Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h0jciMqYdbm55sEKKAjN-5VuKoo.roa
File: h0jciMqYdbm55sEKKAjN-5VuKoo.roa (raw, json)
Hash identifier: EJzbNSMhLsICin+lfqZtwDjlNB8xrhC5FZk/G+hZDGs=
Subject key identifier: 87:48:DC:88:CA:98:75:B9:B9:E6:C1:0A:28:08:CD:FB:95:6E:2A:8A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D5F397EBFAC3A43AC1BF37C61A04FC114
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h0jciMqYdbm55sEKKAjN-5VuKoo.roa
Signing time: Wed 31 Jan 2024 11:13:39 +0000
ROA not before: Wed 31 Jan 2024 11:13:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 5.253.64.0/24 maxlen: 24
5.253.66.0/24 maxlen: 24
5.253.67.0/24 maxlen: 24
45.8.94.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
91.92.26.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:39:7e:bf:ac:3a:43:ac:1b:f3:7c:61:a0:4f:c1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 31 11:13:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8748dc88ca9875b9b9e6c10a2808cdfb956e2a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:10:bb:44:78:2d:d4:c8:ec:20:46:b9:90:
91:36:a5:c2:34:c9:e6:c6:af:7b:fa:9f:30:b2:f7:
3e:ad:df:04:4f:f7:59:b5:70:25:e7:0b:e4:c2:3f:
46:bb:02:ca:a7:7d:f5:d6:a1:0b:c5:9f:ac:ca:af:
c7:08:31:b0:bc:b6:16:77:5a:6e:55:e2:85:39:4a:
de:96:4c:5a:bb:3d:c9:84:b2:7b:5a:b1:48:fd:af:
77:b9:35:77:3e:31:1e:60:ae:b8:8f:d5:b9:57:e0:
89:28:3a:08:f8:9a:2f:bd:89:20:c3:ed:57:c4:fd:
a8:78:f6:15:63:cc:3c:bc:58:5d:15:a9:38:fb:a6:
78:08:ca:dc:fb:d3:07:48:d7:cf:71:2a:82:57:36:
a9:bf:24:ed:13:b7:34:3d:61:37:1a:b9:80:e1:6f:
c6:42:01:0b:1d:96:98:a2:bf:f1:74:76:01:00:14:
df:6d:29:c7:bb:29:12:94:62:3f:52:3c:54:d4:eb:
53:bf:cd:ee:75:b0:00:d1:fd:3a:ef:7d:b7:10:2e:
73:22:a7:25:b6:ab:f2:2a:42:0c:16:bf:51:81:db:
7c:3e:88:f3:7f:17:a0:91:d8:ad:fc:c6:0c:c1:65:
2a:93:fc:1d:e4:ef:60:c8:64:77:92:85:44:44:70:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:48:DC:88:CA:98:75:B9:B9:E6:C1:0A:28:08:CD:FB:95:6E:2A:8A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h0jciMqYdbm55sEKKAjN-5VuKoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.64.0/24
5.253.66.0/23
45.8.94.0/24
87.120.192.0/23
87.121.60.0/22
87.121.114.0/23
91.92.26.0/24
93.123.75.0/24
93.123.80.0/24
93.123.119.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:3a:a8:bf:32:79:56:67:1d:6a:6c:2f:3a:27:12:68:c7:f5:
16:86:f6:5c:7f:8f:ab:92:a1:bd:14:0f:77:9e:87:6a:9d:40:
dd:db:29:ac:19:b6:08:ee:ff:4e:85:c3:f3:4a:51:34:f9:3c:
9d:fa:8f:98:7c:25:5b:20:e3:f2:8d:66:0b:6a:91:67:6b:f6:
0a:a3:bb:d2:8a:bf:60:db:56:5c:3e:4c:aa:14:50:b7:84:67:
22:dc:87:e2:ba:5d:f4:a8:c3:49:32:c9:e6:37:d6:b9:be:bc:
3e:99:89:d1:94:a3:18:4d:2d:c8:46:ce:fa:27:64:bd:48:28:
2d:01:5e:25:a6:1b:9c:97:05:8f:5f:df:0b:b7:4d:79:26:8c:
9d:99:de:67:d0:da:74:43:33:c5:10:ce:1d:54:51:5a:42:3c:
ea:a5:30:9b:69:2a:19:80:8b:ec:3c:79:bb:47:fe:13:0c:9f:
12:dc:1a:d5:32:c2:fa:c8:4b:1f:63:9c:ca:6f:c6:83:76:96:
62:00:ec:86:e3:24:09:91:8a:e3:12:2a:a2:ce:36:88:99:09:
52:9b:b4:6c:7e:4f:db:54:c1:6a:f4:54:73:82:d7:45:48:bd:
69:83:a1:9d:3e:9f:53:fa:26:38:30:fe:d0:3b:bb:9b:5e:f4:
80:fd:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 01:59:35 2024 by rpki-client on console-ams.rpki-client.org