Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eAgCWQsj1Gx1Q-L7Ojh-V9x8HfY.roa
File: eAgCWQsj1Gx1Q-L7Ojh-V9x8HfY.roa (raw, json)
Hash identifier: CuTNMj8Hm6WT9KUT3MjFwfxKTSEL3BsYtGPaKAdthZY=
Subject key identifier: 78:08:02:59:0B:23:D4:6C:75:43:E2:FB:3A:38:7E:57:DC:7C:1D:F6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D13532D5D414371FF709A251FC7838106
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eAgCWQsj1Gx1Q-L7Ojh-V9x8HfY.roa
Signing time: Tue 16 Jan 2024 17:30:34 +0000
ROA not before: Tue 16 Jan 2024 17:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
5.253.58.0/23 maxlen: 24
45.8.92.0/24 maxlen: 24
45.139.123.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.112.0/22 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.178.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
94.156.237.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 13:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:53:2d:5d:41:43:71:ff:70:9a:25:1f:c7:83:81:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 16 17:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=780802590b23d46c7543e2fb3a387e57dc7c1df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:fa:06:6e:40:aa:de:6e:79:9b:ac:ba:59:
7d:02:f0:b6:4f:44:9d:3e:ea:47:ba:80:f6:2c:95:
ee:a3:43:55:ce:78:78:3b:3e:e0:2f:6f:96:8d:34:
ca:f2:a8:7b:41:87:ba:2a:40:f8:3e:4d:8b:1d:bc:
5d:ef:48:98:56:58:00:ed:ac:7e:b3:1d:21:03:84:
12:dd:87:53:40:3f:44:de:5e:31:78:bb:39:a1:56:
c0:89:ed:ca:49:18:8e:20:43:21:2c:32:5f:ec:e8:
48:03:f9:fc:8e:28:35:b4:ab:1c:dd:0e:ea:03:6c:
69:79:c9:b2:24:e4:31:23:3d:e1:8d:e6:60:9f:9b:
38:04:03:5e:2d:7d:02:c1:57:22:f7:33:4a:ad:53:
47:d7:06:86:c4:5a:0d:58:17:9f:6d:30:ca:52:ee:
40:68:de:67:85:59:5a:46:f2:88:fd:80:1f:77:e7:
41:e2:3a:8a:a2:6d:ea:6f:5d:2b:17:02:03:5d:11:
06:b7:0d:50:7a:ed:d7:93:38:ea:7e:fc:68:b2:61:
50:bb:1d:f4:23:81:c0:9d:56:67:37:33:68:d3:8c:
46:3d:97:e3:cf:c3:74:55:a9:4d:96:58:08:98:b4:
bc:1a:bc:c8:6f:e6:c5:f2:45:4d:1b:ab:57:00:25:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:08:02:59:0B:23:D4:6C:75:43:E2:FB:3A:38:7E:57:DC:7C:1D:F6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eAgCWQsj1Gx1Q-L7Ojh-V9x8HfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.8.92.0/24
45.139.123.0/24
87.121.38.0/24
87.121.103.0/24
91.92.16.0/24
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.76.0/22
93.123.112.0/22
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0-94.156.238.255
141.98.5.0/24
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:82:41:ac:cd:db:a4:51:f0:74:1b:76:b8:7b:c5:17:d4:e7:
8a:fa:b1:32:96:25:52:5c:6d:47:23:0a:ac:b0:fe:f8:8a:77:
07:36:62:a5:a9:b1:ac:24:4a:7f:aa:8b:ad:aa:fa:97:73:b7:
4f:59:b8:bf:c2:cf:3f:e6:97:87:2d:39:a5:03:0a:42:17:8f:
3f:a8:8a:59:c9:c9:8f:63:ee:46:5b:f6:43:64:0a:ca:d6:90:
44:ff:b0:e6:db:a2:42:06:86:d3:d2:3b:19:50:79:c1:41:94:
52:67:f0:ac:d0:7d:b3:12:b0:86:e2:b3:7b:6a:61:a7:e2:34:
b8:de:87:6d:ad:a1:23:33:94:bb:b2:7d:c5:56:0c:69:f6:07:
e3:7b:11:1d:af:a4:33:c1:9b:87:f8:30:dc:43:a5:de:8a:45:
b5:00:40:22:52:f7:17:2a:4d:1e:a1:66:be:1b:64:22:80:0f:
0c:99:7c:e0:22:52:b4:28:80:b5:be:03:b6:a9:7c:ee:65:2c:
eb:ff:66:f8:17:c8:6a:98:2a:25:75:48:02:3c:f1:3f:ac:76:
53:07:04:d3:37:a3:a1:ef:04:e8:65:c1:63:d8:7e:22:9f:58:
e2:08:bf:b0:33:bf:79:45:0e:c0:62:b8:37:51:dd:23:b9:d6:
bc:d5:20:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 7 17:55:29 2024 by rpki-client on console-ams.rpki-client.org