Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DfQcS566rdoC_aEnWo-6PqUiLQ4.roa
File: DfQcS566rdoC_aEnWo-6PqUiLQ4.roa (raw, json)
Hash identifier: p7Nar4HNcEEc8KG1U9PmVLoFsgM0hLaBFO6ysf2h7eY=
Subject key identifier: 0D:F4:1C:4B:9E:BA:AD:DA:02:FD:A1:27:5A:8F:BA:3E:A5:22:2D:0E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DCFFD1E2A79C94723F4E73559E81BFA23
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DfQcS566rdoC_aEnWo-6PqUiLQ4.roa
Signing time: Thu 22 Feb 2024 08:44:48 +0000
ROA not before: Thu 22 Feb 2024 08:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 45.8.93.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.31.0/24 maxlen: 24
212.87.207.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 14:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cf:fd:1e:2a:79:c9:47:23:f4:e7:35:59:e8:1b:fa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 22 08:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0df41c4b9ebaadda02fda1275a8fba3ea5222d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:44:cb:16:1c:a7:e2:f5:71:9e:49:f4:44:
03:57:27:87:5c:05:b6:00:1f:2d:2a:ea:59:0d:20:
70:81:4e:b2:25:c6:89:11:07:9b:44:43:fd:f8:4e:
4e:fa:62:28:1b:c6:18:7b:21:0f:b2:07:f8:b0:54:
8e:4a:ad:ae:f4:32:0b:30:10:91:b0:68:d5:99:79:
d2:03:ec:ba:d3:a2:78:29:2d:6c:e7:ad:e1:2d:90:
b6:3d:96:e1:c6:7d:28:3e:02:54:9a:8f:f3:54:74:
33:a8:51:15:30:8b:b6:cd:3b:20:d4:42:93:32:e2:
bc:41:d0:2e:2a:d5:b8:b5:35:01:f8:e5:e9:eb:57:
54:2f:d0:58:ef:a1:13:13:20:0c:0c:50:0d:91:b5:
24:74:52:7f:c3:f2:da:49:aa:2c:a9:39:87:52:a7:
c0:45:35:16:23:01:41:42:1b:31:f5:90:8a:b9:02:
e1:f7:4a:7a:fd:a4:6d:a5:58:77:83:f2:bf:70:79:
29:70:5b:7c:98:7b:03:9b:89:45:b9:50:e6:c9:c2:
cc:bc:c0:f8:6d:bf:58:3a:4b:a1:21:da:26:92:4f:
ed:a3:21:93:5b:af:78:19:d3:b4:91:11:5e:fa:fd:
06:e3:8f:66:32:ca:b2:0f:04:6a:9a:cf:28:7b:49:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F4:1C:4B:9E:BA:AD:DA:02:FD:A1:27:5A:8F:BA:3E:A5:22:2D:0E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DfQcS566rdoC_aEnWo-6PqUiLQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
45.12.255.0/24
45.66.228.0/24
79.110.50.0/24
82.115.211.0/24
87.121.105.0/24
94.156.176.0/24
178.215.238.0/24
193.37.47.0/24
193.149.28.0/22
212.87.207.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
81:04:6f:a9:dc:0e:5e:fd:d2:71:8c:32:cc:1c:08:8f:95:cb:
41:47:4e:9a:cf:7f:53:73:2f:84:34:4b:bc:b6:83:87:1e:47:
c7:9d:bb:b9:ec:5c:76:90:1d:93:3b:a5:e9:48:72:75:f9:11:
0a:d9:08:eb:35:cf:63:e4:e3:03:e6:37:8e:2b:02:1e:4f:69:
e0:06:55:dc:60:7e:8b:55:07:29:af:98:53:3e:1a:c8:d4:09:
32:f1:c7:f5:ab:3d:db:81:ef:81:06:1f:c7:59:d1:0a:ee:5f:
56:d0:e6:88:7e:8e:f0:68:5c:e3:ae:cc:b0:3b:78:21:b7:75:
26:8e:ed:4d:67:13:7f:61:76:ed:4b:5e:57:a0:60:a3:04:d4:
8d:ca:5f:e1:5d:a4:15:05:5b:5e:35:aa:5c:37:a2:99:61:2d:
0a:d1:61:1a:dd:fe:91:3e:13:fc:81:be:e1:1b:91:71:5b:ce:
f2:ea:93:41:f5:fe:1a:37:b1:f8:7a:00:4c:0c:e5:9b:27:11:
d9:d1:54:d7:17:df:fa:9e:a2:1c:f8:fd:b5:78:e9:18:51:0d:
d1:12:fe:88:18:90:cf:c6:39:6d:27:bb:60:e3:39:ab:b9:0c:
d1:59:03:c7:13:f0:c7:45:5d:7e:20:58:85:5b:64:4f:f2:a2:
3c:8b:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 19:25:52 2024 by rpki-client on console-ams.rpki-client.org