Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/etaWROqxEqP-s2KJOw8qNL2tHx8.roa
File: etaWROqxEqP-s2KJOw8qNL2tHx8.roa (raw, json)
Hash identifier: YEySOCe5PFp8K7uvruodROi+G/3G2nwbhqlDouixUDo=
Subject key identifier: 7A:D6:96:44:EA:B1:12:A3:FE:B3:62:89:3B:0F:2A:34:BD:AD:1F:1F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CCE4A334ABF491043D548D8F06CA7772D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/etaWROqxEqP-s2KJOw8qNL2tHx8.roa
Signing time: Wed 03 Jan 2024 07:46:58 +0000
ROA not before: Wed 03 Jan 2024 07:46:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 45.12.255.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
193.149.31.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 13:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:4a:33:4a:bf:49:10:43:d5:48:d8:f0:6c:a7:77:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 3 07:46:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ad69644eab112a3feb362893b0f2a34bdad1f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:ad:95:21:b4:ef:63:f1:8e:82:39:b2:51:
f0:6c:ab:31:93:4e:0a:04:81:86:93:c8:10:9c:40:
94:5d:59:0a:67:12:a8:9b:bc:60:06:17:a7:e5:dd:
f3:10:62:3a:f6:af:ca:f0:17:ad:da:07:51:5b:9e:
07:32:f3:32:d5:64:0b:99:b2:35:68:ff:a8:2e:db:
78:a3:d5:b3:71:7e:e9:a8:70:df:a5:96:83:d4:d7:
d4:61:c2:da:d4:71:8f:9f:87:2c:dc:63:e5:05:29:
34:34:65:05:1f:a9:13:63:f1:20:f6:e5:cc:a8:88:
b0:95:09:ea:ef:18:c5:1b:4f:81:22:5b:ad:75:4a:
23:9e:8f:b0:be:60:b1:dd:b9:5c:37:43:15:b7:ba:
69:19:11:ed:44:a3:da:eb:f4:ac:b5:79:a1:3b:c9:
a0:eb:01:86:e2:77:cd:16:76:9f:f6:2f:78:fc:10:
13:d0:8e:8c:85:95:f5:70:43:eb:7d:9f:43:74:c4:
2c:d3:45:c4:86:a2:02:eb:b0:89:76:ea:8e:28:6d:
c1:2a:d5:b6:5e:8c:a9:6d:8b:74:65:29:6d:3a:c9:
4a:01:39:f2:10:46:c7:3d:ff:5b:07:2a:f8:56:e7:
84:8f:1d:51:33:91:b8:50:f2:e8:e2:4a:70:67:3e:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D6:96:44:EA:B1:12:A3:FE:B3:62:89:3B:0F:2A:34:BD:AD:1F:1F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/etaWROqxEqP-s2KJOw8qNL2tHx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
45.12.255.0/24
45.66.228.0/24
45.151.90.0/24
79.110.50.0/24
87.121.105.0/24
94.156.176.0/24
193.37.47.0/24
193.149.28.0/22
194.180.36.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
92:80:17:20:fc:87:13:23:da:2a:a9:9c:df:65:52:c8:84:a4:
cc:13:e2:76:2d:39:48:6b:60:41:23:96:bf:95:9f:70:eb:98:
56:18:90:81:e2:60:d0:e4:4f:72:1f:87:e7:c9:0c:c7:c8:06:
db:1f:73:1c:c1:da:4c:fe:32:f3:20:28:92:51:9b:25:47:44:
d3:f1:09:e9:0e:8b:73:05:63:5b:71:af:5c:4b:44:e2:84:68:
91:e5:82:ff:49:9f:14:95:7c:43:d4:d1:62:93:92:0f:4a:64:
c6:42:41:c2:d3:a0:d6:bb:43:5b:db:eb:01:e8:78:00:7f:e2:
4b:df:a1:d5:78:48:f6:00:4d:00:cc:3a:35:c5:99:ad:23:08:
e9:d5:21:03:a9:91:9f:3b:9c:dd:b7:28:60:57:d3:08:da:4f:
d8:c6:33:bc:f7:c6:f9:9b:29:b5:f3:d4:6f:a3:ec:db:a6:6a:
2d:9d:ef:78:c9:a2:81:38:0b:72:61:35:53:51:6e:06:73:76:
57:a5:e2:25:ef:1e:ab:b1:c4:58:07:f5:3d:fe:ca:1b:b0:f2:
da:38:2f:7e:63:be:24:c1:60:d2:57:39:ee:84:5e:d7:c6:44:
cd:6d:ff:38:2b:9a:e9:59:1e:5a:5a:ce:2b:06:3c:13:f3:15:
20:bf:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 16:49:32 2024 by rpki-client on console-ams.rpki-client.org