Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dzIJIq0H1XkhlGtMlj1n8B90qq4.roa
File: dzIJIq0H1XkhlGtMlj1n8B90qq4.roa (raw, json)
Hash identifier: nYT3tKrzOpE5bn+rzf7CMDVNPP05PLsGsucQ293iiG8=
Subject key identifier: 77:32:09:22:AD:07:D5:79:21:94:6B:4C:96:3D:67:F0:1F:74:AA:AE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193674F4C9362400BA196CF0ED43612FF50
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dzIJIq0H1XkhlGtMlj1n8B90qq4.roa
Signing time: Tue 26 Nov 2024 07:11:10 +0000
ROA not before: Tue 26 Nov 2024 07:11:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56971
IP address blocks: 45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
194.113.37.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 10:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:4f:4c:93:62:40:0b:a1:96:cf:0e:d4:36:12:ff:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 26 07:11:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77320922ad07d57921946b4c963d67f01f74aaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:d3:24:75:01:81:00:4d:e6:1b:8b:1a:21:
1c:34:05:e9:51:dd:bc:03:18:16:29:c8:62:43:6e:
9e:2e:7c:ac:f8:84:08:95:87:18:eb:70:b7:ea:d4:
a3:60:fc:b9:60:66:29:05:4a:fe:7d:a7:4b:62:dc:
38:cc:06:60:87:55:6c:97:ec:22:6c:3e:3b:d0:07:
b1:ad:79:ec:f9:a1:40:64:30:63:ad:fb:e5:f6:0f:
8a:3a:eb:6b:12:4e:e2:27:bc:ed:29:5e:d0:74:60:
99:f3:17:b0:cb:35:2a:ea:43:0f:37:55:e0:1c:05:
de:74:4a:3a:3d:01:9d:af:83:28:b6:71:2e:3f:af:
5a:ca:cf:04:30:93:26:a0:09:ac:f8:e8:01:2b:44:
12:56:f9:2a:6b:2b:79:34:45:7b:db:b8:25:68:9c:
78:89:c1:02:03:34:2d:8c:e4:ac:39:c1:76:04:72:
ae:dd:a0:8f:2a:78:d6:f8:a5:5e:e8:a9:71:df:89:
e6:55:6c:d3:78:f8:3b:2c:f2:cb:ea:55:ab:61:90:
26:42:11:ac:7a:3b:82:b7:be:ae:55:b8:af:ff:49:
fc:c7:25:30:f1:69:13:bb:f1:33:23:04:9b:8b:73:
06:f3:8c:bc:1f:ba:23:d0:82:50:2d:60:02:17:01:
08:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:09:22:AD:07:D5:79:21:94:6B:4C:96:3D:67:F0:1F:74:AA:AE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dzIJIq0H1XkhlGtMlj1n8B90qq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
109.206.236.0/24
185.218.137.0/24
194.113.37.0/24
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:cd:5b:9b:84:89:d5:56:14:f0:1f:73:86:d7:7b:48:f0:56:
c7:c3:2c:74:9c:a3:f7:a7:5c:da:3a:39:d2:07:7a:82:5d:17:
c7:13:f2:f9:ea:0c:4a:00:93:d9:89:ac:93:3a:b1:af:3f:3c:
60:cd:29:6d:79:8b:36:d1:09:ed:63:35:28:e8:7b:a7:8d:6c:
64:7e:30:ff:93:ff:13:ff:40:7d:6b:e7:c6:0f:3e:93:61:80:
03:01:5e:8e:06:9a:71:c2:55:b4:df:ff:9e:e0:7e:a5:0d:12:
d7:90:57:99:fd:88:99:05:7f:e6:aa:af:a9:bd:a3:03:51:e0:
14:ba:6d:67:43:e5:97:fe:10:42:3b:75:a3:59:b5:0f:53:26:
fb:d3:7d:49:c5:21:92:00:69:25:9e:f0:6b:ca:50:84:86:85:
1c:6e:89:bd:98:f5:e3:1a:e3:19:bb:fb:7c:f7:01:d6:24:c2:
b4:21:6a:c2:47:7e:67:0f:73:f6:5d:4f:ab:f1:f0:40:fe:bf:
4e:e8:28:71:c3:7f:d3:ad:f5:0d:f5:22:c7:a4:e6:90:32:f3:
da:21:39:c9:b5:2f:bf:a6:2d:3a:e6:94:35:99:52:19:43:eb:
48:4f:50:b2:ea:d7:0f:c1:5b:b7:b4:e8:73:96:d8:88:76:38:
05:bc:55:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:50:38 2025 by rpki-client