Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fILPDiNf4NAdBM6TmX8w6khQ6-I.roa
File: fILPDiNf4NAdBM6TmX8w6khQ6-I.roa (raw, json)
Hash identifier: oGZdSyNk5OmUIQKF9MlEJ36WY3t9eAGL4U5d+2TQ92c=
Subject key identifier: 7C:82:CF:0E:23:5F:E0:D0:1D:04:CE:93:99:7F:30:EA:48:50:EB:E2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D7D723F78E547B408ADAFCE364BD02745
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fILPDiNf4NAdBM6TmX8w6khQ6-I.roa
Signing time: Tue 06 Feb 2024 08:04:15 +0000
ROA not before: Tue 06 Feb 2024 08:04:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197450
IP address blocks: 45.128.233.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.44.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 14:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:72:3f:78:e5:47:b4:08:ad:af:ce:36:4b:d0:27:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 6 08:04:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c82cf0e235fe0d01d04ce93997f30ea4850ebe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:91:13:70:c2:f2:1d:8c:1c:67:86:c3:4a:
f6:9c:59:cc:e5:2b:2a:82:be:d2:45:62:20:7e:9e:
ce:0d:ec:51:5e:3f:a5:a0:94:9c:44:ca:3c:8c:eb:
50:c8:35:c8:f4:44:74:e8:c1:ab:7e:63:08:ea:16:
c1:d1:85:f7:6b:38:cb:61:40:90:66:06:08:94:de:
b0:8d:34:0e:bb:d6:e3:a4:c7:06:ee:e6:0f:df:bc:
60:a8:8a:31:7e:2b:f5:97:42:c0:74:36:12:3f:cf:
66:14:8c:3f:b7:b6:48:e0:9d:d1:22:b7:72:77:80:
5e:20:fc:8e:41:36:4e:e1:96:9c:93:3b:f5:b2:b6:
77:29:59:e7:a1:bf:a3:23:22:a7:d2:e9:1a:a5:1e:
88:4e:28:53:35:95:31:75:a5:91:94:4f:e4:62:c9:
d5:dd:b8:45:18:3b:9f:f2:c7:0f:84:04:31:62:b8:
5b:92:48:2b:c2:00:8e:64:96:57:97:18:23:f9:8c:
fa:3d:25:f3:ec:86:3c:8a:c1:bb:bf:25:03:66:84:
1d:78:9f:97:0b:63:67:0d:ad:32:0f:12:a6:17:02:
0f:c8:03:be:83:9a:b8:48:39:ce:c1:f2:03:92:b0:
a8:f7:d8:88:d7:93:ba:b9:79:b1:2a:35:1c:91:5d:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:CF:0E:23:5F:E0:D0:1D:04:CE:93:99:7F:30:EA:48:50:EB:E2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fILPDiNf4NAdBM6TmX8w6khQ6-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
85.31.47.0/24
87.120.166.0/24
87.121.44.0/24
87.121.46.0/24
94.156.79.0/24
178.215.239.0/24
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ce:1d:76:c6:00:d6:9f:94:37:85:30:bc:af:8f:ac:6d:2c:
d2:d3:e2:2c:b9:f7:c0:c1:bc:00:e5:20:e4:ac:1c:de:1d:26:
94:bd:da:74:42:83:9f:4b:a5:3d:46:37:69:9c:7f:75:43:8c:
29:4a:63:62:35:86:27:db:04:52:66:ad:ec:67:7a:5a:76:a9:
e4:6a:aa:09:7a:96:7c:f3:3d:4c:d3:b6:79:73:aa:e7:4d:2f:
2a:8a:f1:b6:eb:64:33:0a:aa:06:9f:c1:60:d9:e1:74:01:fc:
14:83:b2:c7:e8:db:72:c7:69:d8:8f:74:cf:48:92:51:28:52:
4b:96:fd:81:ca:40:c0:57:63:68:e9:e4:69:86:26:ac:a4:23:
ad:7d:c0:d2:c6:8f:a0:9a:e1:15:b7:51:4e:7d:92:80:b4:ed:
72:4b:28:25:a7:4d:73:56:5f:4c:a4:1d:da:1a:31:69:91:95:
0a:19:4f:b5:68:d5:ce:ca:61:49:d7:75:a9:c8:67:d2:59:d9:
0c:e1:c0:3d:0f:56:8a:8d:bd:a0:a5:98:df:d2:5f:33:6c:86:
67:99:6c:f4:49:36:d8:a2:a8:35:3f:c5:f2:7d:9c:e7:d3:52:
3d:5e:1a:2e:50:c7:9d:5a:6d:db:3a:52:28:5e:b5:69:68:36:
b3:59:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 18:09:33 2024 by rpki-client on console-ams.rpki-client.org