Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iY-AGqCo9XFzUre6Jlb2lHdMhRY.roa
File: iY-AGqCo9XFzUre6Jlb2lHdMhRY.roa (raw, json)
Hash identifier: P6vWMXti6T8ZdGiPc5ihk9k7NceOOkFNFuNqt6+M+e4=
Subject key identifier: 89:8F:80:1A:A0:A8:F5:71:73:52:B7:BA:26:56:F6:94:77:4C:85:16
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F5D664F34D7C9076347DE93659A666C6F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iY-AGqCo9XFzUre6Jlb2lHdMhRY.roa
Signing time: Thu 09 May 2024 12:48:56 +0000
ROA not before: Thu 09 May 2024 12:48:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399486
IP address blocks: 45.88.91.0/24 maxlen: 24
80.76.49.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
194.59.30.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 14:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5d:66:4f:34:d7:c9:07:63:47:de:93:65:9a:66:6c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 9 12:48:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=898f801aa0a8f5717352b7ba2656f694774c8516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:b7:11:39:e3:f4:a4:ba:a6:12:ea:be:f5:
a5:e6:6b:a8:a2:15:96:37:ac:0f:59:b3:08:f7:de:
18:ef:74:e1:98:20:0b:96:49:79:00:44:a1:4d:0d:
9c:63:57:50:ca:cb:c6:6a:4e:d5:fc:22:b8:59:27:
11:c8:df:b9:05:1e:0b:c8:4c:86:45:e1:e2:ff:c2:
6c:42:5b:75:dc:3f:99:86:3f:ac:8b:50:84:8a:0e:
39:3f:ff:b4:bd:2a:5c:9b:8d:c9:ae:c5:62:ef:b4:
84:4b:ad:fc:50:70:a7:24:53:a6:95:11:bd:4b:be:
84:4e:97:5e:a2:ff:bf:35:78:50:c2:fc:59:c0:97:
84:5b:55:04:74:53:70:41:d2:69:f1:54:18:4f:cf:
18:cc:ed:6f:ea:1a:68:0e:31:d6:e0:f3:17:00:a9:
2b:79:00:2c:94:1e:7a:a0:92:72:5b:6c:f1:72:4f:
cb:10:54:07:07:7e:05:fb:5c:a5:e2:27:75:62:30:
8d:60:f5:48:8b:47:a9:74:2b:39:cc:9b:ce:d1:02:
15:ac:ee:df:6b:8e:ac:99:f1:2b:61:ef:df:6f:6f:
7a:d5:10:14:ab:b8:5f:48:e7:b8:2a:a4:3e:93:c2:
5f:c3:7c:0b:91:fd:39:3e:8c:7b:1f:f4:1c:2b:ed:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8F:80:1A:A0:A8:F5:71:73:52:B7:BA:26:56:F6:94:77:4C:85:16
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iY-AGqCo9XFzUre6Jlb2lHdMhRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.91.0/24
80.76.49.0/24
85.209.133.0/24
194.59.30.0/23
Signature Algorithm: sha256WithRSAEncryption
22:9f:c8:e6:1f:14:7d:a8:56:9b:99:e5:0d:66:37:b6:a3:e3:
72:0b:16:dd:86:1d:23:0f:01:2c:e6:af:4b:41:2a:c6:19:70:
41:49:d4:50:7c:95:74:6c:da:ab:21:8e:96:4d:cd:36:f3:75:
0a:0b:8c:e2:1a:2c:55:99:e7:9a:1b:65:14:0f:f7:04:af:a4:
9f:33:23:3a:a1:3e:46:2f:ed:79:ef:9b:95:a0:b3:48:f1:10:
6b:6a:3b:e4:5a:50:22:5a:14:2a:fb:4d:1e:21:4f:d9:b7:26:
6e:1d:5b:0e:b0:c2:4a:92:20:92:8f:be:eb:6e:51:32:79:4d:
c2:5f:e8:80:bf:3a:80:3b:4b:83:3a:e8:ab:f8:99:cf:94:48:
fb:50:77:3b:7c:3d:bf:97:27:f1:36:26:28:d5:e8:d2:1a:59:
bb:7c:12:aa:fd:2c:9c:e3:a4:7b:19:b6:d9:b9:e8:66:16:7b:
ce:9d:f0:99:36:8d:88:22:24:83:44:19:85:04:92:71:ae:45:
36:6f:05:e5:c2:5f:7d:48:d7:87:8e:c5:91:db:ed:c8:ca:5b:
f3:d7:ac:72:5d:a9:c8:f9:89:b6:7b:30:cb:f9:52:be:8f:f3:
4d:6a:2e:37:bf:0e:36:51:e0:f4:a4:d7:d9:85:03:d2:38:f6:
e4:07:36:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:41 2024 by rpki-client on console-ams.rpki-client.org