Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m3PGTT3zYuz2nBPBM3EK5ILmHdk.roa
File: m3PGTT3zYuz2nBPBM3EK5ILmHdk.roa (raw, json)
Hash identifier: wlP3JD8FR2J7w2EYj6pR24MM2+4ZMiO41ZBP3z1n1GI=
Subject key identifier: 9B:73:C6:4D:3D:F3:62:EC:F6:9C:13:C1:33:71:0A:E4:82:E6:1D:D9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191D1FC5DBC067528C777ECB5C7A7144617
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m3PGTT3zYuz2nBPBM3EK5ILmHdk.roa
Signing time: Sun 08 Sep 2024 14:14:22 +0000
ROA not before: Sun 08 Sep 2024 14:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.88.90.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 10:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d1:fc:5d:bc:06:75:28:c7:77:ec:b5:c7:a7:14:46:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 8 14:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b73c64d3df362ecf69c13c133710ae482e61dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:ce:55:bc:8e:0c:c1:a5:51:d4:06:0f:12:
ee:1c:cf:a2:0e:b7:ad:76:09:ae:7d:84:c4:d8:22:
a9:5a:34:0a:69:cf:2e:7a:90:e0:bd:63:f2:9f:e6:
b4:93:ad:4d:9c:af:30:0d:c1:0d:01:70:b7:27:bc:
0e:61:a0:80:d8:c3:b5:3b:36:e8:e7:33:f9:fb:d9:
7f:76:ed:6a:d0:29:76:34:ae:4b:4a:32:86:91:04:
1d:c3:67:22:3a:d0:8c:0c:e2:66:ae:5b:7e:ac:3c:
1c:a1:86:b5:23:3b:f8:a0:fd:bf:04:b2:c5:f1:e3:
94:ae:f6:bd:9f:db:93:2e:40:27:25:82:1a:8e:8e:
0a:4f:39:03:30:75:71:6f:56:30:f2:4e:74:22:5a:
37:f6:9c:87:5a:84:10:77:29:e0:d9:a2:73:32:6e:
63:08:b4:5e:34:ab:17:f8:12:28:68:ac:c9:3a:93:
64:ab:95:34:70:ee:60:ef:04:b5:0f:2d:32:bd:10:
f9:c9:5c:99:48:c4:70:0e:45:19:c3:fa:ab:2a:f3:
7a:31:0a:67:a9:b7:dd:06:1b:77:8d:ad:d5:b5:aa:
61:63:38:15:6a:d4:2d:29:9f:b7:b6:09:af:aa:b4:
7c:bc:72:a7:74:5c:05:fa:6e:32:d4:94:ec:4b:8d:
71:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:73:C6:4D:3D:F3:62:EC:F6:9C:13:C1:33:71:0A:E4:82:E6:1D:D9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m3PGTT3zYuz2nBPBM3EK5ILmHdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.149.241.0/24
45.151.89.0/24
45.151.91.0/24
80.76.51.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
92.119.196.0/23
93.123.39.0/24
94.103.125.0/24
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
90:23:d5:33:72:87:74:df:ca:d6:ce:66:89:d4:a3:7e:9f:eb:
70:2e:a9:5f:36:6f:96:87:cb:71:07:32:98:27:af:4b:d7:38:
50:c4:a0:29:8f:a2:50:50:5f:e8:2b:f2:bf:2c:86:94:9c:0b:
88:5d:ea:f9:73:7b:ee:54:80:d3:79:8d:65:e9:08:4f:f6:28:
72:d6:1a:35:1b:da:06:a4:0f:47:ee:cf:c5:53:1f:1e:fb:b9:
69:7d:bb:d6:65:43:5c:dd:19:e9:5b:2b:6d:41:06:f8:6c:5d:
c5:b2:74:65:a8:3c:ef:1f:51:f5:da:0c:75:3e:5e:2a:45:22:
c1:97:3c:a2:d8:8d:5b:35:6e:dc:3f:67:57:f7:df:16:f0:d5:
1e:94:e4:23:aa:e3:cd:eb:0b:c7:b2:9b:fd:7b:26:1a:38:52:
fd:8a:c9:b2:81:87:2a:45:c6:10:3e:89:82:6f:bd:e4:a1:31:
07:16:d2:15:e2:62:b5:02:1e:b3:ec:fa:db:d3:cf:70:95:06:
d5:76:6b:2c:2a:1a:2f:f4:fd:93:c5:5b:8f:06:e5:24:e5:fa:
e7:21:e3:1a:36:2c:e6:e5:45:30:a8:cc:ab:1b:7c:cd:90:42:
92:a9:84:6d:e1:f8:29:c1:c2:3f:c7:a6:8c:be:30:6c:e8:62:
4d:37:fd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 12:50:08 2024 by rpki-client on console-fra.rpki-client.org