Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m7cdrnumvtu2xX8HJCEoKalqwdk.roa
File: m7cdrnumvtu2xX8HJCEoKalqwdk.roa (raw, json)
Hash identifier: hWERLgGLOQQ76TNY3O7Efte7neyMLCdiuvJAMURiVdw=
Subject key identifier: 9B:B7:1D:AE:7B:A6:BE:DB:B6:C5:7F:07:24:21:28:29:A9:6A:C1:D9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E5C2BE90799D5BC8C594E1F2BD01FD599
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m7cdrnumvtu2xX8HJCEoKalqwdk.roa
Signing time: Wed 20 Mar 2024 14:02:45 +0000
ROA not before: Wed 20 Mar 2024 14:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.59.255.0/24 maxlen: 24
45.129.86.0/23 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.72.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 13:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5c:2b:e9:07:99:d5:bc:8c:59:4e:1f:2b:d0:1f:d5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 20 14:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bb71dae7ba6bedbb6c57f0724212829a96ac1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:37:4f:19:2f:86:f4:31:3b:68:f9:df:8e:
f9:ba:32:91:94:c4:df:0c:1e:2c:67:ba:c2:a3:bc:
28:e4:93:44:44:38:3b:4b:8f:ff:f4:f6:43:12:95:
7a:37:dd:c8:fe:2e:71:63:a8:ee:92:bf:11:67:5f:
d9:a3:29:bc:72:74:88:3e:e9:81:9c:3d:94:41:5d:
c6:d0:28:12:4f:2c:ac:28:34:d6:4a:49:a4:42:6a:
2f:50:a8:0c:02:02:70:87:55:03:e4:cc:dc:b6:0f:
f3:b8:fd:38:b4:09:cb:1b:b1:8e:61:23:c2:65:3a:
79:93:7e:25:28:5e:8a:0b:c7:6b:71:b5:79:07:18:
c2:ec:00:3e:81:2e:84:b8:c8:f0:3c:9b:82:17:86:
c5:22:ca:fa:5b:2a:81:1b:5d:04:0e:2c:f2:ad:07:
93:42:fc:2b:d1:40:25:59:98:7b:e8:60:05:df:77:
6a:55:33:27:4c:55:10:9e:2b:2a:d6:e0:6d:90:3c:
d7:cc:cc:8a:45:6a:ba:75:3c:b7:47:c6:0d:86:f9:
b6:d8:18:62:d2:4f:c4:1e:b9:b1:d0:0e:d5:46:97:
dd:f5:64:26:55:9e:e1:88:b2:98:1a:43:d6:ba:4e:
fb:a1:2d:5e:88:e8:91:10:6f:b0:c5:cc:ae:f4:cf:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B7:1D:AE:7B:A6:BE:DB:B6:C5:7F:07:24:21:28:29:A9:6A:C1:D9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m7cdrnumvtu2xX8HJCEoKalqwdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.255.0/24
45.129.86.0/23
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.72.0/23
94.156.239.0/24
147.78.102.0/24
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.252.176.0/24
185.254.37.0/24
193.35.19.0/24
193.37.41.0/24
194.48.250.0/24
194.55.186.0/24
194.55.224.0/24
194.169.172.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:63:84:c1:53:4a:0c:dd:15:d2:d4:9f:e8:43:22:c1:d5:62:
ca:4a:40:c7:e5:62:0d:5a:bf:dd:08:25:1c:95:3d:67:68:41:
7d:b2:28:e5:18:b5:e5:78:66:b0:03:5d:12:c5:f4:0e:3c:77:
56:d5:6e:2a:9f:f4:6b:62:0b:a3:05:07:32:00:fa:0c:57:cc:
42:fe:09:05:53:1f:f8:29:11:33:23:39:f6:82:e2:5f:67:c6:
42:e6:51:4d:b2:69:dd:4d:6b:34:49:49:af:cb:86:54:b2:c8:
fc:e8:a9:1e:e9:3b:bf:e2:07:8d:03:ae:72:40:2c:be:c9:14:
ce:17:76:f7:fb:9e:8b:2f:b7:8f:51:a4:a8:0a:05:f0:6a:17:
24:ac:ab:74:c2:72:32:5c:4d:cb:95:42:db:ce:bc:31:7d:ab:
70:bd:7d:b8:b7:c9:75:ec:7f:c4:fb:cb:69:ae:c1:80:35:32:
7b:c2:85:8d:d3:c1:58:ff:1e:fd:51:78:ce:ba:9e:78:9b:66:
5d:e4:d7:7e:33:45:46:e4:07:da:c8:0c:24:5c:23:ee:22:15:
0e:6b:03:be:d4:56:1f:00:b8:bb:f7:0e:39:4f:3a:af:80:36:
fe:56:d2:ba:c9:cd:41:57:43:07:8b:0d:5c:80:18:01:0b:5e:
d4:6e:ff:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 15:37:20 2024 by rpki-client on console-ams.rpki-client.org