Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Z_SYo0ga_prmqSs6h7Fy-oK_75o.roa
File: Z_SYo0ga_prmqSs6h7Fy-oK_75o.roa (raw, json)
Hash identifier: xzxI/5qkxLNePBV3xUDXjMak91o7kaSz535nqBGLoxA=
Subject key identifier: 67:F4:98:A3:48:1A:FE:9A:E6:A9:2B:3A:87:B1:72:FA:82:BF:EF:9A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019294C8ACB9EE15F1421DB64E30B17941F9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Z_SYo0ga_prmqSs6h7Fy-oK_75o.roa
Signing time: Wed 16 Oct 2024 10:03:52 +0000
ROA not before: Wed 16 Oct 2024 10:03:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.12.253.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 10:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:c8:ac:b9:ee:15:f1:42:1d:b6:4e:30:b1:79:41:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 16 10:03:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f498a3481afe9ae6a92b3a87b172fa82bfef9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:ba:a7:29:e5:4f:07:e1:84:c3:8f:47:8b:
34:78:15:fa:fd:03:a1:4a:24:37:6e:2b:33:10:bc:
9e:ff:ef:62:84:68:75:9c:ec:6a:01:c4:60:40:b1:
2e:4e:be:1b:6f:f4:14:d5:e4:44:88:0e:b7:39:f3:
a8:b1:c0:f7:ca:b3:d3:67:88:d2:e8:2a:65:82:fa:
9f:c4:16:ca:e8:d1:3d:1b:f1:78:dd:3b:f5:69:c3:
e0:9f:e3:c5:cc:22:a3:5c:8f:8c:ea:ed:01:ec:bf:
3f:66:d0:8d:6a:c1:0e:cf:93:67:b6:d3:3c:41:63:
d5:1e:b6:f7:3f:f1:06:6b:ef:91:76:78:5a:b7:19:
66:6d:9a:d6:3d:0a:b7:97:74:85:38:e9:b1:6a:3f:
90:8c:a7:a1:59:be:6b:f6:3a:aa:ab:b0:84:66:00:
07:f8:f7:fd:d7:19:02:75:54:62:3b:b0:f2:63:33:
44:e6:b6:72:48:6b:b8:b5:95:7c:65:ea:4b:11:f6:
01:fc:1a:c0:73:48:70:e0:3a:88:31:1b:d0:2a:25:
70:d5:d0:a0:b4:4e:4e:83:00:4d:48:5a:f4:99:c9:
06:ab:e5:03:ca:c1:1e:3d:77:25:39:c8:96:62:34:
92:04:f9:6c:af:f8:75:4c:95:c0:b7:0f:70:c5:e4:
b7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F4:98:A3:48:1A:FE:9A:E6:A9:2B:3A:87:B1:72:FA:82:BF:EF:9A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Z_SYo0ga_prmqSs6h7Fy-oK_75o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.253.0/24
87.120.68.0/23
93.123.74.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:da:24:89:e1:b1:35:de:69:5c:f0:4c:b2:b7:10:9c:c1:59:
76:df:ff:26:18:21:a0:c5:0c:b4:2d:6b:87:7d:b4:9a:fa:c9:
e6:be:d0:63:aa:87:fd:66:61:4d:43:bd:8c:d3:27:29:1b:8d:
19:da:da:61:ee:01:bd:aa:85:10:18:6d:1d:0c:ef:df:f5:d3:
4c:44:52:04:29:8c:55:a3:09:b4:5f:e0:37:54:d1:ee:19:d9:
fd:e3:b4:8c:36:8a:c4:8c:22:79:f2:ee:f1:34:14:e9:ce:04:
28:14:91:4c:c5:c9:2b:22:9e:7d:4b:e5:a5:b0:3f:c5:9c:99:
41:d0:e8:63:5b:1e:15:27:c4:9b:42:ef:04:98:c3:d9:71:9f:
b3:15:ff:62:c8:68:9a:f6:36:66:9d:ae:08:24:7e:72:8d:4f:
f9:4e:2c:2c:53:8d:06:03:5c:7e:87:f3:77:53:72:33:dc:c3:
f0:f2:3f:63:33:56:73:73:04:e7:5c:74:32:76:4d:cd:1c:f7:
7f:f3:51:1b:d9:6d:45:04:6e:e5:79:9b:43:68:d2:2f:14:bd:
88:84:46:59:6f:33:5d:75:07:27:e0:23:f0:2d:3e:2e:64:c9:
d5:8c:6b:34:dd:79:8a:77:32:6a:1e:32:12:9c:c0:62:d1:c5:
09:81:8e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 13:44:39 2024 by rpki-client on console-fra.rpki-client.org