Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kBgFbNSY2JPNZM171SfXfa_DqOI.roa
File: kBgFbNSY2JPNZM171SfXfa_DqOI.roa (raw, json)
Hash identifier: A7kIOzoYzpVQ8vbbnMrcJ2oxA3PQjS3Ywal+bVsarF8=
Subject key identifier: 90:18:05:6C:D4:98:D8:93:CD:64:CD:7B:D5:27:D7:7D:AF:C3:A8:E2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F0692697C6D6A59A5AECC2CA69ECE84D1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kBgFbNSY2JPNZM171SfXfa_DqOI.roa
Signing time: Mon 22 Apr 2024 16:10:09 +0000
ROA not before: Mon 22 Apr 2024 16:10:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203168
IP address blocks: 45.88.90.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 09:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:06:92:69:7c:6d:6a:59:a5:ae:cc:2c:a6:9e:ce:84:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 22 16:10:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9018056cd498d893cd64cd7bd527d77dafc3a8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c5:32:bd:be:2d:2f:1c:d9:ce:2b:aa:64:cf:
d7:c1:c4:05:7c:be:a8:0b:2b:26:f3:93:9b:cb:f2:
68:b8:b4:71:dd:4d:5e:f6:ef:fb:d5:7a:75:f0:c8:
40:88:56:f6:b1:ec:00:5d:65:83:33:aa:33:2a:64:
89:ef:21:e8:0d:9f:16:98:88:6f:ae:bb:99:2f:05:
93:23:07:38:a7:6b:85:f7:a8:7b:23:34:62:70:e6:
70:d6:3b:11:db:1e:19:f0:35:27:d0:ee:ff:73:43:
c1:79:1d:fa:e9:f0:8d:35:99:82:c5:19:85:4b:42:
91:f8:fd:d5:89:f4:b4:2a:fe:e7:5b:aa:f6:1c:68:
5e:74:4e:af:d4:94:25:87:95:45:2c:f8:84:15:61:
ee:48:77:04:9f:59:25:4f:2b:d8:bf:95:a6:af:eb:
d9:2a:13:11:de:2d:32:ce:b6:e8:bd:93:20:0d:f3:
3e:a7:60:73:e3:c0:79:09:8c:ad:09:6d:52:02:4c:
2b:5c:4d:ae:79:2d:ec:bc:7c:73:f5:f4:62:d9:99:
81:33:8c:0f:83:4d:0e:c9:c7:27:dd:ad:d8:2f:33:
e5:7f:ee:f3:8b:a8:8e:1a:9c:23:16:0c:0b:77:4f:
6a:83:97:bb:03:04:31:c8:fa:0c:12:d5:09:e4:ca:
35:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:18:05:6C:D4:98:D8:93:CD:64:CD:7B:D5:27:D7:7D:AF:C3:A8:E2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kBgFbNSY2JPNZM171SfXfa_DqOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
85.209.133.0/24
87.120.84.0/24
87.121.105.0/24
94.156.10.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
39:97:db:9c:0b:dc:6e:4c:30:11:f0:dd:10:6e:91:6c:74:5f:
07:51:35:06:db:a7:74:0f:af:06:d1:45:29:be:35:d2:3e:7a:
37:6c:12:06:3d:e6:bf:89:2f:0d:1f:d5:73:61:b7:cd:04:a8:
6f:cd:cf:8a:bf:15:52:33:47:4e:89:c7:f5:62:04:22:14:06:
a5:7f:77:54:5e:43:a2:2e:95:0f:78:47:9b:fa:d6:17:16:0e:
a0:5b:d7:7f:1c:63:9e:86:5e:a1:07:9e:d1:a7:e3:04:4f:fd:
cc:bb:23:8e:ec:83:12:4b:ff:48:c2:f9:47:43:7f:27:b6:71:
a2:81:59:1c:d4:6e:e7:6a:0d:53:73:40:bb:7f:8a:cd:dc:ee:
37:d6:a9:ed:5f:cc:9b:2e:0b:fd:2c:fc:b1:1c:e1:8b:43:55:
89:51:95:14:07:1c:79:82:6e:9b:a5:b2:03:83:3f:b7:ce:fe:
6a:29:22:11:50:04:32:27:0e:dd:f7:5d:60:1d:af:7e:e1:e0:
d8:0f:61:da:11:16:57:a6:8e:a0:42:d3:ba:bc:1a:fd:6f:f5:
1c:0a:ce:cf:5f:48:c6:6f:b1:a3:f5:10:57:6c:9d:b1:a8:99:
18:20:d0:c4:37:99:77:dc:c6:75:d9:38:7f:53:15:0a:c3:99:
47:69:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:17 2024 by rpki-client on console-fra.rpki-client.org