Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bwqTnKRlvuea0BPU0llJDA6d54w.roa
File: bwqTnKRlvuea0BPU0llJDA6d54w.roa (raw, json)
Hash identifier: iNKyzR6e2limEPrjiOMINBqmPP3ZJZle2rNX24QET9E=
Subject key identifier: 6F:0A:93:9C:A4:65:BE:E7:9A:D0:13:D4:D2:59:49:0C:0E:9D:E7:8C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CEE58EC184D9F49354D2AB3792B5E5533
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bwqTnKRlvuea0BPU0llJDA6d54w.roa
Signing time: Tue 09 Jan 2024 13:10:54 +0000
ROA not before: Tue 09 Jan 2024 13:10:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 212.87.207.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
193.149.31.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 08:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:58:ec:18:4d:9f:49:35:4d:2a:b3:79:2b:5e:55:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 9 13:10:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f0a939ca465bee79ad013d4d259490c0e9de78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:1d:da:62:7f:9b:45:0c:50:ed:d3:1e:87:
17:2d:15:9e:d4:4b:24:7e:15:85:ef:70:6f:81:c2:
f7:54:60:f8:c7:26:91:d5:08:39:3c:37:5d:5a:62:
a6:70:50:14:f3:73:e0:f4:8c:34:a1:79:60:6d:1c:
96:17:7a:59:74:55:2a:29:77:c1:4a:9c:e6:0b:ce:
2c:91:9a:9f:6a:68:ce:b0:a0:70:3d:0b:30:6b:cf:
4f:28:ff:81:9a:d2:f1:77:f1:67:b9:a8:e0:21:76:
04:97:9a:3c:1b:5e:bb:53:f1:fc:89:c1:77:54:b9:
ac:72:af:16:46:34:e3:92:6c:73:38:03:34:4f:79:
d9:9c:01:7c:7b:02:97:2f:6f:1d:f6:85:22:86:78:
a1:25:fe:92:49:c6:e2:b5:45:ed:eb:13:80:fa:27:
52:da:84:92:ac:b3:4a:bc:a0:41:94:e1:ed:dc:f5:
5d:82:33:3f:0b:62:51:ac:ce:e5:7e:e6:ec:e4:45:
9e:90:80:cd:2d:14:2f:71:7e:b2:6e:01:d5:0b:45:
34:49:03:f7:45:6d:4b:cb:18:07:e2:da:82:6a:7e:
f8:c9:6f:ae:c2:6d:c2:e5:32:42:f6:92:34:39:b3:
cb:32:b2:51:a7:44:f7:81:e6:35:bf:45:f6:50:87:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0A:93:9C:A4:65:BE:E7:9A:D0:13:D4:D2:59:49:0C:0E:9D:E7:8C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bwqTnKRlvuea0BPU0llJDA6d54w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
45.12.255.0/24
45.66.228.0/24
45.151.90.0/24
79.110.50.0/24
82.115.211.0/24
87.121.105.0/24
94.156.176.0/24
178.215.238.0/24
193.37.47.0/24
193.149.28.0/22
194.180.36.0/24
212.87.207.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:22:fa:60:4b:70:3f:f8:5c:17:bf:dc:1f:4f:38:75:17:b6:
e5:29:bb:d3:39:9e:5d:a7:3e:57:c3:72:e0:88:42:d9:cb:b8:
d7:b5:35:29:4e:4f:61:4e:06:35:d6:c7:f1:a6:e0:55:83:5b:
c7:17:ee:06:7d:ad:c4:7f:b3:14:cc:c3:60:d7:b4:1e:c3:c1:
83:d7:24:ab:5b:7d:ef:1a:63:64:14:7d:3b:88:dc:0f:32:76:
f4:a9:59:9d:28:ce:e6:61:f6:97:01:fd:60:c3:a5:ff:c3:0d:
e4:f0:0e:45:7b:54:a3:36:f0:fe:de:c4:cf:82:03:4d:56:86:
a2:5b:86:b2:eb:a9:cc:c8:e6:9b:16:8b:c6:0e:23:42:5c:e9:
19:37:91:35:6e:c1:a0:b5:e5:4e:00:a1:03:b0:61:bf:9f:31:
2d:9e:c8:c0:6d:db:98:b3:dd:5a:a4:5b:ed:68:62:9b:36:8f:
9b:97:42:d1:47:93:e6:a9:e0:d6:cd:d4:0a:3d:a7:69:53:e0:
8d:44:44:1a:cb:fa:25:2e:b1:34:c6:3c:95:0d:45:b1:c6:7d:
c4:c3:26:cc:ab:f6:a1:b6:72:2a:83:55:36:4f:79:ed:30:2d:
e2:9d:aa:fb:60:a1:74:c7:e9:b6:22:a3:da:6c:dd:9d:b3:10:
eb:6d:b4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 11:45:09 2024 by rpki-client on console-ams.rpki-client.org