Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EnDBVQt23mQBbd9xV7WxmjfqaAo.roa
File: EnDBVQt23mQBbd9xV7WxmjfqaAo.roa (raw, json)
Hash identifier: Z5RDJR+GkImKneJ3Zy6PxDnZyRzdvv2mn8hNZiBObLg=
Subject key identifier: 12:70:C1:55:0B:76:DE:64:01:6D:DF:71:57:B5:B1:9A:37:EA:68:0A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191D6621C92A9F3172F6CE9EA92D1133D95
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EnDBVQt23mQBbd9xV7WxmjfqaAo.roa
Signing time: Mon 09 Sep 2024 10:43:59 +0000
ROA not before: Mon 09 Sep 2024 10:43:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.66.228.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 08:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:62:1c:92:a9:f3:17:2f:6c:e9:ea:92:d1:13:3d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 9 10:43:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1270c1550b76de64016ddf7157b5b19a37ea680a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:9e:51:64:f3:c9:f8:9d:48:df:cd:71:f0:
ef:69:1b:d3:04:d2:4b:70:82:cc:ed:67:bf:ee:5e:
41:d2:c3:f8:eb:ed:53:a3:8b:3e:8e:28:d6:64:1e:
9a:08:8a:43:cb:0f:6f:ac:c9:3c:d0:ba:b6:43:02:
e4:0a:cf:f3:fc:79:d7:36:4d:d6:7e:44:59:92:84:
10:2e:41:bd:97:d0:00:0e:86:af:dc:e4:59:fd:e3:
f4:69:ce:14:85:6b:ee:00:15:93:4e:24:8d:c0:3c:
60:11:71:f5:5f:de:ef:63:c7:38:db:5f:a4:bc:cd:
e8:6d:e0:8c:43:8b:69:b7:92:f1:53:f5:93:fb:87:
bd:3f:62:3e:cf:ab:fe:bb:ef:08:c8:9c:1b:ba:48:
fc:4c:24:46:ef:8c:72:74:2f:9a:7e:cb:5e:9f:96:
07:99:63:f4:3d:d4:be:a7:4b:87:c1:b4:bf:f8:e2:
40:ca:74:10:53:cf:7d:e8:4e:bb:02:a5:02:d0:d8:
7a:f4:45:bd:a1:72:49:71:68:7d:49:26:d4:bc:de:
aa:65:72:cd:14:dd:22:53:20:09:d4:a3:46:30:b5:
06:c0:e6:36:bd:ff:69:8c:87:73:1d:fb:10:3f:5c:
4f:4e:9c:a5:2d:b2:42:ed:e0:48:b8:cb:39:8c:ca:
51:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:70:C1:55:0B:76:DE:64:01:6D:DF:71:57:B5:B1:9A:37:EA:68:0A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EnDBVQt23mQBbd9xV7WxmjfqaAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.88.90.0/24
45.149.241.0/24
45.151.89.0/24
45.151.91.0/24
80.76.51.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
92.119.196.0/23
93.123.39.0/24
94.103.125.0/24
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9a:c7:7d:96:71:ac:a2:af:24:58:84:ce:10:bf:2b:f9:55:
44:bf:25:20:2b:47:12:f4:13:4a:a9:99:0f:8c:ee:69:8a:6a:
6b:c8:fd:24:66:28:85:e2:b5:f3:a6:26:5c:d1:a0:4f:7f:48:
6e:a8:e4:1e:4e:16:6f:b4:1d:3d:85:01:45:96:2a:ae:c6:b8:
b6:9a:bf:3a:70:0c:9c:18:e3:8c:cf:77:a3:31:ca:b3:e3:bf:
8c:1a:fc:c2:44:55:4a:ef:09:68:7f:ca:9e:8c:9a:9b:b7:69:
4a:cb:91:09:42:52:ad:d5:41:17:f2:87:65:df:14:47:be:19:
83:14:08:96:1a:5d:f7:1d:08:9b:b5:53:14:02:f5:10:a8:60:
6d:4f:e3:0a:c7:23:c0:6f:d8:76:80:51:24:70:62:c2:a1:e4:
7e:f3:12:76:2f:6f:cd:bd:6a:1d:2e:ed:8c:dc:80:52:88:29:
5d:56:da:c1:9a:d0:44:79:9c:b9:e0:9e:26:37:b6:4d:a2:17:
a1:74:28:7b:42:17:34:4f:c3:f9:c9:ac:29:87:c4:e7:a8:fc:
66:c7:c5:7a:e2:a2:d7:0f:4b:87:7d:0e:f9:b3:ff:23:3d:11:
87:d1:75:b9:67:3b:c2:b9:c4:59:c8:c6:5d:d5:12:3f:d7:1c:
53:b6:9a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 10:22:47 2024 by rpki-client on console-fra.rpki-client.org