Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YkXAugYHZmbo9lNKKELc5O4EeD0.roa
File: YkXAugYHZmbo9lNKKELc5O4EeD0.roa (raw, json)
Hash identifier: 86RgWnVS44lcIYoqf3SyKuy3e1a94Vcrf95jmKcMTDs=
Subject key identifier: 62:45:C0:BA:06:07:66:66:E8:F6:53:4A:28:42:DC:E4:EE:04:78:3D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191B7A3AD970C4F9A9027FE828A8A3A9F71
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YkXAugYHZmbo9lNKKELc5O4EeD0.roa
Signing time: Tue 03 Sep 2024 11:27:22 +0000
ROA not before: Tue 03 Sep 2024 11:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.88.90.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 08:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b7:a3:ad:97:0c:4f:9a:90:27:fe:82:8a:8a:3a:9f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 3 11:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6245c0ba06076666e8f6534a2842dce4ee04783d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:58:d0:fb:35:92:40:70:04:04:db:68:0b:
7d:ef:8e:eb:01:c9:0f:ae:eb:9f:36:b5:2a:9a:26:
1b:eb:a0:a2:3d:15:43:67:24:66:73:dd:4d:7a:da:
ce:1f:62:2c:61:2a:fa:5e:8e:c9:3c:93:16:f6:73:
a4:68:c1:32:74:2c:b0:ca:aa:61:5d:23:ac:48:76:
83:1d:f5:d6:ab:6e:09:97:b5:22:b8:95:5f:4d:d3:
a0:7f:1f:79:9a:52:93:07:91:7c:d4:5d:ab:fb:66:
05:d6:7f:3b:90:d9:ff:07:0e:dc:df:1b:32:b9:5d:
48:c0:da:8e:50:71:8a:23:96:18:45:5a:ef:37:4a:
b1:0a:3f:b1:30:71:62:07:62:a4:c7:5c:85:aa:98:
fc:2b:fe:50:f6:21:90:b7:07:ff:d5:94:85:77:bb:
aa:89:64:fa:10:c5:eb:1f:fe:36:6e:08:f2:7b:f4:
38:e4:ee:43:b1:f9:73:07:80:88:44:cb:78:e8:5b:
e6:75:4c:da:fe:98:60:6e:ec:4a:5d:9b:20:95:f6:
b4:24:b0:d9:70:48:25:37:5f:48:10:bc:68:74:43:
64:5c:bb:75:ac:5e:2c:c9:3f:01:cb:0a:65:c5:0b:
da:a4:ec:60:fa:8d:1c:82:55:99:1c:f1:0d:f5:15:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:45:C0:BA:06:07:66:66:E8:F6:53:4A:28:42:DC:E4:EE:04:78:3D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YkXAugYHZmbo9lNKKELc5O4EeD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.149.241.0/24
45.151.89.0/24
45.151.91.0/24
80.76.51.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
93.123.39.0/24
94.103.125.0/24
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:41:13:b4:34:7f:1c:2f:91:8d:36:0b:2e:9e:2c:97:c8:e0:
17:bf:4c:92:5e:b7:22:c1:9a:b2:ae:4f:a6:e7:a0:66:e2:52:
ab:cc:69:0f:d2:35:72:c6:c7:84:0e:e5:01:8d:f8:7a:1b:40:
db:ca:a9:56:96:b8:98:8e:8b:a3:0a:2a:c9:d5:30:cb:92:1b:
75:aa:87:16:37:d8:4f:5b:0c:ca:21:15:f8:0c:60:fc:a0:1f:
66:57:5f:ec:2b:7c:1a:9d:48:c7:3f:2d:6c:40:6e:82:81:57:
f9:3a:57:f9:5f:97:5e:02:55:6c:42:44:3e:e5:fa:58:5a:e6:
3a:c9:76:9f:b6:d0:7e:28:e2:7c:c8:17:83:af:29:f6:41:9e:
1a:c6:57:83:c4:dd:15:da:9a:b6:60:45:77:1c:e4:3d:98:4b:
9e:9d:ff:6a:9c:e5:1e:d5:de:c4:64:d2:9c:fa:cd:64:5a:71:
d0:19:50:bf:69:d9:5f:86:37:27:41:b1:a4:75:df:4b:68:54:
83:cd:40:44:5d:e4:60:2f:34:f0:21:26:5f:2c:11:10:11:b2:
b3:33:97:6a:4a:20:09:9a:0e:65:67:f7:b6:6c:4e:81:3d:1b:
4c:44:76:6b:04:0c:62:a3:23:57:8b:04:90:85:38:53:e6:40:
0e:63:c5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 10:53:20 2024 by rpki-client on console-ams.rpki-client.org