Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wdz0meYJgRUAD1ylzBpVphq4VFg.roa
File: Wdz0meYJgRUAD1ylzBpVphq4VFg.roa (raw, json)
Hash identifier: DjnVm3YiqK1MfEhyVqzxJQqmBxZwfOJALVQUGcWnf4o=
Subject key identifier: 59:DC:F4:99:E6:09:81:15:00:0F:5C:A5:CC:1A:55:A6:1A:B8:54:58
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019103CB5EB312BFBBDCDCA9D470AAECA71C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wdz0meYJgRUAD1ylzBpVphq4VFg.roa
Signing time: Tue 30 Jul 2024 13:19:05 +0000
ROA not before: Tue 30 Jul 2024 13:19:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 45.90.89.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 10:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:cb:5e:b3:12:bf:bb:dc:dc:a9:d4:70:aa:ec:a7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 30 13:19:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59dcf499e6098115000f5ca5cc1a55a61ab85458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:f5:2c:07:02:b5:bd:b7:0c:0b:20:55:7c:
32:bd:c5:4d:c1:56:73:0c:02:eb:0a:f7:94:19:b1:
d9:ca:56:9c:18:14:67:ea:f4:f8:e7:51:11:f9:bc:
68:a5:f3:a6:22:5d:58:38:d0:2c:8f:32:bf:6b:bb:
49:36:ee:e3:cf:9b:3f:46:c1:4e:67:df:4f:00:b5:
a5:6f:9e:06:17:57:2a:85:44:b1:3b:b3:f1:bf:ee:
2f:1e:17:05:8e:91:1d:ee:ea:9e:a5:44:12:38:be:
6e:52:c3:0c:50:39:72:1e:5a:2e:58:28:3d:04:4a:
84:9b:37:dd:0e:88:c7:0b:30:de:ee:92:3c:9d:3a:
f4:5d:8f:3f:c9:2c:1c:57:01:ce:b3:3b:96:81:57:
f1:30:1d:b1:35:80:b8:53:ab:74:f9:31:e9:89:fc:
a1:05:e5:95:40:03:3e:5b:90:73:25:e2:99:20:78:
f4:95:c4:fe:f9:c9:b8:fb:68:e2:d3:f1:e7:a7:57:
72:0e:9f:d6:05:f8:89:86:cf:ef:70:df:8c:86:4f:
29:94:be:ab:6b:2a:c9:d1:8e:8d:b5:b7:24:f3:a9:
fd:50:62:9c:ee:d7:bd:87:0c:9f:d2:d0:7e:33:cc:
2f:83:d9:7f:b1:88:01:fd:43:4e:2f:a9:42:73:e6:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DC:F4:99:E6:09:81:15:00:0F:5C:A5:CC:1A:55:A6:1A:B8:54:58
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wdz0meYJgRUAD1ylzBpVphq4VFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.89.0/24
82.115.211.0/24
84.21.173.0/24
185.222.160.0/24
185.222.162.0/24
Signature Algorithm: sha256WithRSAEncryption
31:31:24:57:26:69:3e:b1:c5:68:f1:fc:ab:26:d0:dd:08:3e:
4d:b4:d9:ab:71:d5:22:fd:fe:79:7c:db:71:f7:86:0a:35:b4:
0d:6e:58:7c:22:0e:79:19:07:86:e5:11:d6:71:25:bf:b6:e3:
3f:62:4c:6c:7c:75:1d:02:7c:b9:ec:3b:4b:98:3b:be:58:24:
80:ce:06:ce:3f:41:c6:71:c4:25:9d:56:f1:23:72:a2:14:54:
81:d7:4d:b3:ab:27:0e:fd:f9:f0:54:c1:41:2f:33:d2:09:3a:
3e:79:a6:23:74:00:3d:75:e2:99:04:79:e4:3d:ad:0e:73:ba:
e9:1f:c4:2f:64:34:ac:1a:02:2e:9c:4d:f3:24:37:fb:c8:3a:
6d:53:fd:f2:08:c2:a0:91:df:3d:6d:83:fb:30:40:60:6a:71:
cb:02:36:1f:b3:8c:ae:1f:35:61:b4:63:64:8c:88:30:59:5b:
80:22:74:68:1d:e0:bf:f1:bc:5f:34:7b:50:0e:97:5e:5d:ad:
98:f3:fe:88:83:46:8a:64:cd:77:66:7d:f4:53:02:61:30:e5:
5e:e4:93:47:73:34:60:a4:80:c3:90:27:17:42:a9:25:c8:ff:
cf:c5:a8:e3:f3:83:8a:32:2f:bc:fd:76:4c:90:66:26:87:11:
e2:8a:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 13:26:13 2024 by rpki-client on console-fra.rpki-client.org