Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UdzhgsGr9AiNDMA5Kk--aRtqeC8.roa
File: UdzhgsGr9AiNDMA5Kk--aRtqeC8.roa (raw, json)
Hash identifier: J4UHuuiwLpEsRQcQoCcytJdxgCXyrfR4cFwYTmVFOZc=
Subject key identifier: 51:DC:E1:82:C1:AB:F4:08:8D:0C:C0:39:2A:4F:BE:69:1B:6A:78:2F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190FD0E839D450F137D2488845DFC2986F8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UdzhgsGr9AiNDMA5Kk--aRtqeC8.roa
Signing time: Mon 29 Jul 2024 05:55:05 +0000
ROA not before: Mon 29 Jul 2024 05:55:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.58.95.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.35.18.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
195.178.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 07:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:0e:83:9d:45:0f:13:7d:24:88:84:5d:fc:29:86:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 29 05:55:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51dce182c1abf4088d0cc0392a4fbe691b6a782f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:af:10:ce:0a:37:68:ad:16:a8:7f:ee:d5:
b6:91:39:67:c6:53:f1:2e:3b:3b:e9:2f:ce:d2:3c:
9e:0a:b6:df:51:f6:97:5e:f1:46:32:35:a5:58:09:
ed:d5:9c:75:10:96:4a:57:ef:36:17:da:d1:b9:06:
a3:cd:69:7a:68:d1:bf:d2:db:29:34:c7:32:f6:61:
84:5e:40:63:7c:86:3d:a7:3e:f4:36:24:7a:7f:d3:
74:4e:0a:41:6f:a8:33:10:28:50:0a:ff:4f:ea:10:
68:41:54:d1:19:71:e6:89:92:5b:a2:c6:ca:a6:ec:
d7:54:71:de:9e:eb:54:66:17:40:03:e1:93:63:1b:
4c:ec:6a:6d:68:40:10:97:d5:d7:4c:a8:60:be:62:
08:c0:78:62:f4:f5:df:04:b0:4b:ae:fe:65:06:72:
88:98:b0:21:b6:23:ca:76:c5:86:d2:65:d7:74:c0:
1c:90:d9:83:ca:60:91:eb:d7:12:38:b6:26:db:60:
e2:77:3f:94:6a:7a:72:25:55:8c:38:1e:97:58:a9:
03:4f:b9:b8:da:1d:7e:50:90:bb:f4:94:b2:53:fc:
5a:ed:22:05:82:0c:c0:66:20:e9:e0:49:96:58:24:
e4:dc:f8:e9:2f:ce:44:df:7a:12:d2:f9:a7:d2:72:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DC:E1:82:C1:AB:F4:08:8D:0C:C0:39:2A:4F:BE:69:1B:6A:78:2F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UdzhgsGr9AiNDMA5Kk--aRtqeC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
45.8.92.0/24
45.88.90.0/24
45.128.96.0/24
45.128.232.0/24
45.144.154.0/24
45.151.89.0/24
80.76.51.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
84.54.51.0/24
85.31.47.0/24
87.120.87.0/24
87.121.38.0/24
87.121.45.0/24
87.121.58.0/24
87.121.69.0/24
87.121.221.0/24
91.92.16.0/24
92.119.196.0/23
93.123.24.0/24
93.123.39.0/24
94.103.124.0/23
94.154.160.0/22
94.156.2.0/24
94.156.8.0/24
94.156.10.0/23
94.156.79.0/24
141.98.1.0/24
141.98.4.0/24
147.78.102.0/23
171.22.72.0/22
178.215.224.0/24
185.216.70.0/24
185.216.84.0/22
185.218.84.0/22
193.35.18.0/24
193.37.41.0/24
193.37.44.0/24
193.222.96.0/24
194.48.251.0/24
194.55.224.0/24
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
63:1f:af:f8:1e:df:a0:46:69:60:fa:a5:89:e2:0d:da:c0:10:
76:4c:aa:fe:58:b0:dc:10:55:36:31:b7:7b:46:11:9c:38:5e:
fc:8e:fb:b8:fc:fb:d7:6a:9f:6b:fe:23:5a:36:59:bd:92:0d:
a7:7d:8b:39:cb:cb:67:f5:a4:0b:18:fa:2e:ed:54:c6:c3:5a:
15:3f:9f:d0:b4:57:93:08:b4:61:6f:40:be:3c:2d:8c:e7:32:
05:12:a2:90:59:28:cb:69:65:d5:ad:03:5d:ae:83:a7:bf:dc:
1b:ce:bf:d6:3c:f1:64:34:2d:b2:6c:2b:84:d2:75:39:8b:ea:
81:8e:c0:04:5b:88:3f:3e:ab:34:2b:ba:65:7a:d2:80:e5:91:
60:3a:5a:50:ac:6a:fb:de:7f:83:c7:37:61:6c:24:bf:e7:32:
71:b0:c1:e3:db:72:c3:72:49:88:d1:c5:b0:ea:82:1e:df:f9:
8b:ba:5c:fd:61:05:70:af:7e:82:35:73:46:10:95:a1:16:3b:
34:32:51:1d:87:a6:1e:03:f8:47:04:be:fb:98:e7:a3:f0:51:
5c:07:c9:a3:d4:f0:22:0b:57:52:62:c5:92:24:76:33:38:8b:
03:a9:2e:d3:db:9d:68:aa:c0:ee:97:3b:ef:bf:4c:5e:31:2f:
96:80:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 09:31:53 2024 by rpki-client on console-ams.rpki-client.org