Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EXVdRbzsN9-cA_0iDzByogbkoCM.roa
File: EXVdRbzsN9-cA_0iDzByogbkoCM.roa (raw, json)
Hash identifier: iweBW9TNH53vZ+Mz3EGMuG5h+KDJqKELwrxZzgfRk7E=
Subject key identifier: 11:75:5D:45:BC:EC:37:DF:9C:03:FD:22:0F:30:72:A2:06:E4:A0:23
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01922DD92613869813E8791115490534FA3A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EXVdRbzsN9-cA_0iDzByogbkoCM.roa
Signing time: Thu 26 Sep 2024 10:20:58 +0000
ROA not before: Thu 26 Sep 2024 10:20:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.9.156.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 11:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2d:d9:26:13:86:98:13:e8:79:11:15:49:05:34:fa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 26 10:20:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11755d45bcec37df9c03fd220f3072a206e4a023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:70:41:c2:a5:ed:56:d5:2e:c1:9b:09:57:
76:f7:49:36:29:4c:bb:04:ee:0a:4a:c4:a9:e7:13:
28:4a:22:98:42:04:df:36:18:df:d2:95:9a:a1:d7:
6d:f0:3f:7f:57:54:a5:e4:87:85:26:d9:a7:db:fd:
4f:52:31:ed:bb:76:af:ef:47:78:53:37:e0:03:d3:
52:60:32:81:8e:30:c8:4c:88:55:2a:27:9f:db:5f:
e5:30:39:2d:4a:9e:96:10:60:b3:16:fc:25:5a:21:
7a:6c:52:d1:cc:26:f9:57:3c:fb:6f:48:33:26:fd:
f9:0c:d7:12:14:d3:df:35:8a:92:d9:54:f2:be:fc:
c2:bf:82:89:50:aa:79:41:1c:82:da:c1:36:96:c0:
a0:b5:f2:2a:d0:f6:13:de:19:ba:52:c4:ff:4d:4c:
57:48:8f:7b:99:b7:7f:dd:e2:1f:c2:eb:de:2e:67:
a6:cc:ad:26:93:c9:6b:68:24:87:4c:9d:20:a8:54:
bb:dc:81:02:dc:46:e2:0e:57:b9:bf:ff:54:97:47:
b4:85:df:c7:4f:c0:b1:5b:26:59:8d:fc:e5:3c:46:
bc:81:4e:b3:ad:71:ef:5b:99:14:8e:3d:b0:df:bd:
67:15:ca:61:1d:c2:3d:34:93:af:f6:0e:0b:7a:d9:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:75:5D:45:BC:EC:37:DF:9C:03:FD:22:0F:30:72:A2:06:E4:A0:23
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EXVdRbzsN9-cA_0iDzByogbkoCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.66.228.0/24
45.139.106.0/24
45.151.89.0/24
45.151.91.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.37.41.0/24
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
20:04:7d:28:4e:80:9b:f7:b3:02:85:19:61:f0:ba:f5:0b:aa:
d7:91:4c:be:51:4b:e4:70:4d:8d:a4:2b:23:9c:ed:ae:95:31:
64:e1:7d:f4:c3:12:b0:f0:82:ac:17:dd:99:76:a3:71:83:b7:
a9:20:39:ea:cf:5f:88:ee:ce:0b:c3:ee:85:c8:d7:5b:3b:f7:
c0:94:07:57:dd:94:38:0b:6a:55:e0:3d:15:77:f1:0c:f5:d6:
15:2f:8a:c6:19:d0:f0:5b:90:6f:72:40:50:23:91:85:d2:11:
03:dd:0c:9a:9d:71:d4:1d:a2:27:a4:7b:24:1c:49:29:0d:03:
14:42:cc:2e:5f:f2:0f:aa:f4:a5:f6:60:81:fe:c3:0d:5d:c5:
24:7a:bf:21:ff:5f:0e:8e:6b:89:14:7a:28:16:b4:f1:b5:38:
bf:a8:72:2e:5f:c2:3b:70:89:1b:bc:91:53:da:8a:ec:3a:6e:
b5:87:ab:10:d0:55:a0:5f:f1:16:12:76:18:eb:0a:30:7f:ad:
b0:5c:f4:13:d2:42:e9:d5:f4:a3:60:30:75:38:9e:90:21:da:
b0:06:73:c8:5a:51:c4:6b:28:f9:d0:6c:1c:02:e9:84:85:d6:
27:b0:fe:84:09:9a:58:05:08:57:df:d4:d6:37:e6:af:48:89:
c5:74:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 16:48:09 2024 by rpki-client on console-ams.rpki-client.org