Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h5D7dYz4lJ7uBfyZwvp-phW7sHQ.roa
File: h5D7dYz4lJ7uBfyZwvp-phW7sHQ.roa (raw, json)
Hash identifier: e47mHLezsSROKdm/AEnCyxFLlxJQwRUgDspDqqn9hG4=
Subject key identifier: 87:90:FB:75:8C:F8:94:9E:EE:05:FC:99:C2:FA:7E:A6:15:BB:B0:74
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B1E475F5A3A780F849F6EE6DA9D4210DE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h5D7dYz4lJ7uBfyZwvp-phW7sHQ.roa
Signing time: Wed 11 Oct 2023 10:27:55 +0000
ROA not before: Wed 11 Oct 2023 10:27:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 45.84.222.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
185.226.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 08:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:47:5f:5a:3a:78:0f:84:9f:6e:e6:da:9d:42:10:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 11 10:27:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8790fb758cf8949eee05fc99c2fa7ea615bbb074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5a:50:ab:0a:7e:f7:54:da:a8:72:0c:2e:25:
6d:ad:8a:e7:28:28:3d:48:82:fd:17:93:7e:a3:1f:
a9:22:de:73:3c:89:5f:05:0f:1b:ed:b9:64:6c:0e:
d9:79:f0:ee:34:1b:98:77:e4:51:85:b9:0a:87:eb:
d2:d2:01:ac:8a:9a:43:30:b3:cc:c8:87:cc:69:e9:
21:1c:58:ee:b1:4c:dc:53:47:eb:dc:c9:49:a5:8f:
45:ad:ad:4a:b5:96:80:44:c0:1a:4f:ca:03:19:1d:
72:a1:4d:0d:0b:30:f3:e3:a6:4f:c8:58:43:ff:2d:
3e:3c:61:45:aa:d2:31:f9:1f:8f:c7:85:26:f1:e5:
0c:04:3c:0e:08:da:ba:05:90:bd:53:61:7d:37:82:
ef:e8:af:5b:f3:d7:34:9a:53:6d:c3:14:56:24:da:
88:53:77:13:27:b8:7d:13:38:69:42:ac:dc:40:9e:
fa:8a:2e:cd:59:dd:9c:9c:47:b9:26:12:0b:01:63:
3f:66:a4:37:a2:b7:8e:6b:91:57:6f:75:63:24:e1:
e7:a1:4c:7a:3f:27:b2:af:8f:3d:0e:39:ce:14:5c:
4c:58:0b:82:e7:cd:8a:92:b2:1d:72:fd:77:dc:c0:
39:a4:bd:57:2e:9c:2a:8e:bc:82:f6:9d:e3:8d:fe:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:90:FB:75:8C:F8:94:9E:EE:05:FC:99:C2:FA:7E:A6:15:BB:B0:74
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h5D7dYz4lJ7uBfyZwvp-phW7sHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.222.0/24
79.110.50.0/24
94.156.176.0/24
178.215.237.0/24
185.226.173.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:38:d4:1b:4c:fc:57:46:cf:0b:ec:9a:d6:47:36:2f:88:6b:
0c:7b:28:4b:6a:bd:a5:41:16:5f:a2:b5:71:64:0d:35:76:bd:
33:20:b8:64:7b:47:6a:7c:01:38:3f:e0:61:c5:ab:75:d3:56:
78:6a:c0:bd:6f:b4:14:34:1a:ba:a0:e1:3d:67:92:e0:0b:3f:
42:be:f1:48:fa:dd:06:97:8d:e1:0c:62:ac:be:07:c6:e6:75:
1f:46:41:86:e7:5a:96:95:09:ce:00:53:f2:31:c2:ce:e3:a2:
7c:75:fb:11:cc:ee:11:a8:03:11:0c:d3:e9:69:74:67:4a:34:
f2:8f:e7:a3:fd:8a:bf:0d:d8:90:02:3b:54:3b:84:cf:e6:70:
b1:12:a0:8d:ab:cf:7d:c7:7f:1c:9e:0e:6c:03:77:d4:21:78:
6d:a1:00:41:47:0f:07:69:0c:a2:93:13:2a:62:d5:7c:ea:43:
ae:86:27:78:e4:ac:5e:fb:8c:7f:33:50:18:88:65:3b:c6:03:
fd:44:a5:48:93:9a:e1:39:4b:92:35:99:71:b0:80:28:ca:e8:
4f:b6:16:2d:96:14:00:43:69:c2:eb:77:64:7d:03:d0:b5:2d:
7e:d9:bd:e0:a4:08:2e:f2:1f:d3:39:24:db:98:31:d8:fb:b2:
40:15:29:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:40 2024 by rpki-client on console-ams.rpki-client.org