Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gKA8kjX8RIKS0gWxOEVdC3eKtd8.roa
File: gKA8kjX8RIKS0gWxOEVdC3eKtd8.roa (raw, json)
Hash identifier: 1Z3rkCns+XhpGt8+VvRDRqUbSD/nKji8OFNRjUbARf4=
Subject key identifier: 80:A0:3C:92:35:FC:44:82:92:D2:05:B1:38:45:5D:0B:77:8A:B5:DF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E1E6CCBCA5BFF5EC91BBA72BCDCB44E0E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gKA8kjX8RIKS0gWxOEVdC3eKtd8.roa
Signing time: Fri 08 Mar 2024 14:17:10 +0000
ROA not before: Fri 08 Mar 2024 14:17:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
5.253.58.0/23 maxlen: 24
45.139.123.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.112.0/22 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.178.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
94.156.237.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 13:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1e:6c:cb:ca:5b:ff:5e:c9:1b:ba:72:bc:dc:b4:4e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 8 14:17:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80a03c9235fc448292d205b138455d0b778ab5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:ae:82:ca:14:64:ac:03:8a:de:80:59:7d:
ce:1f:da:ab:7e:fc:97:5d:1c:c4:1f:12:ea:09:f8:
55:9e:96:80:55:4e:57:bc:28:c4:05:08:94:b6:2f:
65:83:4a:84:10:11:cd:39:69:ae:67:50:f9:f5:27:
07:fc:09:14:22:97:d1:20:75:9b:52:bd:b8:e1:14:
e8:04:07:5d:14:f0:d6:7c:e0:38:02:aa:2a:2d:f5:
9f:fb:27:fb:62:71:9a:36:59:60:ab:a5:93:7c:0d:
b8:1b:c2:50:99:6c:52:81:d3:f3:de:e5:2b:9f:2d:
e5:f1:6f:50:94:f2:81:48:ea:61:85:f5:de:36:c6:
68:4d:df:d2:f4:40:c8:cd:81:9d:29:c7:dd:83:4d:
83:75:1d:23:b2:98:e0:ce:6f:0a:1c:02:d2:58:7a:
f5:e0:c5:b1:8a:47:65:7c:93:6b:51:5e:99:12:86:
d4:b0:5e:7d:97:0a:d7:a9:89:9e:16:0d:93:92:0a:
76:59:f8:f7:c9:97:32:21:03:5b:62:d4:d9:0d:1a:
53:50:9e:fa:b8:af:4b:62:b5:c2:16:3e:ce:87:41:
f0:e8:33:48:ce:e7:10:74:df:6b:23:5e:6c:94:24:
49:6f:d0:2f:1b:4b:ef:f4:7a:d2:d9:38:25:9e:90:
eb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A0:3C:92:35:FC:44:82:92:D2:05:B1:38:45:5D:0B:77:8A:B5:DF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gKA8kjX8RIKS0gWxOEVdC3eKtd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.139.123.0/24
87.121.38.0/24
87.121.103.0/24
91.92.16.0/24
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.76.0/22
93.123.112.0/22
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0-94.156.238.255
141.98.5.0/24
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:53:7b:93:b7:bb:2e:32:18:2a:70:ea:15:7a:75:e4:89:e8:
54:4d:ce:1d:69:41:98:60:ed:df:bf:b6:43:7f:9f:85:8e:f0:
fc:ea:d4:e1:cf:f3:d3:17:c5:fa:e6:95:5d:e1:b1:ea:92:d1:
1a:13:f6:b0:05:71:e5:86:05:ec:f0:78:40:1a:1a:7b:de:4c:
6b:0b:6b:c7:7b:4e:e0:29:0e:af:d2:e3:b0:29:aa:6e:24:29:
8b:16:63:0b:6b:11:e2:8c:c2:99:6e:e5:35:6b:43:03:fe:c7:
b8:46:68:0a:c2:55:77:47:b1:3f:7a:92:e8:8b:5d:77:62:91:
10:48:c5:39:fb:57:61:28:0a:95:91:34:fd:37:42:6c:5f:03:
0d:07:0d:5c:c3:df:fb:20:36:b4:e9:b3:e1:b9:80:16:08:82:
9e:8c:e0:2d:ed:ec:a4:2d:39:d8:31:41:52:12:51:26:98:d3:
2e:e0:ba:83:6f:2c:ce:d5:25:bf:a2:0c:b6:59:b3:91:b2:42:
0d:6d:22:5c:d4:9a:29:5f:c3:31:15:24:eb:35:2b:30:72:1d:
bf:f5:b4:ec:bb:7a:17:80:08:4f:19:97:aa:1f:75:fa:80:32:
86:ff:53:f7:bf:35:b2:0a:78:a3:db:95:ff:bc:6b:6f:fd:fd:
3c:99:17:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 17:45:18 2024 by rpki-client on console-fra.rpki-client.org