Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aiIyO0tTvwe2HKhaRiVolLAaYSg.roa
File: aiIyO0tTvwe2HKhaRiVolLAaYSg.roa (raw, json)
Hash identifier: G1WkmzRNVOOgA8D4Q97YjMtmjKaIl+XjCHmz89HNtrU=
Subject key identifier: 6A:22:32:3B:4B:53:BF:07:B6:1C:A8:5A:46:25:68:94:B0:1A:61:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DA23050A2ADF0FD69E50A5DA5A3603A40
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aiIyO0tTvwe2HKhaRiVolLAaYSg.roa
Signing time: Tue 13 Feb 2024 11:18:11 +0000
ROA not before: Tue 13 Feb 2024 11:18:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.149.240.0/24 maxlen: 24
87.120.68.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 16:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:30:50:a2:ad:f0:fd:69:e5:0a:5d:a5:a3:60:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 13 11:18:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a22323b4b53bf07b61ca85a46256894b01a6128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:a7:12:87:6a:b6:e8:a9:21:6a:9a:2c:f4:
af:72:c0:22:39:95:bc:01:14:e4:89:a0:e3:5d:0a:
16:99:25:4e:86:57:20:ec:e2:98:ee:5a:22:1b:5f:
b8:9f:a1:15:72:06:7c:b6:57:ba:89:c4:f9:4a:cf:
8d:59:4a:c0:5e:bb:6c:90:0a:2b:33:73:95:59:16:
a7:1a:52:a0:4f:da:06:97:3d:ac:0c:61:19:8f:1a:
74:70:10:77:ae:cc:bc:08:f3:55:7d:ac:e7:f2:23:
0b:d6:35:57:e7:4e:ef:6b:8c:b2:0e:73:f8:51:a3:
eb:c4:d0:93:f3:13:da:8d:1d:3f:45:8f:cf:2f:e7:
8b:02:fc:0e:e8:e9:a4:e1:8e:f6:ac:d3:1d:80:07:
cb:04:c0:16:98:e8:77:82:ef:cb:a4:0a:50:46:e9:
3c:b0:d7:a8:fc:36:29:de:cd:1c:64:02:4d:e8:dc:
27:6a:81:22:2a:7c:99:f0:16:cf:29:04:3c:49:18:
7c:e9:15:26:8b:f9:27:b5:77:70:dc:f7:c9:95:16:
84:2f:f6:b6:0c:db:94:05:2f:5d:72:18:d7:29:cc:
35:9b:bf:67:e0:ec:16:d2:75:87:bd:16:c7:bd:01:
1c:a7:5c:b5:ac:4f:be:03:b8:42:00:e2:22:59:51:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:22:32:3B:4B:53:BF:07:B6:1C:A8:5A:46:25:68:94:B0:1A:61:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aiIyO0tTvwe2HKhaRiVolLAaYSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/24
87.120.68.0/24
87.121.46.0/24
93.123.116.0/24
94.156.14.0/24
95.214.27.0/24
185.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9b:d7:68:be:26:fe:71:d9:7d:fa:6f:ac:e9:b4:57:2e:80:
e8:61:e9:3e:ce:ef:04:a2:ba:29:5e:e9:9d:7f:8d:7a:4a:e4:
9b:0d:a1:36:d2:9a:74:77:ea:32:d2:38:5a:96:f2:ab:e9:7f:
03:74:c9:a0:aa:5a:38:b9:5c:91:b3:63:27:97:d9:9d:31:f7:
10:6d:dc:4c:fc:25:25:54:57:19:26:f9:25:dc:d7:ef:89:c3:
b6:76:84:0a:b1:eb:ff:36:97:a6:d6:3f:4c:51:35:08:4d:51:
ff:8f:8e:17:02:f6:0d:91:53:64:29:e7:1e:3e:9c:ac:59:24:
86:1a:82:4d:07:fe:f7:54:62:19:e5:70:ae:7e:07:6c:88:21:
1b:c5:da:91:f0:f4:72:c5:b8:b1:fa:5a:22:06:89:29:b0:00:
2a:fe:02:9f:0a:db:93:9d:bb:f8:7f:64:bf:09:07:ab:f3:4b:
8b:1f:64:46:37:09:bc:63:74:e2:19:41:44:09:d6:91:25:1a:
74:9d:a4:8f:a6:8e:49:81:db:ed:07:e9:f3:f1:89:b8:75:3a:
96:8d:d0:73:9a:62:a1:27:66:fc:6d:e5:4d:84:80:96:88:13:
78:04:f5:43:7a:ef:42:ae:10:87:b7:d0:4d:ea:d8:89:5f:15:
c5:ac:22:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 20:50:30 2024 by rpki-client on console-ams.rpki-client.org