Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LeAPlROFWJgD643fklskUk_rFnA.roa
File: LeAPlROFWJgD643fklskUk_rFnA.roa (raw, json)
Hash identifier: 1Oz/yMvcR9QrVbZUvE3IF7DsLQtklbPVjez/Y3JcnNs=
Subject key identifier: 2D:E0:0F:95:13:85:58:98:03:EB:8D:DF:92:5B:24:52:4F:EB:16:70
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019208E4DBC2FC584B29EAEC6738B07EE16B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LeAPlROFWJgD643fklskUk_rFnA.roa
Signing time: Thu 19 Sep 2024 06:07:49 +0000
ROA not before: Thu 19 Sep 2024 06:07:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 31.13.224.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.166.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 07:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:08:e4:db:c2:fc:58:4b:29:ea:ec:67:38:b0:7e:e1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 19 06:07:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2de00f951385589803eb8ddf925b24524feb1670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:91:33:e5:46:f7:31:52:ce:9e:70:d1:e5:26:
40:84:37:a9:90:9c:9b:be:07:a2:b8:52:ef:9f:89:
20:49:30:4f:87:44:4e:3f:d3:e1:b2:75:df:ec:3c:
3d:1f:ed:32:5b:5b:c9:11:60:fb:24:77:67:84:1a:
b8:c2:5f:af:ef:8a:83:c3:f1:94:fd:43:1f:95:d6:
47:5d:b1:d9:79:9a:f3:42:d2:b4:59:ef:1c:cb:7b:
df:b3:de:d7:3b:ae:ec:39:ea:11:df:07:3a:d6:25:
02:4c:f8:c9:4e:76:0e:74:88:ab:09:92:b1:3a:70:
21:de:ac:f7:37:9e:3d:b0:1e:c7:33:8e:c1:1c:cd:
2d:5a:76:17:0d:a6:8f:c0:9c:92:df:d1:3d:1f:21:
8c:ce:ea:7e:73:e0:80:b1:c3:76:cd:51:4c:4a:e0:
e6:4a:b6:21:0d:ac:55:7f:05:a8:fe:09:a2:6c:18:
bd:ea:f6:b5:78:6c:d7:ba:dd:af:96:5e:61:d9:d3:
b3:52:5b:17:75:79:e5:f1:7d:21:6a:c6:ce:b2:9d:
c7:18:12:82:94:f3:71:c2:1f:de:c1:5c:31:6b:23:
b4:ea:2b:4b:47:5f:51:87:5b:36:db:ce:e3:ba:02:
53:4d:3b:6b:1d:74:df:de:f3:fc:3c:de:0e:04:a5:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E0:0F:95:13:85:58:98:03:EB:8D:DF:92:5B:24:52:4F:EB:16:70
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LeAPlROFWJgD643fklskUk_rFnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
45.9.156.0/24
45.66.228.0/24
45.88.88.0/24
45.149.241.0/24
45.151.89.0/24
45.151.91.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.86.0/24
92.119.196.0/23
93.123.39.0/24
93.123.109.0/24
94.154.160.0/22
94.156.11.0/24
94.156.104.0/23
94.156.166.0/23
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
39:3a:02:2b:28:ba:5d:e9:1e:ea:89:5e:0e:00:a8:7f:a3:d1:
c4:8b:bf:63:93:46:3a:cf:72:36:12:7a:9f:88:d2:4c:3d:df:
35:04:3f:ce:9f:78:1a:b6:dd:47:31:53:63:cb:b6:26:56:72:
3c:6a:d7:71:04:a4:6b:dd:e0:da:6c:0e:39:90:ce:3a:6f:c4:
f0:e8:68:5f:85:d3:aa:5b:73:2d:c3:2e:b4:0e:55:a1:1b:e8:
bc:36:0d:3d:f7:8a:b3:9d:2d:32:09:97:e6:92:05:59:cf:61:
2d:62:f1:5b:fe:bd:79:4f:24:d5:f0:84:f4:a5:fa:0b:80:41:
83:3d:ae:14:16:1d:bf:28:11:9a:29:c7:92:ca:46:d6:80:83:
f7:08:cb:ad:a0:4d:d0:13:38:72:ff:3d:e9:b6:4b:6d:24:a6:
dd:cf:55:8e:c2:47:9e:44:6e:6b:31:30:bd:ad:77:cb:6c:00:
37:15:2b:7b:11:14:5c:69:88:fb:64:01:e5:00:fa:66:f1:77:
c6:d7:b6:a9:4b:d3:74:5e:45:8d:c6:74:5d:7d:84:37:1c:6c:
d5:c4:a4:87:c5:e3:02:54:0c:8a:45:b6:3a:be:ce:6b:ec:76:
25:9d:3d:ad:da:cf:e1:c4:e1:3e:8a:a5:15:c4:f5:71:94:9f:
5e:4f:b5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 09:33:21 2024 by rpki-client on console-fra.rpki-client.org