Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EEN5DoCe8HovccKsyGGUN7xHWDk.roa
File: EEN5DoCe8HovccKsyGGUN7xHWDk.roa (raw, json)
Hash identifier: pgHI/7gM4Mx3o/mS5CyyFHjdOvhwQf7a2KO46YjxMJ4=
Subject key identifier: 10:43:79:0E:80:9E:F0:7A:2F:71:C2:AC:C8:61:94:37:BC:47:58:39
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D17DB24C313463736FD5040EE1C706489
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EEN5DoCe8HovccKsyGGUN7xHWDk.roa
Signing time: Wed 17 Jan 2024 14:37:34 +0000
ROA not before: Wed 17 Jan 2024 14:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.84.89.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.172.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 11:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:db:24:c3:13:46:37:36:fd:50:40:ee:1c:70:64:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 17 14:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1043790e809ef07a2f71c2acc8619437bc475839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:3e:3f:0f:50:7f:2b:53:ed:40:21:d6:68:
f3:c8:11:c0:c6:89:ee:4b:71:9d:b8:0d:6e:fa:69:
16:7c:a6:3a:c9:4b:8b:70:79:79:57:ca:2e:60:08:
58:07:2b:5a:fd:e0:b5:f3:01:59:79:7b:df:32:21:
05:24:ce:c8:f1:03:48:a4:19:1a:00:b6:0f:84:d4:
a0:cb:f0:dc:14:04:6e:29:e9:d6:57:8e:a2:7d:4f:
13:38:60:00:27:7f:3c:91:3a:ed:44:e5:e0:2c:ed:
6c:3f:bd:8a:60:46:7c:91:48:36:da:aa:87:8d:fd:
85:ec:90:3b:e7:1f:a8:c4:76:e6:55:ce:30:69:ac:
db:d8:27:1b:9d:fc:a1:fb:9c:b8:8c:59:1b:05:35:
bb:e5:f2:b6:3d:03:b6:87:b7:1d:0f:c3:f2:96:21:
7a:18:2c:f7:07:7c:e1:f1:56:6d:05:a7:ab:c6:d7:
47:2b:ba:64:7f:cc:83:91:93:8e:93:68:20:a1:44:
93:5e:fc:b1:3b:7d:94:89:4d:02:55:7c:2d:50:5f:
68:ff:07:9d:ef:db:4f:b1:2e:d7:8e:2d:89:06:5c:
a9:53:76:a7:9b:7a:76:46:3a:70:5c:ff:1b:2d:3c:
10:16:4b:42:28:0c:f3:d6:da:63:e5:d5:21:95:b3:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:43:79:0E:80:9E:F0:7A:2F:71:C2:AC:C8:61:94:37:BC:47:58:39
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EEN5DoCe8HovccKsyGGUN7xHWDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.88.90.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.154.172.0/24
94.156.239.0/24
147.78.101.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.226.175.0/24
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:9e:a1:19:4e:1a:0c:3c:8d:a8:8c:0e:38:f0:54:58:d7:31:
06:c2:94:4a:e4:56:9d:66:29:16:26:eb:80:7f:93:35:a2:dd:
1b:03:b5:ce:01:1f:94:74:09:5c:12:12:40:c8:e8:c4:a0:20:
42:d3:8e:e1:fd:e0:90:3f:d6:5d:5c:eb:0c:51:5d:61:5b:1b:
c7:68:bb:b9:28:7c:33:3d:4f:d2:b2:b1:60:b2:91:3b:24:cc:
a4:90:98:a3:27:e8:13:ff:68:c3:f7:c4:b5:c4:de:6d:7a:16:
3d:58:32:9f:fb:8c:e6:b4:a5:0c:58:38:18:6f:78:36:4b:b0:
98:34:c8:04:4b:47:32:0e:66:46:c0:33:fb:10:b1:59:49:a6:
c8:8e:f2:2f:22:a4:13:4d:b9:e8:9c:a6:d8:c8:b1:70:1a:ad:
98:d0:73:dd:37:fe:f5:ea:be:7b:5e:df:c0:c7:fc:de:76:d5:
a8:4a:b1:d1:c3:24:f8:52:22:94:48:39:b4:73:0a:b9:8e:eb:
50:2d:3b:c4:0c:bb:c0:9d:22:b5:f3:16:4b:11:74:bf:fd:c7:
40:55:bf:e6:5f:d2:f1:3d:1b:95:61:ee:17:e2:42:2f:15:31:
b6:86:16:3e:28:27:3e:17:d4:79:67:99:ed:64:da:33:42:f0:
2d:95:88:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 15:15:05 2024 by rpki-client on console-ams.rpki-client.org