Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k6iq02gqECReMGEiV7wnVIoFqFk.roa
File: k6iq02gqECReMGEiV7wnVIoFqFk.roa (raw, json)
Hash identifier: uSRqN/s+WDzg4CwB4Pcs+zEOTHMFU15PNdJSWYJAIiw=
Subject key identifier: 93:A8:AA:D3:68:2A:10:24:5E:30:61:22:57:BC:27:54:8A:05:A8:59
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E74D0CF4343E92BADCF566F20A63E1C35
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k6iq02gqECReMGEiV7wnVIoFqFk.roa
Signing time: Mon 25 Mar 2024 08:53:45 +0000
ROA not before: Mon 25 Mar 2024 08:53:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.9.156.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.72.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.254.37.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 08:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:d0:cf:43:43:e9:2b:ad:cf:56:6f:20:a6:3e:1c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 25 08:53:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93a8aad3682a10245e30612257bc27548a05a859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:72:df:2b:21:f5:cb:c0:2f:f9:ac:e7:12:
66:4d:9e:ab:ad:57:7c:89:92:5b:ba:7d:7f:f1:5e:
f5:ee:d3:6c:52:9c:14:d1:d3:c5:4a:a9:8f:90:2c:
5a:da:6b:7c:38:80:95:c4:71:fd:1a:76:ed:51:18:
4e:64:59:35:78:d2:4d:6d:9b:f2:3d:68:97:6b:04:
f4:96:09:d8:ce:f0:3c:9a:85:3d:9f:68:25:4a:c8:
b3:c5:f3:7b:d6:2e:9e:df:c7:ec:cc:9f:7c:aa:e0:
c4:90:1d:5e:cb:e6:86:b8:6a:a4:18:50:b8:8d:9d:
d3:a9:7f:32:ef:13:b9:91:df:1a:7e:fa:18:77:26:
6a:ca:f4:a8:e6:d4:46:f2:69:67:2a:52:e1:3d:ce:
92:6a:77:91:a0:9a:eb:6f:63:c4:00:48:fa:b5:40:
aa:1f:9c:2d:23:3d:7a:f9:15:90:18:c8:d5:5f:81:
dc:21:44:a9:28:10:77:4b:92:da:64:3e:29:53:64:
c7:9e:aa:ff:3e:a9:2d:fd:79:71:2c:a2:a6:bd:9e:
2a:71:59:b8:a4:a4:dc:ff:31:e4:a5:79:f8:3b:e5:
a1:8f:44:90:54:79:8d:05:e0:53:4c:e4:f4:55:42:
25:bf:0f:f8:67:93:56:e9:9f:53:9a:e1:f0:7a:00:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:AA:D3:68:2A:10:24:5E:30:61:22:57:BC:27:54:8A:05:A8:59
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k6iq02gqECReMGEiV7wnVIoFqFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.72.0/23
94.156.239.0/24
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.254.37.0/24
193.37.41.0/24
194.48.248.0/24
194.48.250.0/24
194.55.186.0/24
194.55.224.0/24
194.59.31.0/24
194.169.172.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ae:6f:f2:b7:7f:cc:6f:1a:39:a4:9f:ce:51:02:91:2f:8a:
c0:6f:61:ec:12:cc:d7:ab:e0:82:55:f6:1c:e4:4b:c7:8e:62:
e8:0c:d7:23:91:f5:0e:ba:4a:4d:f3:a1:cb:c3:f1:9c:23:da:
55:ca:86:e4:bd:5a:59:72:cf:c9:8d:0f:2b:47:cb:de:59:9e:
82:c2:3e:13:81:ed:42:6b:ba:ad:b6:bf:aa:4d:dc:6a:25:1a:
96:99:1e:74:6a:3d:48:fd:13:76:e0:03:1f:39:05:58:40:12:
8a:9f:88:4d:a3:de:c6:5a:51:7b:72:c7:09:bd:08:84:ce:04:
ba:27:45:74:78:b5:e2:44:4d:df:a1:19:84:12:01:c2:bb:fc:
6e:57:16:6c:76:b2:93:07:ca:83:67:a9:ce:5f:94:ac:fb:f7:
8c:49:68:3a:33:85:40:e2:fe:e1:d4:ef:b5:ba:3a:9b:46:a5:
cc:83:64:53:06:1a:a3:32:6f:02:56:5f:d0:92:ca:9d:00:5d:
0a:1e:2c:69:2f:9b:b8:8e:6e:83:6c:18:7a:9e:c9:9b:6d:70:
00:e2:d9:1c:fe:0c:57:c8:62:b3:28:13:88:be:b7:0f:af:be:
46:32:71:e6:a3:45:bc:0c:d7:80:d7:d7:56:99:49:25:73:a7:
bd:1c:e2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 11:55:48 2024 by rpki-client on console-ams.rpki-client.org