Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UrMfpMAtZapmntGxKBwiDpe_U3o.roa
File: UrMfpMAtZapmntGxKBwiDpe_U3o.roa (raw, json)
Hash identifier: 7EF8MX2gpTljH8/vKVShAT8Rnmn9OKlSXGTLxj8lzbo=
Subject key identifier: 52:B3:1F:A4:C0:2D:65:AA:66:9E:D1:B1:28:1C:22:0E:97:BF:53:7A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DCC07A149AB68468C87B3B9C8CAB35CDD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UrMfpMAtZapmntGxKBwiDpe_U3o.roa
Signing time: Wed 21 Feb 2024 14:17:48 +0000
ROA not before: Wed 21 Feb 2024 14:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.9.156.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
95.214.24.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.173.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cc:07:a1:49:ab:68:46:8c:87:b3:b9:c8:ca:b3:5c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 21 14:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52b31fa4c02d65aa669ed1b1281c220e97bf537a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:18:12:a0:ca:1e:2d:47:e3:e7:fa:62:4d:
1a:71:75:d6:01:96:2c:26:10:4d:10:33:40:9b:33:
8b:6d:a0:24:c5:a2:18:2e:bd:da:eb:2e:ae:12:d5:
a1:f5:d0:3b:20:19:a0:c9:3d:55:8a:57:5f:ba:d3:
45:78:e7:5d:de:cb:d1:4c:fc:87:88:94:f4:37:40:
04:a7:00:1e:92:20:9f:07:48:ec:0e:58:0e:77:20:
f8:4a:67:62:2e:73:dc:f8:86:52:f6:a4:2d:31:40:
2c:f3:9b:eb:a4:a5:0b:bc:66:92:d1:b2:dc:7f:6d:
50:31:3b:10:70:7c:42:32:e4:6c:51:7f:98:c4:54:
93:51:e8:1e:c6:75:bc:02:3e:3c:70:fd:81:32:41:
fc:6b:d6:40:00:22:f5:da:82:ac:2f:d9:2a:fd:db:
46:0d:36:fd:ad:1e:9c:58:55:3f:49:dd:cb:4b:c0:
b5:05:2a:90:10:95:ff:01:32:c3:dc:15:6c:da:0d:
5b:08:f2:21:da:6a:dc:f1:ac:0f:cf:f6:c5:c6:90:
05:42:c0:45:b1:1e:54:3d:84:fb:82:4b:b4:4a:a3:
bf:a1:7f:cd:17:84:ef:52:f1:7e:98:3c:83:94:b4:
9d:55:92:0d:ee:9b:fe:13:2b:23:7d:2d:ab:87:a7:
63:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:1F:A4:C0:2D:65:AA:66:9E:D1:B1:28:1C:22:0E:97:BF:53:7A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UrMfpMAtZapmntGxKBwiDpe_U3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.84.89.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.239.0/24
95.214.24.0/24
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.246.223.0/24
185.252.176.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
64:57:e4:4d:9a:6b:26:d2:fc:85:05:03:d7:45:66:b7:8c:b3:
9d:21:37:c2:b1:e8:6d:f0:af:f8:28:38:d1:23:46:f2:69:d9:
ad:5a:98:f2:0a:dc:25:a8:de:c4:57:f3:83:7b:43:28:2a:e6:
83:c1:ac:9c:eb:86:96:92:ee:92:65:4e:ea:0c:09:db:2b:45:
64:ff:4d:bb:00:64:91:a6:06:e3:d0:01:0f:b7:f8:15:82:6e:
68:72:54:58:9b:1c:d3:a3:cd:71:79:09:40:5b:68:4f:75:09:
1a:50:76:d9:33:85:a3:bb:21:a4:51:0d:d6:2c:e1:d1:e3:2e:
10:bb:6f:0b:46:f0:c7:f4:d6:46:78:a9:48:06:e1:5e:ff:1e:
88:4f:dc:49:da:e1:61:96:b2:47:6b:b7:fc:f4:f8:25:04:6a:
1a:fb:ff:60:8f:1f:38:8b:0f:3e:0f:24:8e:c4:69:52:2f:b8:
8f:31:92:9f:d5:a5:18:33:39:bb:86:57:21:bc:41:b8:e7:c8:
3f:a6:dc:d7:2c:6e:37:16:ca:20:31:2c:25:2f:8e:0b:52:97:
87:1e:30:23:10:0e:fd:03:90:03:3d:76:ce:f1:5b:84:e6:20:
8a:fa:7e:9b:f7:c1:a2:ed:d1:d9:cf:62:20:3d:b5:ef:d4:9f:
90:a2:fe:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 10:11:34 2024 by rpki-client on console-ams.rpki-client.org