Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gMILCbdUa0ACQS7BP0k9UyzeWjs.roa
File: gMILCbdUa0ACQS7BP0k9UyzeWjs.roa (raw, json)
Hash identifier: E+SIq7w+LSdbfl33eFYumaMIuAGuufzi9DDgMdUoXlI=
Subject key identifier: 80:C2:0B:09:B7:54:6B:40:02:41:2E:C1:3F:49:3D:53:2C:DE:5A:3B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192001F12429BB7854A2A2FF096656504F1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gMILCbdUa0ACQS7BP0k9UyzeWjs.roa
Signing time: Tue 17 Sep 2024 13:14:49 +0000
ROA not before: Tue 17 Sep 2024 13:14:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34577
IP address blocks: 37.60.141.0/24 maxlen: 32
87.120.0.0/22 maxlen: 32
87.120.12.0/24 maxlen: 32
87.120.14.0/23 maxlen: 32
87.120.44.0/23 maxlen: 32
87.120.45.119/32 maxlen: 32
87.120.178.0/23 maxlen: 32
87.120.180.0/22 maxlen: 32
87.120.184.0/22 maxlen: 32
87.120.190.0/23 maxlen: 32
87.121.48.0/22 maxlen: 32
87.121.88.0/23 maxlen: 32
93.123.40.0/22 maxlen: 32
93.123.40.0/24 maxlen: 32
93.123.41.0/24 maxlen: 32
93.123.42.0/24 maxlen: 32
93.123.43.0/24 maxlen: 32
93.123.44.0/24 maxlen: 32
93.123.47.0/24 maxlen: 32
93.123.66.0/24 maxlen: 32
93.123.67.0/24 maxlen: 32
93.123.96.0/22 maxlen: 32
94.156.123.0/24 maxlen: 32
212.73.149.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 26 Sep 2024 12:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:1f:12:42:9b:b7:85:4a:2a:2f:f0:96:65:65:04:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 17 13:14:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80c20b09b7546b4002412ec13f493d532cde5a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:79:94:b1:ab:46:54:ea:a1:a9:2e:69:a6:
52:6f:56:b7:a3:b0:82:4d:30:18:9d:01:b7:96:81:
3c:b9:b7:da:d0:82:36:ca:a2:ce:6c:fc:37:af:e0:
28:9c:ee:77:08:0a:47:3d:c2:03:01:25:31:a4:a2:
17:92:88:80:05:a1:5c:93:ed:3f:f5:91:17:28:88:
c9:90:fb:33:98:82:f9:4b:81:0f:31:28:5a:22:91:
ea:15:5c:29:91:11:f5:b4:7d:c3:ce:0f:37:4d:3f:
12:10:61:40:93:c9:ff:c4:ac:f9:42:08:b2:c2:ad:
30:d3:5a:31:c0:24:73:20:20:68:7e:84:7d:e1:4d:
f8:8c:90:ba:cc:99:80:45:6a:46:af:7f:57:f2:64:
d7:23:e5:95:45:ce:79:f1:8a:86:7c:85:9c:4a:66:
e4:6e:a1:64:ac:a3:5e:dd:b6:ba:83:07:1b:a8:61:
89:ee:23:98:9d:f3:dd:10:7a:e6:34:9e:21:98:6f:
a0:94:ba:9c:5a:1c:31:b7:30:17:f3:a3:ce:1e:e9:
8b:44:51:a5:df:c7:d0:8d:ea:25:35:f5:4b:e7:81:
98:8c:ba:54:de:98:16:6b:c6:1e:dd:cc:8c:ad:7a:
dd:69:9e:a3:1b:42:66:10:7c:a0:7c:32:ba:f8:74:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C2:0B:09:B7:54:6B:40:02:41:2E:C1:3F:49:3D:53:2C:DE:5A:3B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gMILCbdUa0ACQS7BP0k9UyzeWjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.141.0/24
87.120.0.0/22
87.120.12.0/24
87.120.14.0/23
87.120.44.0/23
87.120.178.0-87.120.187.255
87.120.190.0/23
87.121.48.0/22
87.121.88.0/23
93.123.40.0-93.123.44.255
93.123.47.0/24
93.123.66.0/23
93.123.96.0/22
94.156.123.0/24
212.73.149.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:74:7f:60:e2:2b:0d:56:d2:fe:46:e1:2e:fc:e2:3b:e2:1c:
50:01:00:e4:5b:bc:88:ca:5b:57:84:c6:bb:42:a6:6f:7f:1c:
7f:b3:b1:0a:15:10:60:01:1a:c0:b4:7c:0e:ef:cc:3d:a1:78:
45:fd:97:ce:0f:13:97:e4:5b:cf:f2:cb:39:96:4d:e0:e1:d0:
15:e9:7d:12:a9:f7:b0:c0:a6:44:f5:25:b7:9d:7d:04:b6:31:
fe:2c:49:0d:38:c7:bb:51:dd:ce:89:16:22:fd:2a:65:18:05:
a6:82:26:0a:fb:e1:0d:9c:f5:cc:b6:a4:5f:13:ab:40:9a:a7:
e6:03:37:71:c7:d8:45:b1:05:02:7e:a0:2d:a6:76:07:18:4c:
59:66:f4:af:f7:cf:25:0d:cd:46:59:e4:f8:d1:83:7d:41:e1:
ac:8f:ad:0c:9f:ec:ed:e6:de:48:87:3d:95:ec:5c:32:89:6e:
f9:d7:c5:57:c3:b2:eb:58:70:76:7d:19:49:f3:6c:5d:fc:01:
f3:7a:cb:f7:1c:51:3d:f1:76:26:f8:e3:3e:b9:9d:b9:8a:f7:
dd:c0:6a:b9:78:4f:54:8a:57:42:6a:0c:77:95:39:05:f4:74:
8e:e6:62:6c:55:67:5a:7a:46:32:b5:3f:cb:bf:54:c3:d0:38:
58:78:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 16:48:09 2024 by rpki-client on console-ams.rpki-client.org