Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/REMuXpyRWy_fH8mYDbqFxoYO4kc.roa
File: REMuXpyRWy_fH8mYDbqFxoYO4kc.roa (raw, json)
Hash identifier: U2q/htikHjBWnM5DRAFtahb0W1eC+4l6uM+gHl1tUzg=
Subject key identifier: 44:43:2E:5E:9C:91:5B:2F:DF:1F:C9:98:0D:BA:85:C6:86:0E:E2:47
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192C92D8BC9C6DBDEF4EBD38A217E55AA81
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/REMuXpyRWy_fH8mYDbqFxoYO4kc.roa
Signing time: Sat 26 Oct 2024 14:14:18 +0000
ROA not before: Sat 26 Oct 2024 14:14:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214238
IP address blocks: 5.253.56.0/24 maxlen: 24
5.253.57.0/24 maxlen: 24
5.253.58.0/24 maxlen: 24
31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.95.0.0/24 maxlen: 24
45.95.2.0/24 maxlen: 24
45.128.99.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
93.123.31.0/24 maxlen: 24
94.125.102.0/24 maxlen: 24
94.125.103.0/24 maxlen: 24
185.207.14.0/24 maxlen: 24
185.207.15.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.8.184.0/24 maxlen: 24
193.8.186.0/24 maxlen: 24
193.8.187.0/24 maxlen: 24
193.148.56.0/24 maxlen: 24
193.148.57.0/24 maxlen: 24
193.148.58.0/24 maxlen: 24
193.148.59.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Oct 2024 06:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c9:2d:8b:c9:c6:db:de:f4:eb:d3:8a:21:7e:55:aa:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 26 14:14:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44432e5e9c915b2fdf1fc9980dba85c6860ee247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:5d:f0:d9:8a:36:16:80:75:11:09:e8:3c:
24:58:eb:d7:0d:6e:d1:3d:fd:f4:11:ed:0c:c1:e7:
fc:bf:57:36:21:32:4c:80:3b:5a:7c:15:f3:ac:ef:
de:6d:fc:4b:bb:d5:be:ba:e5:47:72:24:9c:39:fe:
a7:c4:3d:6d:9c:cd:fc:26:59:b3:ac:8d:cf:df:05:
94:c9:ae:fe:a4:5e:64:84:0b:91:1a:88:dd:ce:89:
6c:79:10:08:f0:51:16:ff:64:25:52:58:94:ee:56:
1b:cb:33:6b:32:31:4e:8e:0b:46:33:a5:7d:6d:4b:
62:5a:95:1c:63:39:e4:e7:2e:92:14:09:ff:5d:f7:
9f:1d:36:19:83:dc:a2:30:ea:58:81:82:79:5b:1e:
db:10:3a:f4:ee:b3:3c:28:a2:6a:5f:3c:b9:7c:b4:
ad:f5:a2:4a:1b:8e:eb:e8:90:fd:46:ca:f8:16:57:
02:e7:03:7f:9a:f8:4c:af:23:a1:5d:9d:0c:6e:7a:
61:1f:f6:20:4b:78:fd:18:84:80:58:06:67:eb:35:
2d:ab:40:e0:28:77:4b:cb:58:88:0e:f5:02:67:e1:
bc:35:3c:f2:2e:d2:46:19:b3:9f:8d:c4:66:f1:5b:
7a:a9:28:fd:2c:10:9a:2a:7e:e5:5a:f1:17:de:0a:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:43:2E:5E:9C:91:5B:2F:DF:1F:C9:98:0D:BA:85:C6:86:0E:E2:47
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/REMuXpyRWy_fH8mYDbqFxoYO4kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0-5.253.58.255
31.169.124.0/22
45.88.66.0/24
45.95.0.0/24
45.95.2.0/24
45.128.99.0/24
45.149.235.0/24
83.143.113.0/24
85.208.139.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
93.123.31.0/24
94.125.102.0/23
185.207.14.0/23
185.252.179.0/24
193.8.184.0/24
193.8.186.0/23
193.148.56.0/22
193.168.199.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:1a:c4:95:4a:43:d0:99:e5:93:2e:6d:7a:7d:99:70:1d:29:
c7:74:89:a5:f8:4e:21:1a:64:d9:26:9a:74:c7:5f:0d:37:a8:
ec:68:4c:2c:bc:90:b0:70:e2:02:c6:b7:d7:20:c8:00:ac:c5:
68:d8:8d:91:42:3f:54:68:8c:e1:16:e3:75:f9:3b:51:c1:23:
62:85:16:ae:16:13:86:30:7a:ea:cc:4b:e4:d5:e1:de:81:63:
37:06:69:53:a0:a9:2b:fb:4a:fd:8e:87:e0:da:1c:bd:b1:e3:
20:30:90:ca:25:9e:be:df:42:65:80:9d:9c:34:07:d7:e8:b7:
24:91:11:5c:bf:6a:ef:1d:cf:1a:46:3c:a5:91:25:b0:cc:3a:
6d:45:e0:95:03:7c:bc:6f:3f:0a:4a:e6:00:79:61:56:8f:d2:
03:65:8f:6d:19:13:6a:09:b9:b6:84:14:8f:50:9f:3d:5c:46:
50:03:d5:2f:6c:39:6b:36:52:62:62:ac:62:e7:96:75:46:8d:
04:69:e7:af:b4:b8:62:97:ed:11:8e:96:2e:5f:a0:84:05:08:
db:18:b3:a6:20:dd:49:68:b6:23:c6:f3:6e:4f:61:1e:bb:56:
5e:4a:d9:13:c8:00:d4:55:8a:57:e1:f5:0f:9e:cb:b8:c3:62:
4d:af:2d:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 27 08:33:22 2024 by rpki-client on console-ams.rpki-client.org