Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KRe5o_UQKlo6FLUSCdQiTJ2fpk4.roa
File: KRe5o_UQKlo6FLUSCdQiTJ2fpk4.roa (raw, json)
Hash identifier: XxgUHlCle19FMtwXjcswOp/ad4XWiNLdzfcxZZbGb4s=
Subject key identifier: 29:17:B9:A3:F5:10:2A:5A:3A:14:B5:12:09:D4:22:4C:9D:9F:A6:4E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01927FE64C87F3B27E404E748E374749604B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KRe5o_UQKlo6FLUSCdQiTJ2fpk4.roa
Signing time: Sat 12 Oct 2024 08:44:12 +0000
ROA not before: Sat 12 Oct 2024 08:44:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.66.228.0/24 maxlen: 24
45.90.88.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 08:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7f:e6:4c:87:f3:b2:7e:40:4e:74:8e:37:47:49:60:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 12 08:44:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2917b9a3f5102a5a3a14b51209d4224c9d9fa64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:7b:92:d1:70:ba:52:fd:6e:58:5b:1b:7b:
d3:f0:91:40:22:ca:36:da:aa:62:2a:7a:57:59:f9:
05:4d:f0:91:57:66:08:de:f3:e7:05:71:e3:f0:4c:
c1:b0:79:3f:34:15:92:83:91:01:32:de:50:46:35:
fa:95:cc:3e:5b:4e:66:80:de:fb:61:06:84:3c:e5:
4a:e3:9b:c3:3e:91:6d:1f:68:49:81:c0:c4:17:22:
9d:e2:a3:eb:d4:85:f7:d3:1c:df:1f:05:0b:9d:2b:
ab:57:43:33:06:b0:d6:c3:f7:60:ea:20:25:b3:81:
9c:16:d1:bd:1e:15:ba:69:0e:70:5c:b6:98:e0:38:
99:f8:1a:f4:b0:99:51:46:6d:0e:75:89:e1:24:96:
42:45:1a:ed:7f:99:05:3b:10:a7:2b:94:eb:bf:09:
d6:a3:51:d6:98:42:1a:d0:90:c9:37:d8:b9:4a:97:
43:b2:e5:cc:e0:5a:90:35:43:b2:cb:59:bd:60:a3:
32:43:3a:22:47:5e:20:5d:3e:1e:b9:61:26:fb:3a:
54:ba:1f:72:37:67:2c:ea:76:fc:bb:50:b5:04:14:
18:1c:bc:00:6e:4d:dc:e1:f8:6c:61:e6:8d:d5:a4:
a4:6b:b9:b3:aa:aa:0b:4b:2c:ca:60:b8:fc:10:90:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:17:B9:A3:F5:10:2A:5A:3A:14:B5:12:09:D4:22:4C:9D:9F:A6:4E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KRe5o_UQKlo6FLUSCdQiTJ2fpk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.90.88.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0/24
45.151.91.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.124.0/23
87.121.162.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.100.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
13:05:b9:44:ec:93:62:dc:01:a5:4c:e2:b0:ae:fc:34:32:98:
68:bb:f2:5f:c3:8d:a1:4e:d7:d7:7f:96:0d:f8:48:56:eb:80:
06:9e:05:e3:97:ea:c9:d1:3a:ce:f0:57:5e:32:84:28:4a:d0:
82:ed:57:e0:58:43:ff:c1:42:c0:b4:8d:79:1d:ef:b1:f9:7e:
4c:ee:bc:76:b8:f6:1c:3b:25:6e:7b:13:39:87:c4:f3:6a:6b:
1b:fe:66:69:ed:55:00:4d:db:f1:c0:23:08:27:04:33:07:c7:
97:9a:a1:22:ee:f5:70:9b:71:29:0b:d2:26:ab:cb:36:32:5d:
af:19:17:ee:34:e7:7f:84:6a:5d:05:9c:03:31:f0:32:e5:ec:
0d:63:23:78:b2:67:1c:a9:d5:66:08:6c:05:bd:70:cf:52:a5:
10:c6:b1:46:b6:a4:3f:0b:96:51:2b:73:af:98:fa:21:d4:dc:
07:39:ee:36:4a:76:56:8f:0e:15:96:f9:2c:ac:70:4a:00:10:
dc:38:0d:a5:56:13:32:2e:06:b0:71:4e:1f:c1:72:eb:3a:3e:
18:a7:ef:d2:4a:31:94:33:5a:e7:1f:90:79:bc:ba:7e:a4:55:
47:d7:62:65:70:5e:66:4e:66:ef:4c:ee:7d:4f:c0:3d:33:83:
73:5d:38:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 11:00:16 2024 by rpki-client on console-ams.rpki-client.org