Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mDYaWE0B79kG_GhpD5HdK-RC-A8.roa
File: mDYaWE0B79kG_GhpD5HdK-RC-A8.roa (raw, json)
Hash identifier: QoUXB3JQ/u9C/MG2aAePOevMpQ+Zc9EOo0wDwR8K31c=
Subject key identifier: 98:36:1A:58:4D:01:EF:D9:06:FC:68:69:0F:91:DD:2B:E4:42:F8:0F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D0C5829E061D4996DE9B5483AB26359FB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mDYaWE0B79kG_GhpD5HdK-RC-A8.roa
Signing time: Mon 15 Jan 2024 08:58:40 +0000
ROA not before: Mon 15 Jan 2024 08:58:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
45.88.90.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 12:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:58:29:e0:61:d4:99:6d:e9:b5:48:3a:b2:63:59:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 15 08:58:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98361a584d01efd906fc68690f91dd2be442f80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:45:5e:87:ed:f8:c7:43:85:96:b9:17:f4:4e:
b7:e2:43:05:c0:41:c7:8d:6c:b8:b5:ce:22:f3:5d:
d5:6b:75:d0:c6:8c:a4:7e:f9:2f:0c:00:bb:02:d8:
48:ce:9a:d5:db:69:e9:c4:31:5a:8f:14:0c:6f:9a:
3c:e5:f2:9b:ec:ee:32:10:20:e8:a4:7e:17:f1:be:
25:62:e3:ab:fd:e7:77:6c:13:c6:f7:d2:c1:bd:d1:
84:aa:79:86:3e:f3:7a:48:a9:fe:77:66:3f:58:c6:
4f:3d:28:a8:37:fd:38:14:c4:77:5e:63:de:34:a5:
77:09:01:db:68:7a:b3:da:e4:55:9e:fb:55:9c:66:
40:d9:a3:d1:21:80:53:2b:cf:e6:0d:f2:36:6b:da:
d6:c4:34:ad:c0:36:b6:e4:a2:da:d1:00:5c:79:de:
9f:fc:78:9c:97:c8:67:37:0c:40:ba:97:b2:1e:e8:
50:25:e7:2f:75:d9:a5:b2:ab:2b:5d:53:70:e6:aa:
81:c3:de:7a:6e:73:c3:fa:3d:cf:2a:31:86:01:ed:
52:cc:df:17:21:db:c7:07:82:c7:16:03:2a:8e:64:
af:58:b3:83:59:04:72:c7:0b:6f:81:a0:b6:a3:44:
3a:a3:f4:85:34:2c:98:21:69:95:ea:26:66:2b:a2:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:36:1A:58:4D:01:EF:D9:06:FC:68:69:0F:91:DD:2B:E4:42:F8:0F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mDYaWE0B79kG_GhpD5HdK-RC-A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
45.84.89.0/24
45.88.90.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.154.172.0/24
94.156.239.0/24
147.78.101.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.226.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.226.175.0/24
185.252.176.0/24
194.55.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1b:36:99:55:e6:10:d2:af:4e:df:0d:9a:4f:1d:28:78:c1:
72:51:e1:2a:dd:c4:39:36:f2:d5:a7:18:a2:c6:d4:d0:e4:56:
5d:d5:9e:79:a0:bb:5e:07:2f:e2:29:00:9a:8f:a9:62:db:85:
a4:13:58:9f:85:36:d6:bc:ea:d2:63:07:4d:30:1e:40:b4:61:
37:9b:93:d5:44:2e:75:95:41:aa:ec:41:88:9b:25:5f:e0:23:
f1:59:f4:f8:1a:61:e4:4d:c2:94:9e:b2:c1:90:17:fd:82:86:
34:a5:ad:33:05:50:f5:13:2b:01:b8:40:c2:46:55:00:20:61:
75:99:22:77:e1:5d:05:e4:13:48:44:3a:87:f7:f5:83:16:9a:
f1:2d:67:6a:5e:48:be:08:bd:7f:03:12:43:44:63:38:6a:c5:
ad:6d:d7:fb:e5:50:36:53:3e:3d:1b:0a:00:6e:a0:ff:8e:15:
7b:2b:ee:a7:66:7d:b2:43:72:02:9e:13:cf:f1:f3:8b:25:57:
fa:6e:77:f1:14:5e:c8:7d:56:c3:bf:4a:d0:13:f5:02:0d:eb:
bc:f3:90:62:b3:50:3a:5d:9f:47:f9:9d:93:ca:03:76:bc:3b:
7d:f6:bc:93:2b:53:c3:6a:71:a1:47:29:a8:1b:9d:03:40:7c:
e9:89:c2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 17:29:58 2024 by rpki-client on console-ams.rpki-client.org