Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k-ITCydxsNrGxQ_YU5WzF2EfLnE.roa
File: k-ITCydxsNrGxQ_YU5WzF2EfLnE.roa (raw, json)
Hash identifier: qpnO3yMVJHBHlnTJX2pTh/rw4NeiAytEobH+/mA5O1o=
Subject key identifier: 93:E2:13:0B:27:71:B0:DA:C6:C5:0F:D8:53:95:B3:17:61:1F:2E:71
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01905E6D99841F76E5BC5C095CCD5858D755
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k-ITCydxsNrGxQ_YU5WzF2EfLnE.roa
Signing time: Fri 28 Jun 2024 10:39:19 +0000
ROA not before: Fri 28 Jun 2024 10:39:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 37.139.130.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
85.217.144.0/23 maxlen: 24
185.225.74.0/23 maxlen: 24
193.149.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 10:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:6d:99:84:1f:76:e5:bc:5c:09:5c:cd:58:58:d7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 28 10:39:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93e2130b2771b0dac6c50fd85395b317611f2e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:ab:ba:8f:85:77:de:0b:61:45:70:f8:a3:
48:ff:51:31:29:51:d7:eb:7a:87:3f:7b:ab:55:53:
ec:67:6a:d8:59:34:26:75:96:2d:f6:56:19:a6:41:
da:6a:15:c8:5f:8b:b6:91:41:67:e3:c9:6e:e2:61:
92:c0:7c:60:9e:2c:a3:da:48:c0:e5:00:3c:e7:d0:
36:13:e9:86:74:48:b7:6c:d8:08:89:51:b6:ef:c1:
be:9d:fa:af:78:d8:69:f7:8d:ea:21:4a:38:3a:63:
9e:b9:95:a4:f7:09:7c:bd:4f:a1:39:a4:b2:28:7d:
f5:f2:b9:d2:52:e0:75:5c:c9:65:d2:b3:3e:9b:57:
39:ed:d3:a1:ee:1a:84:85:74:5b:43:a8:b8:39:5d:
7c:ef:d3:df:ba:1a:b7:07:b4:51:13:6f:f6:14:52:
3c:42:ce:4f:11:2b:f9:f2:e7:1a:53:6f:78:69:c9:
17:54:e1:f0:cd:6a:fc:a9:08:aa:e7:a5:a8:a3:76:
e3:0c:8b:5b:26:4d:63:4d:ce:34:8e:30:d3:48:eb:
a5:49:50:fd:99:41:5f:5f:83:64:69:4b:17:ea:b8:
1b:5d:45:aa:96:9b:05:5d:d1:9f:af:95:0b:fc:25:
0f:31:1b:69:b0:f0:16:6b:55:0b:4d:76:ad:05:9a:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E2:13:0B:27:71:B0:DA:C6:C5:0F:D8:53:95:B3:17:61:1F:2E:71
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k-ITCydxsNrGxQ_YU5WzF2EfLnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.149.243.0/24
79.110.61.0/24
85.217.144.0/23
185.225.74.0/23
193.149.28.0/22
Signature Algorithm: sha256WithRSAEncryption
76:49:0e:40:71:42:bd:3b:67:e1:7c:2a:fe:b2:6e:44:4d:32:
be:c2:97:c5:0b:f1:13:d4:3f:77:d8:f3:6d:7b:b1:36:28:e3:
5f:c7:3b:90:53:6a:f7:ba:1a:81:ae:c1:40:69:49:e8:12:a8:
5f:9f:e5:58:eb:10:59:b4:57:84:ab:67:8f:5f:67:9d:e7:6b:
32:b5:35:72:d6:c8:d2:39:a2:09:b7:ac:f8:95:56:05:5d:d2:
f5:e6:74:ae:e7:c5:83:61:d8:5e:a9:89:f3:41:62:98:3a:7c:
9a:44:dc:10:45:ed:06:c9:26:47:1d:f0:1a:cd:85:14:03:33:
98:8d:89:ab:a7:70:66:aa:bd:b3:0a:97:70:00:c8:2f:7b:ce:
eb:6f:25:d5:50:06:cf:5b:f7:c6:6c:41:05:6a:83:da:24:31:
9b:6e:de:97:ca:a4:6b:05:95:a5:5a:9a:43:af:35:61:92:ec:
4c:9d:32:aa:3d:8b:42:dd:dd:f6:6c:1f:4f:1d:37:28:5a:f0:
ca:0b:19:ae:c9:df:9c:52:58:e6:08:82:b7:ce:e4:5f:2b:2e:
75:a5:89:07:d4:72:46:dc:2f:6a:e9:77:60:e6:28:f1:02:de:
5e:9b:ff:50:c2:97:cb:78:e6:74:6f:d1:57:76:c6:1f:a3:f4:
42:95:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 12:34:23 2024 by rpki-client on console-ams.rpki-client.org