Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iQ5jD1YyytNIGJ8tmD7bAJodBaU.roa
File: iQ5jD1YyytNIGJ8tmD7bAJodBaU.roa (raw, json)
Hash identifier: AKuJ+ixSgftdUXcBQFNJwBz3p37wvOguLPZur2wZ2VM=
Subject key identifier: 89:0E:63:0F:56:32:CA:D3:48:18:9F:2D:98:3E:DB:00:9A:1D:05:A5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CB0A65044D074D8DBB3BC0334BFCF4136
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iQ5jD1YyytNIGJ8tmD7bAJodBaU.roa
Signing time: Thu 28 Dec 2023 13:38:58 +0000
ROA not before: Thu 28 Dec 2023 13:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 45.66.229.0/24 maxlen: 24
87.121.100.0/24 maxlen: 24
87.121.101.0/24 maxlen: 24
194.59.30.0/24 maxlen: 24
88.218.76.0/22 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.64.0/23 maxlen: 24
87.120.89.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
87.121.57.0/24 maxlen: 24
87.121.56.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
87.120.220.0/23 maxlen: 24
94.156.78.0/24 maxlen: 24
87.120.35.0/24 maxlen: 24
87.120.34.0/24 maxlen: 24
87.120.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:a6:50:44:d0:74:d8:db:b3:bc:03:34:bf:cf:41:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 28 13:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=890e630f5632cad348189f2d983edb009a1d05a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d2:83:dd:cf:88:31:4a:c0:9a:d8:cf:1e:47:
c6:19:2c:56:49:34:8e:9c:4d:75:3a:ad:1e:60:01:
19:8e:12:4a:93:58:0b:98:f8:b1:4c:8e:65:61:1f:
f5:fd:2f:14:f7:fa:60:0a:f0:88:ce:04:fb:59:7d:
90:1b:49:99:a5:23:2e:bd:74:b8:20:1f:4c:d1:c1:
ef:17:74:d5:64:a5:b6:b0:48:79:36:64:f9:6b:06:
94:50:54:08:80:ec:53:64:b0:c3:3f:f8:78:57:db:
3a:4d:7e:83:35:a3:bb:2c:1e:d8:ac:8d:28:47:e3:
2b:b9:07:48:4f:25:43:32:7e:45:f2:c4:a7:b3:9e:
3a:0a:a5:59:1a:79:fa:d7:98:c4:99:dc:4a:8f:62:
af:15:8e:93:b4:01:a8:2b:ba:e9:9e:00:81:dc:46:
d7:fe:ed:45:26:27:d1:6a:98:52:4d:12:53:06:00:
88:a4:74:3f:d2:55:c7:51:d3:8a:0a:17:b5:9f:ec:
66:16:c5:94:b9:e6:77:77:d5:9e:e6:9f:0d:9b:0d:
4b:a9:3c:5f:86:39:fd:a6:54:d5:b6:d2:6a:65:f5:
7f:34:dc:07:d4:57:34:07:3f:fb:fc:bc:be:f4:e5:
ba:c0:58:81:49:2e:73:c2:75:6f:b4:b8:54:a8:8c:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0E:63:0F:56:32:CA:D3:48:18:9F:2D:98:3E:DB:00:9A:1D:05:A5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iQ5jD1YyytNIGJ8tmD7bAJodBaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.229.0/24
84.21.173.0/24
87.120.32.0/24
87.120.34.0/23
87.120.64.0/23
87.120.89.0/24
87.120.220.0/23
87.121.56.0/23
87.121.100.0/23
88.218.76.0/22
94.103.126.0/24
94.156.78.0/24
194.59.30.0/24
194.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:97:4c:52:1c:0d:f1:27:5d:ac:a9:c5:cb:3a:1d:a0:4d:d4:
f4:5f:d4:d2:d6:24:1a:01:29:97:af:71:f3:5f:f6:ba:bb:e3:
23:8f:70:5f:cb:9a:a7:09:28:32:85:ff:e5:79:0b:c2:e7:3b:
ed:d0:8d:c2:4e:d3:61:62:02:94:2c:12:5a:e9:00:bf:8e:da:
46:ee:fc:28:55:0a:13:b8:85:71:da:a4:07:d1:f6:1b:9b:fa:
12:d9:11:97:37:e7:11:9f:33:ba:64:fe:44:9b:98:f5:0f:be:
9e:5b:2d:ab:7c:b6:de:73:47:30:bb:b1:af:67:a9:81:f1:2a:
96:45:2b:79:d1:8b:68:eb:34:97:62:ae:b4:a0:81:4d:96:f3:
21:0c:4e:85:29:3b:83:70:ef:3b:93:3a:06:e0:43:e0:e3:04:
9b:af:5e:08:53:f3:80:c8:44:9e:9f:c4:7e:9c:cd:f9:e9:ba:
b7:c2:3f:de:7e:fd:34:14:19:24:21:12:10:9c:92:07:7a:d5:
f4:b1:d7:ab:57:21:ae:ca:89:f5:14:6e:f4:c4:84:86:c4:35:
23:12:6b:ba:7f:4c:95:0e:e4:d2:d5:93:d1:09:41:9c:3f:75:
bb:2d:5b:27:b7:1d:6d:f7:5c:3d:b6:c0:c5:8e:90:77:81:2b:
35:12:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:41 2024 by rpki-client on console-ams.rpki-client.org