Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D4gUKwZMsUZ9kfo-3GwgubvAa3M.roa
File: D4gUKwZMsUZ9kfo-3GwgubvAa3M.roa (raw, json)
Hash identifier: 7PHLvIO2TOEydMym4PEs2P2flDc2RRfO2IFLsEAtJb0=
Subject key identifier: 0F:88:14:2B:06:4C:B1:46:7D:91:FA:3E:DC:6C:20:B9:BB:C0:6B:73
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01922941791006C7D2D119AA9AF5D6BF5DE4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D4gUKwZMsUZ9kfo-3GwgubvAa3M.roa
Signing time: Wed 25 Sep 2024 12:56:49 +0000
ROA not before: Wed 25 Sep 2024 12:56:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.9.156.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.84.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 07:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:41:79:10:06:c7:d2:d1:19:aa:9a:f5:d6:bf:5d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 25 12:56:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f88142b064cb1467d91fa3edc6c20b9bbc06b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:39:fa:8b:50:22:dd:2d:d4:72:e3:f4:56:
ce:3c:a5:48:92:d1:88:00:cf:93:5b:c0:8e:51:13:
f1:d7:9c:bc:95:39:f2:cb:49:fc:05:49:1a:18:22:
4f:4c:4a:76:d3:28:12:2f:e0:e1:cd:10:3d:7c:59:
d6:c3:40:31:ab:aa:c0:5a:19:16:d6:91:52:75:e7:
f8:4c:5f:61:49:b7:c5:32:34:fe:76:d3:69:c6:bc:
63:b0:03:15:78:d3:7b:7c:e8:98:f0:de:34:68:9e:
75:fc:a1:5d:2b:3d:3d:bc:78:70:4e:03:e5:c8:77:
5c:bf:56:ae:5a:ae:cb:4d:87:f9:2f:a7:5c:af:0c:
ed:55:c6:96:4f:bc:9d:6a:35:8f:e7:e3:23:dd:40:
bf:16:fe:a8:19:86:53:d3:c3:cf:4d:af:ec:d1:96:
2e:c0:79:7c:3b:2f:c3:23:69:fb:7e:67:26:b9:72:
a9:63:8a:64:57:66:8e:d8:40:93:ce:61:40:9d:4e:
bf:5c:48:6a:35:a6:2c:a3:4c:1e:dd:6b:ee:d1:1b:
57:a4:fe:39:25:37:79:c4:d0:a3:a4:82:6b:39:6f:
13:33:ea:93:09:b5:9f:b5:9a:5b:e6:a0:a3:23:eb:
1f:80:6c:d7:b2:ca:81:84:67:8c:3d:fa:99:5a:d1:
7e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:88:14:2B:06:4C:B1:46:7D:91:FA:3E:DC:6C:20:B9:BB:C0:6B:73
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D4gUKwZMsUZ9kfo-3GwgubvAa3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.66.228.0/24
45.133.251.0/24
45.139.106.0/24
45.151.89.0/24
45.151.91.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
92.119.196.0/23
93.123.84.0/24
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.37.41.0/24
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e6:60:ea:03:af:f3:b4:69:9e:19:2a:4d:1a:6c:60:0a:0d:
4b:58:ec:d5:08:23:fe:97:6d:69:3d:be:4a:96:79:14:26:d4:
a1:aa:1d:a2:03:9e:59:2a:5f:9c:c5:0c:da:a7:7e:7f:d4:02:
7a:45:ea:b0:d9:0c:7c:c1:61:c9:f5:84:8d:24:e8:20:68:f0:
74:1d:6b:11:9d:d0:68:03:43:c4:47:3d:b1:7f:6c:4c:b5:41:
6a:e9:8b:97:2e:85:03:3c:e0:b7:b3:dc:21:6d:d6:bc:cf:53:
bf:c7:38:38:d4:4a:fc:bc:76:79:3f:44:96:4a:89:d3:81:36:
6b:cb:5d:26:78:cc:28:cd:f0:fa:62:65:87:01:91:d9:d8:48:
73:e4:70:d8:2d:b3:ba:71:26:a2:b4:b6:a9:f0:11:91:ce:9b:
11:bf:c9:42:ee:d1:46:ab:a4:44:ab:0a:e4:05:c1:2b:fd:f9:
a0:de:6d:da:42:61:da:73:25:0f:6c:cf:3f:1c:7d:c1:5e:77:
94:0f:41:87:05:45:5e:9b:ed:7c:9b:ba:17:13:52:d0:70:d4:
3c:5c:e1:ea:f0:98:1f:b2:55:bd:75:c3:af:89:64:fc:c0:ea:
7d:3c:e0:ba:27:90:36:8b:33:7d:c5:e0:85:bb:9a:d2:30:6d:
ee:f6:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 10:42:23 2024 by rpki-client on console-ams.rpki-client.org