Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SyC9AzBm8ILSUk1wMTl8_57uv80.roa
File: SyC9AzBm8ILSUk1wMTl8_57uv80.roa (raw, json)
Hash identifier: lc5zT1qgIvJxJ4mWUp8cgoqHxe/AJ2WEBoMJ8VUQcyQ=
Subject key identifier: 4B:20:BD:03:30:66:F0:82:D2:52:4D:70:31:39:7C:FF:9E:EE:BF:CD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E615E2C3DCAF2AA084AF97DCDE523897C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SyC9AzBm8ILSUk1wMTl8_57uv80.roa
Signing time: Thu 21 Mar 2024 14:15:45 +0000
ROA not before: Thu 21 Mar 2024 14:15:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147186
IP address blocks: 45.129.86.0/23 maxlen: 24
82.115.208.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 08:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:5e:2c:3d:ca:f2:aa:08:4a:f9:7d:cd:e5:23:89:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 21 14:15:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b20bd033066f082d2524d7031397cff9eeebfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:b9:42:41:5b:01:99:4a:3c:80:2a:98:78:
19:7c:f6:9f:2f:26:6c:52:cc:71:74:32:28:55:bd:
fa:87:ab:11:39:4f:75:c9:df:5c:5b:b3:d6:9a:e6:
3f:d7:1d:18:60:55:49:b6:26:61:06:33:71:fd:e6:
7e:ce:5c:34:5e:48:4a:e9:d8:c9:b1:6b:14:c2:99:
db:63:57:3a:6e:a3:d4:b6:7a:90:53:bf:94:0e:0d:
4f:49:8b:66:43:a6:c4:e8:b0:ec:2a:8c:99:f5:a9:
c6:64:bb:66:aa:1f:b7:a1:d7:18:ea:49:7c:4a:d1:
0d:09:28:af:27:26:ca:63:2c:88:5f:ea:3f:c9:93:
93:21:a2:ed:53:fb:7d:5a:93:ad:b5:16:87:da:09:
98:a0:28:c6:40:38:0b:6d:0d:76:25:93:39:f2:00:
ba:3d:df:61:1e:ab:19:f0:15:1b:11:4f:96:ff:47:
06:fd:ef:01:94:75:d8:59:92:51:65:9b:48:bd:d4:
b0:d4:bb:43:fc:7c:56:83:6b:a5:fb:20:54:7e:e7:
af:eb:9f:3b:be:6f:83:ef:98:1c:01:15:aa:84:82:
53:16:49:e5:fb:0d:54:24:b7:e0:d5:02:62:60:1b:
72:c2:02:ec:9b:cd:35:ce:04:ba:42:f9:a7:60:78:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:20:BD:03:30:66:F0:82:D2:52:4D:70:31:39:7C:FF:9E:EE:BF:CD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SyC9AzBm8ILSUk1wMTl8_57uv80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.86.0/23
82.115.208.0/24
94.154.161.0/24
171.22.31.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e3:50:c9:0a:45:9d:04:d6:26:34:98:28:55:0c:5f:82:b9:
30:10:86:d0:2d:20:c8:cf:cb:c4:22:5e:da:07:00:a8:7b:57:
15:c7:ff:1c:9d:38:87:af:66:3c:6e:4b:18:c4:21:15:67:34:
00:02:b2:4a:5d:00:b4:d4:6d:1c:fa:48:6c:ba:fe:f6:2e:8e:
e1:8d:ba:d8:69:41:3c:15:6e:10:05:29:e5:7a:9d:50:90:18:
cd:af:d3:1b:59:fd:fe:78:7c:bb:49:1a:42:40:b5:5e:e7:40:
19:f1:55:7d:38:0f:40:92:dc:ff:3c:e5:47:ae:38:3f:39:20:
44:4f:13:7a:55:e4:3f:a1:ec:8e:82:f3:23:a4:d6:2d:14:1e:
4b:67:8b:12:e4:39:9e:c4:64:8b:95:49:52:1d:e1:5e:25:d0:
c9:0f:90:af:85:65:c4:b3:f1:a7:52:7f:b6:ef:50:a8:ea:2d:
2a:ec:ee:ac:68:a9:83:c7:6f:7f:f4:74:6c:84:ae:ea:ff:39:
24:d1:09:1f:ff:45:e7:88:f9:cb:79:df:b5:32:b4:7c:1e:ad:
86:fb:88:d3:b0:2f:f6:da:69:89:52:d2:4c:9a:bb:21:60:ae:
9c:f4:8d:b0:2d:dd:ce:ff:ed:76:08:09:fa:87:27:36:c9:2a:
da:b5:ce:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 12:45:36 2024 by rpki-client on console-ams.rpki-client.org