Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LE05UmlzHFnuV0RkOya0tp6VcmQ.roa
File: LE05UmlzHFnuV0RkOya0tp6VcmQ.roa (raw, json)
Hash identifier: Dj9NBIOnqPnfkvcvTN4yrpf84b2jHibQhhVT+rEaPRg=
Subject key identifier: 2C:4D:39:52:69:73:1C:59:EE:57:44:64:3B:26:B4:B6:9E:95:72:64
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192242AAC6D3F94873A04DD815C24C0A169
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LE05UmlzHFnuV0RkOya0tp6VcmQ.roa
Signing time: Tue 24 Sep 2024 13:13:49 +0000
ROA not before: Tue 24 Sep 2024 13:13:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 45.128.96.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
193.58.120.0/24 maxlen: 24
194.31.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 06:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:24:2a:ac:6d:3f:94:87:3a:04:dd:81:5c:24:c0:a1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 24 13:13:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c4d395269731c59ee5744643b26b4b69e957264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:a1:a5:40:a2:bf:e1:2c:2a:83:2c:02:c4:
e0:cc:5e:92:15:7a:76:ed:32:ea:b2:c5:4c:44:5a:
9a:a8:11:36:44:9a:d7:9a:25:3a:a3:f8:28:94:2f:
4a:9c:de:6c:8d:ca:07:99:ab:68:d3:92:ec:59:bf:
8e:b7:ac:fb:01:60:e9:a4:12:e0:b9:6e:27:c8:c0:
8a:3f:88:f9:a0:b8:6b:57:86:16:b0:19:bb:48:a3:
01:bb:c7:ae:c2:6e:01:94:d1:d1:ea:a2:95:bc:c1:
fd:57:8d:e0:9d:f4:a2:76:3f:df:5e:3b:0e:b5:c2:
71:af:07:d3:e9:41:08:a1:e5:a4:f9:a9:ba:c8:44:
d7:6e:5f:f6:2d:3f:bb:67:a5:2d:2b:33:e4:72:97:
1b:53:e0:44:c7:9c:17:96:5d:46:07:58:6e:33:81:
16:39:14:40:88:ce:9f:eb:9a:31:66:54:71:a4:fe:
14:c9:3f:55:87:63:cc:01:4f:da:15:52:f5:92:46:
12:dd:31:1a:c2:a1:82:b7:ba:7a:ea:78:b4:5e:30:
ae:9d:fc:05:50:23:b9:64:36:08:0f:2d:f5:3c:1e:
22:ae:84:fb:2d:cf:8e:47:90:b9:83:bf:b1:c9:5f:
bc:8a:86:c8:f2:76:94:66:2d:f5:13:4f:fa:fa:b3:
59:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4D:39:52:69:73:1C:59:EE:57:44:64:3B:26:B4:B6:9E:95:72:64
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LE05UmlzHFnuV0RkOya0tp6VcmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.96.0/24
84.54.51.0/24
87.121.38.0/24
87.121.45.0/24
87.121.58.0/24
91.92.16.0/24
94.103.127.0/24
94.156.2.0/24
94.156.79.0/24
94.156.113.0/24
141.98.4.0/24
193.58.120.0/24
194.31.204.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ca:76:a4:ac:1e:f6:96:07:16:e2:17:be:85:c3:14:de:61:
f3:9e:97:a1:0c:12:a8:c4:b3:e1:8d:11:c0:0e:ea:e7:2b:76:
f0:3c:31:9d:10:10:26:8a:54:4c:0b:52:03:71:99:50:f9:89:
83:31:48:c0:0e:5b:2b:82:b4:31:5a:f4:1a:42:48:51:13:c7:
dc:c2:76:64:0a:16:da:bf:0a:3d:58:d1:ad:ce:49:a6:ba:84:
02:8a:41:96:95:1e:b5:c0:7a:4f:74:48:77:53:f9:0e:34:0c:
9e:f8:2a:fd:d8:6f:b7:af:c0:a9:08:4d:01:6c:8e:81:dc:4e:
18:c6:49:92:ad:36:0c:c8:55:5c:cb:9e:74:8c:1e:69:22:30:
82:19:08:11:d9:93:77:4e:7a:18:1e:ca:b7:10:4f:09:8a:35:
fe:91:aa:da:cd:e4:34:05:ab:35:27:69:cb:e6:4d:9c:48:66:
20:81:be:d1:e7:eb:a6:39:a5:e0:86:a4:5b:e8:be:77:53:db:
e8:9c:8a:5e:1e:e1:fd:4f:22:b2:6f:90:12:be:cf:d8:48:5b:
e3:10:71:37:62:88:04:b7:69:84:e0:f1:f1:0d:88:1c:aa:ca:
4b:ad:62:7c:3c:a5:e8:4b:fa:81:98:82:a6:e6:47:d5:f6:f2:
c1:b4:fe:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 08:13:21 2024 by rpki-client on console-fra.rpki-client.org