Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lHOgr13AvJ8vZWXDbNlHBuVeEtw.roa
File: lHOgr13AvJ8vZWXDbNlHBuVeEtw.roa (raw, json)
Hash identifier: f0QEMPkhboh6zChzHO9yiCpVgjBOiFasblZvsP627O0=
Subject key identifier: 94:73:A0:AF:5D:C0:BC:9F:2F:65:65:C3:6C:D9:47:06:E5:5E:12:DC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019123021646ADEA1AF775AAD792543D5604
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lHOgr13AvJ8vZWXDbNlHBuVeEtw.roa
Signing time: Mon 05 Aug 2024 14:47:04 +0000
ROA not before: Mon 05 Aug 2024 14:47:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.58.95.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.35.18.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.31.222.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
195.178.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 05:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:02:16:46:ad:ea:1a:f7:75:aa:d7:92:54:3d:56:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 5 14:47:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9473a0af5dc0bc9f2f6565c36cd94706e55e12dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c7:e6:1c:e3:8d:ba:ec:6b:a2:1d:12:01:6c:
54:28:fe:a1:a1:94:a7:bc:4e:ac:e9:76:92:a9:18:
46:ab:18:dd:af:60:63:40:96:2c:70:e1:a8:34:a5:
97:74:38:75:e6:d8:bd:6e:39:0b:ed:3c:01:7d:c9:
b7:2f:5c:a0:a6:e4:b9:bb:9a:01:c4:3e:e7:3d:48:
ef:e3:6a:8b:f7:11:70:b8:d6:c0:e9:38:03:c6:ee:
a5:16:57:21:d8:20:a0:00:23:f0:cc:e6:a6:f9:55:
11:d4:49:18:46:ad:bd:83:fe:b5:d1:99:64:bc:bc:
4d:c9:54:48:f8:38:e3:b7:65:0c:aa:f4:56:99:a8:
44:1f:c8:a1:7e:00:aa:38:89:73:c7:7d:1d:3f:c1:
38:5d:6b:d6:fb:03:5b:11:d0:f6:6f:74:cc:e8:bf:
69:07:cc:6b:fd:2f:13:15:61:76:f5:1c:4a:24:4f:
6f:fb:73:03:6a:e5:4e:56:68:84:9b:a5:fd:8f:4c:
76:fd:4b:1a:6a:9b:5d:46:c0:ae:c7:72:3c:68:71:
2e:65:58:29:5a:2a:04:0b:c6:25:55:e1:d0:2b:dd:
fb:40:11:ee:59:f7:7e:03:b4:c5:92:ae:bc:99:1f:
51:d0:dd:cd:c2:f1:ca:b6:77:06:78:c6:b0:d2:ef:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:73:A0:AF:5D:C0:BC:9F:2F:65:65:C3:6C:D9:47:06:E5:5E:12:DC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lHOgr13AvJ8vZWXDbNlHBuVeEtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
45.8.92.0/24
45.88.90.0/24
45.128.96.0/24
45.128.232.0/24
45.144.154.0/24
45.151.89.0/24
80.76.51.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
84.54.51.0/24
85.31.47.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.58.0/24
87.121.69.0/24
87.121.221.0/24
92.119.196.0/23
93.123.39.0/24
94.103.124.0/23
94.154.160.0/22
94.156.8.0/24
94.156.10.0/23
94.156.79.0/24
109.206.237.0/24
141.98.1.0/24
141.98.4.0/24
147.78.102.0/23
171.22.72.0/22
178.215.224.0/24
185.216.70.0/24
185.216.84.0/22
185.218.84.0/22
193.35.18.0/24
193.37.41.0/24
193.37.44.0/24
193.222.96.0/24
194.31.222.0/24
194.48.251.0/24
194.55.224.0/24
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
00:45:22:a5:53:1b:f2:ba:2d:0a:3c:40:1a:7c:e6:66:2d:a2:
55:41:8c:f3:eb:17:e0:ca:2a:e6:f0:2a:f7:b1:2e:ba:e6:f9:
98:11:c6:38:34:91:e1:50:55:f1:ff:b1:a6:4f:f6:f0:ee:ad:
09:ab:21:1b:b9:91:60:f0:42:17:9a:cf:97:51:f6:37:47:3c:
49:7b:13:ed:6f:45:de:aa:f2:24:bf:43:b0:61:41:c6:e9:7a:
b9:99:c7:32:85:34:ae:0a:c6:1f:4f:b8:e1:20:07:f4:df:fb:
19:31:e0:cd:cf:a4:c3:54:a9:d1:f3:86:2a:49:51:57:ce:e2:
5b:f7:7e:fa:86:a0:55:08:4f:8b:fe:89:8c:8e:f4:5c:c3:b6:
76:f8:f8:0c:f2:a0:c9:39:12:09:d9:85:7e:26:e6:14:53:c9:
8a:71:6c:1a:ba:ea:ec:94:22:64:db:58:fb:78:e7:25:9b:4e:
d2:22:c9:5d:07:38:0a:59:9e:0c:61:01:b0:93:4b:9c:7b:b8:
dd:8e:a7:65:11:63:df:2c:3e:51:0f:48:f1:6a:38:f7:04:45:
c1:4e:64:da:a4:15:d9:a7:c5:79:99:3d:e5:55:34:0a:51:58:
9e:6c:b8:55:95:ec:6d:7e:90:5e:c5:70:fd:91:11:09:1f:4c:
dc:e7:82:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 06:29:46 2024 by rpki-client on console-fra.rpki-client.org