Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hy5YH6a7795qOCqnzMmgmBmc6Vo.roa
File: hy5YH6a7795qOCqnzMmgmBmc6Vo.roa (raw, json)
Hash identifier: MBtD2UfA08HjdN86dKGFFa1ch3tRGIVJpJ3UbPJzIS8=
Subject key identifier: 87:2E:58:1F:A6:BB:EF:DE:6A:38:2A:A7:CC:C9:A0:98:19:9C:E9:5A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CED193468C53ED98D16A20CB01466E0E4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hy5YH6a7795qOCqnzMmgmBmc6Vo.roa
Signing time: Tue 09 Jan 2024 07:21:41 +0000
ROA not before: Tue 09 Jan 2024 07:21:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
185.226.172.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
31.13.211.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
45.88.90.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 15:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:19:34:68:c5:3e:d9:8d:16:a2:0c:b0:14:66:e0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 9 07:21:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=872e581fa6bbefde6a382aa7ccc9a098199ce95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:56:05:c3:16:89:8b:c3:30:61:e5:f7:b0:00:
e1:86:d7:c7:fb:d6:d6:38:50:e3:27:64:61:9a:65:
7e:e8:e7:5d:23:d3:09:fd:c2:40:7f:73:91:bb:67:
92:81:de:b1:ce:82:59:1c:7c:ca:e2:8a:2f:39:8b:
55:5f:ff:ff:d0:19:1e:5d:29:67:b2:1b:bc:be:9d:
00:77:2b:6b:16:4b:07:9f:a7:7b:16:44:5b:22:0e:
9f:ff:fe:38:c2:e4:2c:d0:4c:84:9c:25:00:39:93:
aa:69:78:aa:f9:57:e4:b3:6b:88:c0:f5:af:24:af:
c0:41:86:e0:64:af:96:9a:2e:a7:ab:0c:28:e1:fa:
c8:d7:f2:7a:a6:55:84:8f:c9:fd:c0:e7:44:c7:d6:
e8:da:48:31:e3:a9:ee:30:f2:3b:c3:27:ad:0f:50:
6e:82:c8:15:93:aa:df:c1:d0:57:aa:5f:9b:5c:29:
cf:fc:e5:1b:b7:18:90:bc:93:ba:72:41:45:14:54:
01:ec:fa:0a:b1:30:49:90:4e:c1:76:bc:b0:b0:90:
8a:16:e7:05:d1:33:44:17:3d:fc:06:9d:bd:b2:b8:
01:b2:1b:7d:70:b9:c4:8f:e9:8a:0d:e0:9d:cb:53:
f6:7d:03:d8:e7:7f:1c:d3:27:33:09:69:70:74:04:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2E:58:1F:A6:BB:EF:DE:6A:38:2A:A7:CC:C9:A0:98:19:9C:E9:5A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hy5YH6a7795qOCqnzMmgmBmc6Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
37.139.129.0/24
45.84.89.0/24
45.88.90.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.154.172.0/24
94.156.239.0/24
147.78.101.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.226.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.172.0/24
185.226.175.0/24
185.252.176.0/24
193.37.41.0/24
194.55.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bc:be:28:31:ee:84:5f:4a:20:d4:97:89:b3:b2:c5:2a:8f:
94:d8:10:0c:dc:3c:fb:32:0b:b6:50:bc:37:28:38:cd:2f:7a:
f8:ff:4b:62:0e:a5:b0:75:f2:68:4e:23:f0:4b:a1:98:f5:0c:
3d:a1:69:64:61:ce:fb:22:c5:75:82:3a:17:22:77:c3:1c:3b:
2c:c5:60:8d:37:9d:06:66:e5:66:4d:5a:8e:df:7f:6e:ad:cb:
a7:5e:e9:29:4e:99:0d:85:1d:cd:d7:54:59:fb:04:d2:b0:77:
9e:ff:21:1d:27:c8:e3:3f:ec:b2:3f:6f:6a:ac:84:b2:0d:6e:
22:b2:e6:cb:46:d8:4e:c0:54:46:79:f0:1e:fe:9c:1a:6c:e7:
0d:61:c6:24:0e:60:99:11:15:1a:b9:14:08:f8:5c:fb:c9:07:
d4:99:98:6a:65:80:ce:b9:5b:a9:85:a2:46:54:98:8b:eb:0d:
a9:51:31:9f:31:56:ef:f3:46:ec:44:ab:1a:93:3a:ac:75:10:
65:89:b6:a0:dc:01:e6:27:7e:bf:26:30:dd:be:12:e3:83:04:
b9:8c:28:47:73:e0:84:47:a0:5e:50:d2:84:a4:cf:94:e0:3c:
57:1e:cd:60:bc:06:0e:d7:e1:f5:63:b5:16:a9:f4:e8:7d:5a:
cc:a5:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 19:43:18 2024 by rpki-client on console-ams.rpki-client.org