Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/miG7t6zEkzWMQL2xfzYcckdCqX4.roa
File: miG7t6zEkzWMQL2xfzYcckdCqX4.roa (raw, json)
Hash identifier: mP4+FiTiE+Pui4baVdCSuqE24c5m3ppUvYr8pTeKBOc=
Subject key identifier: 9A:21:BB:B7:AC:C4:93:35:8C:40:BD:B1:7F:36:1C:72:47:42:A9:7E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCF6AF87FAE812C08D11FC55D641B8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/miG7t6zEkzWMQL2xfzYcckdCqX4.roa
Signing time: Tue 02 Jan 2024 06:29:33 +0000
ROA not before: Tue 02 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61302
IP address blocks: 171.22.31.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
81.161.239.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.248.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 08:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f6:af:87:fa:e8:12:c0:8d:11:fc:55:d6:41:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a21bbb7acc493358c40bdb17f361c724742a97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:f8:b9:f6:4e:ef:b0:cc:c5:c6:5c:a4:45:
b3:57:09:af:fa:a7:f0:29:80:97:22:c7:d5:e4:58:
8e:4d:f4:54:7f:6b:74:f9:01:04:d6:19:55:99:09:
68:82:ce:b6:ec:ef:e1:46:a9:05:06:50:a9:90:28:
fa:82:93:45:94:a0:c3:12:9b:2b:58:8a:c3:84:a1:
4e:05:f9:44:e3:52:b1:b5:ac:f0:e6:3b:30:f6:21:
43:b7:64:f1:c6:8a:27:6c:1b:38:9b:10:81:95:96:
64:bb:a4:43:b8:e0:a7:af:4f:68:15:42:ae:36:99:
84:e8:61:91:a4:57:57:79:b4:29:73:70:92:21:70:
42:a8:f4:75:a6:0c:bd:09:64:e2:61:3e:1e:21:40:
5d:b7:ea:3e:44:fd:a8:4f:24:15:4e:fb:41:d8:a2:
09:03:65:63:0f:3c:f0:48:d1:9e:17:fa:53:a2:bc:
5c:9a:6c:7c:1c:ee:0f:7f:26:fa:ea:49:23:0a:ab:
73:7a:f6:d4:fa:81:67:b5:92:38:db:71:cc:d6:1e:
09:f7:31:5a:f5:8c:6e:e9:2d:11:53:65:a8:3b:37:
01:85:47:8c:69:98:f3:b6:90:8c:9a:87:ef:63:88:
23:a9:21:d1:d9:3a:a2:81:5a:ce:dd:ae:8e:b5:f3:
56:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:21:BB:B7:AC:C4:93:35:8C:40:BD:B1:7F:36:1C:72:47:42:A9:7E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/miG7t6zEkzWMQL2xfzYcckdCqX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.129.84.0/24
45.141.158.0/24
79.110.61.0/24
81.161.239.0/24
82.115.210.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
94.156.248.0/24
147.78.100.0/24
171.22.17.0-171.22.18.255
171.22.31.0/24
193.25.216.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f0:e4:08:f2:a3:8d:26:b2:2b:d0:3a:09:17:c3:00:cb:aa:
57:79:1c:7a:63:06:8f:a6:e3:05:16:f0:09:c0:08:ca:0e:5d:
25:8d:41:4f:e2:b9:e5:c4:81:cb:56:2e:2b:99:f7:f0:dc:4c:
4f:81:60:c0:47:05:ca:cb:21:cf:b3:62:f0:44:eb:a2:d4:d7:
d1:fe:36:d3:89:83:e7:6e:34:72:84:49:65:11:c6:ae:58:b0:
37:74:ef:5c:8c:68:55:cd:84:85:1a:cd:c9:25:91:5d:48:76:
74:b1:e5:22:72:35:39:52:9d:2d:37:8b:06:44:d2:84:de:2b:
b9:25:51:da:16:50:12:82:cd:c1:d3:c7:a9:1b:36:d1:f9:40:
4a:41:f5:13:3a:df:40:7d:14:58:27:7a:2d:fa:48:dc:58:5a:
45:d6:32:90:1f:34:6c:9d:d3:cf:b4:49:e3:c0:f6:8b:ca:ea:
45:47:c3:c0:67:e4:e5:81:8e:08:e2:00:2c:ce:c7:d3:ad:a2:
d8:4a:14:80:f5:64:a4:41:94:eb:80:88:7e:65:fd:10:75:6b:
37:f3:28:06:6a:89:f5:b2:96:4e:b1:b8:dd:e6:5c:5e:61:ac:
e5:d8:f0:df:b0:08:5a:27:3a:92:c4:3e:35:ae:fd:69:53:9c:
33:02:1d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 11:45:09 2024 by rpki-client on console-ams.rpki-client.org