Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TJtY-XKi9oTk1fuH8vQlZAYxEQg.roa
File: TJtY-XKi9oTk1fuH8vQlZAYxEQg.roa (raw, json)
Hash identifier: pBYwCjAYklClD8bZHj+CnkZtFCzz/uvPEeUkkdPYx1M=
Subject key identifier: 4C:9B:58:F9:72:A2:F6:84:E4:D5:FB:87:F2:F4:25:64:06:31:11:08
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019367A55B705E61229B5152A5041D7144BE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TJtY-XKi9oTk1fuH8vQlZAYxEQg.roa
Signing time: Tue 26 Nov 2024 08:45:10 +0000
ROA not before: Tue 26 Nov 2024 08:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.186.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
94.156.179.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Dec 2024 16:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:a5:5b:70:5e:61:22:9b:51:52:a5:04:1d:71:44:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 26 08:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c9b58f972a2f684e4d5fb87f2f4256406311108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:d2:da:93:5e:33:6f:5c:d7:ca:11:4a:13:
e2:1f:bc:d2:df:43:31:7d:cb:75:49:9b:45:35:a9:
9d:68:5f:e0:f1:bc:40:02:35:14:ea:1c:99:e5:38:
64:82:ae:1f:08:81:92:26:e6:5e:aa:a4:e2:f7:c1:
76:91:bc:4a:53:28:6e:77:24:61:18:91:42:0c:26:
df:1d:64:a9:c9:ec:22:82:7e:29:a6:1a:09:d4:06:
06:12:b3:29:1e:db:12:8f:9d:f8:6d:54:dd:98:07:
58:7b:49:5d:7a:3e:19:ca:a1:7a:f7:92:ea:5c:08:
f9:d5:fc:d9:d7:38:53:4e:e6:ec:9e:fb:48:59:bc:
fd:2b:fb:1c:96:e7:f8:3c:1f:9e:ee:50:ff:59:be:
3e:0a:f6:53:96:48:17:d8:cd:49:15:d8:4e:44:a6:
7b:d0:48:2e:1a:1e:ed:43:18:45:99:62:1a:06:4f:
69:b7:1f:19:dc:1f:07:79:eb:39:ee:d6:ac:84:33:
fa:ea:b6:df:04:44:6c:ff:99:81:d5:aa:81:95:81:
4f:3a:17:58:07:34:40:19:e0:e2:31:29:8b:b2:ca:
f0:96:7e:ee:c0:e8:b7:a1:9e:8a:d3:aa:02:2a:70:
1a:fe:35:6d:79:0a:2d:c2:b6:a8:6b:d0:25:1c:65:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9B:58:F9:72:A2:F6:84:E4:D5:FB:87:F2:F4:25:64:06:31:11:08
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TJtY-XKi9oTk1fuH8vQlZAYxEQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
45.133.251.0/24
83.143.112.0/24
84.21.173.0/24
87.120.165.0-87.120.166.255
87.120.186.0/24
93.123.84.0/24
94.156.179.0/24
171.22.31.0/24
185.246.223.0/24
193.58.121.0/24
193.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:33:de:61:b6:4e:26:81:8d:24:35:76:f2:ac:63:f2:33:6f:
4d:21:6b:a8:9e:64:0c:91:81:8b:b0:8f:37:d3:d2:d2:e9:d2:
89:5a:d3:4f:de:fc:6b:57:79:ae:43:18:28:ff:b8:bc:d6:94:
0b:12:79:13:5c:cb:57:b2:8e:b7:d5:05:c9:be:f8:94:75:99:
a9:9e:34:97:7d:57:ba:72:f6:7e:11:0a:6f:b5:72:02:aa:22:
88:fb:96:28:81:ce:24:f5:58:8b:b3:f5:d3:f8:0a:3a:4d:c1:
6f:f3:7c:1a:0b:0b:cd:00:40:88:b9:9b:d3:0c:7f:4f:76:34:
a5:c2:62:6e:57:6a:85:7f:cd:bc:cd:2c:de:d3:58:1e:60:0e:
3b:a5:bb:e3:61:46:58:4f:f5:ec:25:b5:d5:a1:b2:45:9f:dd:
b3:ff:6e:bb:3b:87:39:c7:5e:7e:85:38:f2:95:84:e5:72:4a:
ef:11:17:3d:e5:01:3c:c7:62:68:3d:23:2e:b4:2d:3f:65:b2:
ee:d0:ee:56:d5:5d:6b:bc:cd:10:98:e2:a8:d0:2e:61:6a:8f:
18:c7:9e:bc:77:3c:c8:95:3a:24:0e:ac:74:59:6f:9c:08:7e:
a1:56:ae:e0:53:e8:34:b6:6a:94:bc:06:e2:9f:4b:9b:18:8a:
49:07:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:48:11 2025 by rpki-client