Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fDIh8Ts7-UnzCn1ROjlIcxi62sc.roa
File: fDIh8Ts7-UnzCn1ROjlIcxi62sc.roa (raw, json)
Hash identifier: +e6mdURPZGPJ0Qt+EejOUCIH6Ol546Lumamrc1836m8=
Subject key identifier: 7C:32:21:F1:3B:3B:F9:49:F3:0A:7D:51:3A:39:48:73:18:BA:DA:C7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191E56D928B9FB1F3F2D4F0EC423CFEBD3B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fDIh8Ts7-UnzCn1ROjlIcxi62sc.roa
Signing time: Thu 12 Sep 2024 08:50:49 +0000
ROA not before: Thu 12 Sep 2024 08:50:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.66.228.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 09:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:6d:92:8b:9f:b1:f3:f2:d4:f0:ec:42:3c:fe:bd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 12 08:50:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c3221f13b3bf949f30a7d513a39487318badac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3a:9d:26:1a:36:31:15:76:f1:ab:92:1a:40:
52:82:97:fe:0f:9e:09:2f:a3:3b:20:fb:46:94:e7:
fc:f7:f0:3a:17:0d:0d:61:6e:a4:ea:b8:1c:13:4c:
6d:0c:ac:25:fb:69:6e:21:e2:1e:a4:d1:19:e7:a0:
13:33:27:2a:93:ed:c3:69:ec:b3:e6:11:34:e8:66:
29:32:67:5d:04:01:c2:91:e4:3b:2d:5a:3b:74:af:
e9:5c:c4:02:5f:15:9b:9d:e4:2a:c9:e2:67:0e:c5:
ae:ce:6e:a6:9d:fb:87:52:25:9d:a8:32:42:c1:7c:
de:25:f7:51:0d:b8:eb:fd:4d:86:12:b5:af:07:c7:
ce:3f:6b:7e:53:08:22:bd:5d:56:b0:02:88:19:60:
a5:f2:8b:c8:54:c4:ce:73:20:94:9e:86:a8:c1:24:
db:ac:65:df:0b:7a:22:f3:29:99:a3:1c:3e:dc:7a:
11:13:8a:ea:a9:c3:72:60:0a:21:77:12:01:93:ad:
1e:93:9b:e2:98:c9:86:6e:69:6b:37:8a:35:16:03:
e5:fe:62:02:c5:a2:3c:36:21:7a:0f:a1:c3:e0:32:
d4:8b:b6:f8:99:4c:bb:12:cf:30:fc:f3:5b:20:4b:
48:e7:3b:0e:60:b8:a8:0b:8c:9c:58:db:05:f2:35:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:32:21:F1:3B:3B:F9:49:F3:0A:7D:51:3A:39:48:73:18:BA:DA:C7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fDIh8Ts7-UnzCn1ROjlIcxi62sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.88.88.0/24
45.88.90.0/24
45.149.241.0/24
45.151.89.0/24
45.151.91.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
92.119.196.0/23
93.123.39.0/24
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
02:38:39:35:88:b3:68:72:a8:98:89:d3:44:c8:d2:4e:40:c0:
c7:67:9f:63:ea:ce:8d:d6:cc:1b:26:28:06:11:b8:00:41:a1:
d4:78:42:03:b3:ce:3f:26:3f:c9:54:31:9f:69:e5:92:b1:44:
bf:6b:69:b1:99:69:bb:fd:50:69:ab:f6:45:12:02:3a:87:50:
b4:b1:40:24:74:75:82:d0:3c:0e:d4:ba:df:21:7c:0e:1d:37:
42:4d:e8:68:5b:64:39:a0:1e:98:9c:ed:8d:f0:28:d9:30:6f:
68:8b:90:e3:7b:bf:42:3d:d0:fd:2a:77:3a:f7:0d:fc:9c:5d:
5f:65:b9:84:e7:68:12:be:e5:56:fb:87:b4:12:59:aa:ae:09:
3f:04:db:50:b1:dd:0c:f4:ba:15:03:6f:62:73:2d:ad:ea:a1:
d4:cc:bb:48:2d:91:df:9b:98:b4:20:00:75:f5:33:bb:11:9e:
87:20:a4:98:e1:87:1f:d4:77:3a:94:af:0f:55:3a:45:94:b9:
3d:d7:ad:d8:f9:eb:8a:11:5d:c5:d6:91:d6:43:89:bf:a2:36:
51:d3:d4:6e:f4:bb:e3:fd:aa:7b:96:ac:67:f6:c3:b4:61:42:
d6:24:31:c5:9e:37:ef:e3:d6:07:4f:ca:fe:24:87:bd:57:b6:
2c:41:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 12:46:10 2024 by rpki-client on console-fra.rpki-client.org