Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dAFAD6RP_43qk_c4cCPKQnBlP0k.roa
File: dAFAD6RP_43qk_c4cCPKQnBlP0k.roa (raw, json)
Hash identifier: O7C7rmH+UoW6Bct+8o2bVZuaIMIBmpNMoEkULPOLkiE=
Subject key identifier: 74:01:40:0F:A4:4F:FF:8D:EA:93:F7:38:70:23:CA:42:70:65:3F:49
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FDE631B206ECDB4FE16F37F8E8E99C499
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dAFAD6RP_43qk_c4cCPKQnBlP0k.roa
Signing time: Mon 03 Jun 2024 13:56:27 +0000
ROA not before: Mon 03 Jun 2024 13:56:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 2.58.95.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 05:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:de:63:1b:20:6e:cd:b4:fe:16:f3:7f:8e:8e:99:c4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 3 13:56:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7401400fa44fff8dea93f7387023ca4270653f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:d1:f2:1a:b9:d9:1a:b2:e4:70:fc:2a:96:
8e:f1:90:ce:cf:aa:3f:1b:28:40:bd:e6:14:67:66:
54:cd:d1:e0:5c:1e:ae:3c:ca:ce:a5:91:9b:bf:c7:
a2:08:cc:a9:c8:83:18:0d:7c:7f:27:f7:0c:69:2a:
aa:f9:30:f3:9d:38:f2:ca:81:c8:84:61:97:72:72:
71:0f:34:c3:53:cf:a6:eb:9d:fc:15:a2:bb:b3:8c:
df:42:0c:95:c3:7b:4d:41:a8:1e:ed:a0:fd:b3:db:
67:b8:be:62:a6:4e:46:d5:53:f9:38:2b:9f:3d:04:
53:55:50:45:71:b3:ca:79:c3:37:8c:b0:4c:43:1a:
6f:39:1b:17:41:d1:8b:8f:24:ab:d6:89:14:ee:00:
af:c9:cc:08:b9:4d:9b:90:fc:91:0d:dd:33:c0:35:
4b:7c:f3:5c:64:1a:ad:78:49:fc:8f:8e:0c:28:1a:
b6:a7:89:b4:8f:6a:8b:cd:d0:91:08:fa:60:23:7c:
35:00:15:ce:37:44:17:0f:47:05:9b:8e:f3:0f:b2:
4e:df:01:07:7d:5b:80:a2:85:6f:9c:af:ab:fe:3c:
56:1b:a0:43:76:06:39:8a:c2:47:5e:e6:b0:de:aa:
db:f1:bf:ad:2c:fd:83:95:b1:67:5b:6f:b2:c1:a9:
08:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:01:40:0F:A4:4F:FF:8D:EA:93:F7:38:70:23:CA:42:70:65:3F:49
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dAFAD6RP_43qk_c4cCPKQnBlP0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
45.128.96.0/24
45.128.232.0/24
84.54.51.0/24
87.121.58.0/24
87.121.69.0/24
87.121.105.0/24
94.103.124.0/23
94.156.10.0/24
141.98.4.0/24
147.78.102.0/24
193.35.18.0/24
193.37.44.0/24
Signature Algorithm: sha256WithRSAEncryption
31:99:15:73:44:87:39:c7:2f:db:df:17:6b:b0:b4:e8:6e:73:
14:91:af:7e:5e:b4:01:d8:da:55:fb:86:f0:11:b8:ef:f4:1e:
3a:ae:0e:89:88:78:36:9d:ad:e2:73:dc:43:4f:b5:47:e3:f8:
aa:2b:ab:95:75:d4:a2:02:38:79:c6:41:d2:8e:2e:79:16:ec:
89:ec:5a:c2:b0:79:07:5b:92:f7:63:29:02:53:60:0b:33:87:
ed:ed:0e:e8:d9:aa:34:0f:3e:4f:2a:8d:85:4c:ad:26:a7:d4:
d1:eb:3a:de:10:fb:7a:6a:37:14:1e:95:08:f7:6a:d2:c6:a9:
9f:94:08:b9:55:a1:6f:9a:31:87:21:28:5f:d0:44:0a:80:e4:
5f:5f:47:51:4f:a7:6d:fe:f7:43:d3:5f:f6:db:96:8f:a6:4f:
b6:dd:7d:0a:07:2f:d8:44:57:00:b6:fa:ba:61:79:91:ff:41:
13:5e:8b:8d:a2:72:6c:2e:43:b3:bd:7e:4e:6a:ca:2f:ff:37:
12:7a:e2:95:90:e5:87:66:8c:67:56:85:39:f6:af:f2:cd:58:
25:41:37:9e:39:c4:81:9b:0a:9e:98:65:c7:50:76:f6:73:2c:
20:3e:bc:0f:16:00:6d:9a:41:56:44:49:fc:3d:29:78:af:6a:
ba:9b:75:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 07:42:31 2024 by rpki-client on console-ams.rpki-client.org