Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TntGHg9Xp1dQQYMXCg0EkwvCI3U.roa
File: TntGHg9Xp1dQQYMXCg0EkwvCI3U.roa (raw, json)
Hash identifier: wPyFw+foxT7EZh1cD/x2CXdzEZGShjf1af5Md0qehJc=
Subject key identifier: 4E:7B:46:1E:0F:57:A7:57:50:41:83:17:0A:0D:04:93:0B:C2:23:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192F0CC6BBA50D1773DFDFC55714325B85F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TntGHg9Xp1dQQYMXCg0EkwvCI3U.roa
Signing time: Sun 03 Nov 2024 06:53:01 +0000
ROA not before: Sun 03 Nov 2024 06:53:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.90.88.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
87.121.165.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
93.123.84.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
141.98.1.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f0:cc:6b:ba:50:d1:77:3d:fd:fc:55:71:43:25:b8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 3 06:53:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e7b461e0f57a757504183170a0d04930bc22375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:b4:7e:d0:3f:d0:d8:c2:09:0b:60:49:45:
7b:d4:95:b1:ac:89:98:ea:d4:40:99:31:e9:a2:a2:
30:99:ab:bd:da:7b:42:f9:26:d5:97:b0:3e:33:21:
f4:dd:ef:dd:41:f8:92:2f:92:9f:82:76:4f:d5:83:
1f:65:f6:6e:0b:15:22:18:8d:54:66:ab:5e:00:f1:
1e:0e:06:7d:48:17:5e:18:74:fb:17:95:4d:c4:c0:
8c:8a:66:a8:0c:18:ac:d3:f7:2e:21:9f:80:e6:48:
eb:f6:e7:58:23:4c:a0:8c:d4:89:4b:a5:fd:0a:88:
e1:2e:de:51:31:40:d1:67:4e:f4:b8:4c:3f:22:a5:
68:cb:ed:71:39:eb:c4:68:f9:39:67:98:2b:14:13:
ba:17:3e:16:fa:82:ea:51:87:09:5f:88:5f:3b:63:
32:82:da:e6:64:51:53:76:ce:60:18:13:93:07:d0:
42:fa:7e:5c:6c:69:06:e8:de:e8:3a:de:de:6e:e4:
f0:e0:1b:93:96:b5:69:b8:ef:5d:94:c8:23:8e:64:
f9:97:8f:f7:34:48:6c:ad:c6:cc:9b:37:f5:3c:88:
98:6f:c4:a7:27:b5:ad:77:a7:07:4f:6b:a4:b5:65:
a5:05:42:83:d6:d6:4f:d4:91:53:06:4e:20:1c:cc:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:46:1E:0F:57:A7:57:50:41:83:17:0A:0D:04:93:0B:C2:23:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TntGHg9Xp1dQQYMXCg0EkwvCI3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.164.0/24
45.66.228.0/24
45.90.88.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0/24
45.151.91.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.121.45.0/24
87.121.124.0/23
87.121.162.0/24
87.121.165.0/24
91.92.240.0/20
92.119.196.0/23
93.123.84.0/24
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
141.98.1.0/24
147.78.100.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fe:59:60:64:19:0a:61:1f:6c:09:03:f1:af:25:c7:aa:11:
3d:1f:96:a2:b5:df:1b:9e:51:a9:82:9d:43:e2:a0:c0:7f:00:
a6:07:b9:9a:9e:71:e9:a0:81:58:b1:4f:f2:a5:3f:d0:1f:d6:
79:fc:9d:f4:d1:f9:51:1a:a2:8d:b7:20:c4:8f:2f:9d:c9:6f:
3c:80:1d:7e:77:16:b8:6d:4a:6e:2d:12:2f:3b:19:c4:af:dc:
6a:72:45:ee:87:5b:3f:52:17:5c:8f:9c:00:46:78:81:ab:71:
6d:b1:ef:b5:f2:e4:95:94:ab:de:92:76:4d:a2:4b:dd:c8:48:
6f:0a:ed:58:3a:9d:51:c3:96:b1:32:2a:cc:28:d0:fb:7d:b9:
68:0a:7a:84:13:de:20:13:e9:1f:0d:4a:05:b2:ae:98:1b:df:
94:53:b8:a8:0e:c3:5e:77:5c:1d:98:95:6e:53:9b:d7:50:5b:
e0:e1:b6:26:10:ca:25:3b:ab:5e:03:0e:33:3c:a6:0a:82:c5:
b9:1a:6e:0e:97:e7:c9:63:48:ad:0e:8d:3d:5a:80:3c:51:3b:
0d:f3:b1:20:fa:82:57:d6:d7:8e:e7:b0:f7:54:9b:09:9e:57:
6c:44:73:28:aa:10:a1:19:f9:a1:50:a8:21:16:55:66:84:b4:
4f:6c:7c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 19:06:54 2024 by rpki-client on console-ams.rpki-client.org