Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gbvW5--AbUTkX1l_KcQ1xIoW9v8.roa
File: gbvW5--AbUTkX1l_KcQ1xIoW9v8.roa (raw, json)
Hash identifier: bvSEsJ3S50fvtLURoIWpM0ttWr6XHhHPHncoKZUYQDw=
Subject key identifier: 81:BB:D6:E7:EF:80:6D:44:E4:5F:59:7F:29:C4:35:C4:8A:16:F6:FF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D8E4D5981B9ED0E272445CFE74F787C8B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gbvW5--AbUTkX1l_KcQ1xIoW9v8.roa
Signing time: Fri 09 Feb 2024 14:37:30 +0000
ROA not before: Fri 09 Feb 2024 14:37:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203168
IP address blocks: 45.88.90.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 08:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8e:4d:59:81:b9:ed:0e:27:24:45:cf:e7:4f:78:7c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 9 14:37:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81bbd6e7ef806d44e45f597f29c435c48a16f6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:44:4d:87:ad:61:ca:a6:f3:e4:32:01:e9:fb:
09:7b:f5:f5:92:51:f4:1a:99:85:9c:90:9a:3c:0e:
98:f6:d6:38:0c:5f:4b:0f:f5:b2:05:7e:ee:11:ba:
70:df:8c:cb:bf:a4:ba:45:d5:a8:3f:7e:d3:64:45:
b3:11:a5:66:a2:4f:f0:a7:29:5c:b6:24:9a:b2:3c:
36:c1:5f:ef:97:f5:55:27:8b:a8:41:63:cb:03:6c:
aa:01:3b:c8:47:69:54:30:65:ea:56:ac:d9:f2:11:
82:d7:97:46:86:1c:3f:2f:d0:11:5a:31:63:d8:83:
bb:b6:ed:23:33:a8:09:f6:82:19:e8:42:1b:8f:4a:
55:ef:e8:f3:61:56:b4:70:3f:9c:82:0b:bf:e1:94:
12:6e:e8:84:eb:e9:30:13:bf:de:d9:f0:b8:70:05:
86:83:c0:76:55:e4:03:7e:eb:55:b0:ae:cc:cb:14:
dc:75:a3:3c:02:7a:23:c0:71:f1:ba:c6:4c:15:a4:
34:14:e4:11:10:ee:29:35:9c:e1:83:8a:60:a4:fd:
5a:11:a0:43:44:88:4c:40:a6:1c:0c:97:9c:e5:72:
9d:e9:37:ba:d6:04:68:e3:ee:8c:63:2d:99:ab:1a:
0f:c9:49:72:8f:9d:52:a4:69:99:9a:86:94:c2:bb:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BB:D6:E7:EF:80:6D:44:E4:5F:59:7F:29:C4:35:C4:8A:16:F6:FF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gbvW5--AbUTkX1l_KcQ1xIoW9v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.128.96.0/24
87.120.84.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:1e:e8:27:f5:49:26:5b:52:3d:1e:a4:44:e2:7a:ea:83:e2:
77:5b:ee:fc:5b:32:cf:be:95:74:f7:4e:f5:d2:7d:a0:42:ba:
f8:e3:0e:39:41:77:54:37:31:4c:22:90:14:64:da:98:9c:e3:
ea:bc:b9:db:c4:6c:cd:88:1c:1f:30:16:bb:b4:d0:5d:f7:25:
79:48:39:19:2f:2c:1a:84:84:35:2e:b8:bf:98:b8:e9:af:a8:
87:e1:b7:4f:25:8b:c4:49:bc:0a:19:e2:9c:f9:a3:5f:6b:b7:
6d:84:2b:4a:1d:a2:1b:36:80:3b:e4:e1:90:b5:c2:36:be:d6:
ea:59:40:88:21:ca:8f:f3:b2:05:35:7f:90:ef:5c:8d:65:bc:
cf:2e:11:b4:a8:c4:53:27:2f:7d:81:06:86:3b:c9:30:bf:b8:
5c:f5:f8:ce:7c:ea:b4:62:2e:98:42:c6:fa:e8:cc:8d:3d:4f:
b5:e1:2c:9e:66:db:86:17:54:4d:9c:40:ad:2a:4e:95:7b:0e:
0a:0c:ea:cd:3d:aa:e0:2a:10:d5:cb:ea:0c:ef:b3:95:9f:67:
4b:e3:a0:48:22:48:d4:e9:60:4f:7c:d0:81:5d:72:f8:4d:91:
84:96:28:da:0b:24:5f:b9:6d:42:a0:76:02:41:cd:41:9c:e5:
93:45:ae:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 12:46:22 2024 by rpki-client on console-ams.rpki-client.org