:fe:c8:3a:c3:a8:45:cc:63:4e:d7:
5d:e7:44:b3:59:6d:fd:42:28:24:f5:b6:26:90:74:e2:f4:b0:
f6:27:5a:63:29:90:3d:fb:e4:f8:e1:b4:a9:61:2a:6b:b5:41:
7c:59:1d:1d:7e:e6:7e:58:7b:06:b0:7e:93:3d:b9:b8:82:1e:
93:e8:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 11:23:03 2024 by rpki-client on console-fra.rpki-client.org