Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gZW3e9qkdfQKg60_OsCFIabjaDs.roa
File: gZW3e9qkdfQKg60_OsCFIabjaDs.roa (raw, json)
Hash identifier: vtaDQlIIq2Zp07dQkOM5DjyObDKMDTNS7sxzsiPof70=
Subject key identifier: 81:95:B7:7B:DA:A4:75:F4:0A:83:AD:3F:3A:C0:85:21:A6:E3:68:3B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E66A1D385154F72502E410A102567949D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gZW3e9qkdfQKg60_OsCFIabjaDs.roa
Signing time: Fri 22 Mar 2024 14:47:45 +0000
ROA not before: Fri 22 Mar 2024 14:47:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.9.156.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.72.0/23 maxlen: 24
94.156.75.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 06:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:a1:d3:85:15:4f:72:50:2e:41:0a:10:25:67:94:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 22 14:47:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8195b77bdaa475f40a83ad3f3ac08521a6e3683b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:f0:21:89:d6:97:d0:09:e4:f3:ae:c9:d8:
1e:23:16:08:ae:b3:b4:c8:45:0c:f3:a6:89:7b:54:
97:b9:c9:b5:5a:b4:fd:1c:83:68:f3:3e:18:d5:da:
4f:e2:c9:3b:3d:28:3e:4d:ff:26:cc:23:8c:b4:ee:
6c:04:4c:0c:ad:00:56:2e:0a:c3:87:0a:04:81:01:
69:19:4a:fa:cd:f8:3c:de:3c:c8:fc:27:a0:0a:3d:
b0:8a:6e:a8:a9:43:54:53:15:e7:ef:0a:ec:42:55:
43:d3:a3:69:37:d9:1e:93:91:d8:de:02:6e:31:94:
08:1e:f6:c5:3c:de:93:c9:8c:d7:43:95:5b:2f:56:
f7:a6:da:74:f0:e5:a0:81:c7:fc:e9:17:94:85:3e:
d5:66:d2:ec:6a:ab:3f:a5:18:a2:41:a5:49:7c:e5:
5b:17:ad:9a:a7:6e:2c:2d:15:c7:9b:5b:01:36:bd:
b9:62:2d:d9:2a:bb:5e:a2:e6:dc:b1:62:5b:fc:91:
f7:91:10:4f:31:84:ac:6d:f4:56:9e:ef:68:40:14:
9b:46:59:40:40:42:4e:4d:d4:e2:e1:dc:55:0b:05:
59:28:ab:74:5f:dd:b1:af:ec:4a:7d:4a:a7:54:dc:
90:7f:ef:9e:9b:ab:4d:01:d3:32:81:cf:71:63:f7:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:95:B7:7B:DA:A4:75:F4:0A:83:AD:3F:3A:C0:85:21:A6:E3:68:3B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gZW3e9qkdfQKg60_OsCFIabjaDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.72.0/23
94.156.75.0/24
94.156.239.0/24
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.252.176.0/24
185.254.37.0/24
193.37.41.0/24
194.48.250.0/24
194.55.186.0/24
194.55.224.0/24
194.59.31.0/24
194.169.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a0:ee:17:a9:57:91:9c:f7:19:3f:b1:6b:8c:74:73:ea:6d:
ad:6c:36:a4:42:c5:6e:7c:af:e9:5d:2d:da:20:ad:8d:ec:b5:
8a:77:02:33:39:86:2b:9a:6a:89:fa:a9:65:eb:3d:ea:44:1e:
0e:0f:33:94:3d:1a:c9:98:49:db:1d:6d:b1:26:f5:b4:1d:83:
d8:64:e9:34:e4:60:85:33:e8:26:55:a0:31:63:70:da:71:da:
20:eb:79:42:31:eb:ef:9b:fc:a6:b7:f6:03:06:50:98:ab:99:
1b:9d:a6:ed:9c:43:72:cf:50:61:20:6f:d5:b6:39:50:79:73:
29:b3:91:68:de:f6:37:f8:06:c3:5b:c1:bb:21:f5:3e:36:41:
30:f8:89:4d:74:2a:d9:79:63:95:4b:f4:8a:56:1d:2a:06:a5:
61:3d:fb:7a:71:88:bf:65:4b:ae:42:43:6c:24:f6:db:21:70:
de:c7:94:ee:9d:c2:ec:e7:69:93:48:44:96:a5:56:a1:eb:9a:
bd:f7:c3:02:51:8b:3a:12:7e:f8:6b:0b:66:d4:cc:11:dd:4d:
d2:fa:23:88:c3:7f:11:6c:66:f9:d9:29:f2:6c:3a:91:ea:4c:
77:35:e0:25:23:07:38:e4:8e:17:71:aa:5e:87:fb:87:83:d8:
77:4f:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 07:44:25 2024 by rpki-client on console-ams.rpki-client.org