Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Go2S6OS3KESZNhZedJUWGlk_rcM.roa
File: Go2S6OS3KESZNhZedJUWGlk_rcM.roa (raw, json)
Hash identifier: zZQnZTlF5oTm/GOKTKhWZp0roPEbVl6Whhhw4YPUDF4=
Subject key identifier: 1A:8D:92:E8:E4:B7:28:44:99:36:16:5E:74:95:16:1A:59:3F:AD:C3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E0ED320F78E29A6E0F4A72CE21BB33A75
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Go2S6OS3KESZNhZedJUWGlk_rcM.roa
Signing time: Tue 05 Mar 2024 13:35:01 +0000
ROA not before: Tue 05 Mar 2024 13:35:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.44.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.173.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 15:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:d3:20:f7:8e:29:a6:e0:f4:a7:2c:e2:1b:b3:3a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 5 13:35:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a8d92e8e4b728449936165e7495161a593fadc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:04:46:45:dc:01:be:42:61:49:b1:3c:e1:
00:23:75:c9:c8:7f:ce:f1:c0:d4:77:c1:5f:16:7f:
c8:a6:bf:6c:4a:65:51:df:fb:0e:ea:35:bd:55:f7:
1e:5c:b5:5b:d8:19:a7:78:bf:6a:2f:39:aa:a9:fd:
44:c1:7f:95:bf:06:1a:39:48:92:da:bd:26:36:f7:
58:23:0f:9d:67:90:f9:50:9d:0a:68:71:cf:62:77:
1a:75:7e:e0:56:96:f7:19:ba:60:de:6f:7c:87:af:
ed:53:80:ec:62:79:5b:6a:12:49:f7:91:0d:45:21:
b2:e0:41:1e:4f:80:2e:03:bf:3a:0e:fa:ea:dd:99:
44:d2:2b:ec:09:7a:02:21:a8:f5:7d:8e:2c:7b:5b:
53:5e:52:11:2b:12:9f:53:e4:b3:53:fd:9b:1f:4c:
16:6a:50:3c:34:e2:60:4f:ac:c6:1e:d1:de:54:4c:
3c:1a:88:10:c1:26:98:10:85:25:09:85:8a:9f:5c:
30:44:6a:d7:b5:17:2a:ce:c1:10:f2:9c:fa:85:37:
56:5a:23:2e:da:cf:8f:28:ac:d3:ca:06:e9:e8:c2:
7e:59:b0:4f:f2:67:ba:7c:24:c7:74:8c:e9:c8:9d:
43:eb:02:e3:b8:75:e2:65:52:4a:fa:ff:01:1e:7b:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8D:92:E8:E4:B7:28:44:99:36:16:5E:74:95:16:1A:59:3F:AD:C3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Go2S6OS3KESZNhZedJUWGlk_rcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
87.120.87.0/24
87.121.44.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.239.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.252.176.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:2c:41:20:c7:dc:19:1b:b3:be:c9:8a:2f:7b:c1:a2:79:f9:
6a:f7:08:0e:ba:70:65:c3:d3:06:c3:28:1c:16:a5:7d:af:c3:
01:92:51:c5:6e:11:c1:8f:88:2b:ca:b7:12:29:51:82:49:1d:
0c:82:7a:c7:f2:5a:c1:e3:78:11:dd:fa:1a:86:22:a0:51:a7:
a9:7d:df:31:e0:c6:11:ae:1d:74:cc:ee:d3:b3:69:c6:2f:36:
19:81:83:79:7d:a2:1a:09:08:f1:9f:07:4f:2d:a0:2a:36:87:
2a:92:03:05:c0:11:59:17:3f:0b:e7:6d:2c:78:95:97:ac:ef:
1d:db:f0:6a:f5:85:59:73:f7:ac:ff:e6:48:80:af:bc:2b:0f:
0e:e3:06:1a:72:b3:c3:b7:77:ec:ed:cc:87:e6:84:79:a9:07:
b6:dc:c6:33:98:da:85:8b:9e:f1:b2:4d:28:89:94:53:1d:f9:
68:b8:6f:4b:ec:3f:ab:a9:58:11:7e:d6:51:96:da:ba:60:f5:
1d:61:8e:96:7b:ee:3a:ee:89:48:41:84:33:bf:3b:3d:bb:83:
33:a4:07:53:f0:00:73:ed:a3:29:fc:64:dd:d8:f5:76:b5:ba:
ec:fa:9c:1f:74:ad:01:e2:a9:63:16:42:83:42:12:be:50:da:
86:0b:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 19:11:46 2024 by rpki-client on console-ams.rpki-client.org