Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/n0q43pw6tDYHjK1AZL8H7oYsKjA.roa
File: n0q43pw6tDYHjK1AZL8H7oYsKjA.roa (raw, json)
Hash identifier: bk3jSN+GyjzF3p3LEq40UXW4sazfT/JNcC8BXfj/qLM=
Subject key identifier: 9F:4A:B8:DE:9C:3A:B4:36:07:8C:AD:40:64:BF:07:EE:86:2C:2A:30
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019178BE4E5E05C164BAB27A4C7F4B574EE9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/n0q43pw6tDYHjK1AZL8H7oYsKjA.roa
Signing time: Thu 22 Aug 2024 06:20:23 +0000
ROA not before: Thu 22 Aug 2024 06:20:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.88.90.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 10:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:78:be:4e:5e:05:c1:64:ba:b2:7a:4c:7f:4b:57:4e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 22 06:20:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f4ab8de9c3ab436078cad4064bf07ee862c2a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:36:0d:3a:01:de:9c:f7:b4:60:20:82:72:
5f:78:6d:cf:0a:b0:f8:91:e4:60:a5:ca:51:fe:70:
26:4e:77:99:90:ea:de:94:c6:ab:dd:d7:42:ec:60:
dc:2e:38:26:86:db:ea:4f:a4:e5:97:19:18:85:2f:
6e:9a:69:6c:87:64:74:cd:53:96:1d:f3:82:cd:e7:
a2:0c:b1:30:d7:49:c1:2f:1a:be:fb:71:6f:80:d9:
d3:a0:f6:9b:55:1a:ed:bd:55:15:f7:6d:c5:86:c6:
7d:14:44:11:5c:bf:5d:31:28:2b:a6:b4:32:72:36:
6a:d4:d1:82:f3:f6:ce:79:ab:de:69:56:9f:0d:64:
bd:47:c5:a3:36:ae:4c:b3:77:da:5f:92:a6:79:c1:
5f:69:58:c9:5b:80:52:ea:e0:ae:ba:a4:00:d1:36:
f9:b9:1c:59:31:7e:52:8e:c1:a6:4d:62:6d:f0:fa:
4f:b0:16:5f:43:34:8b:34:48:78:21:d3:66:50:b6:
9d:11:f0:d4:31:b7:67:57:5b:5e:cf:ce:d3:97:18:
54:4f:e9:bf:5d:ea:8e:6f:52:6c:e0:ff:2e:d6:7b:
fd:ae:40:6b:90:21:2a:11:e1:2e:e7:7a:2a:bf:f6:
40:3a:31:67:00:12:a1:58:d3:b6:2d:4f:61:53:20:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4A:B8:DE:9C:3A:B4:36:07:8C:AD:40:64:BF:07:EE:86:2C:2A:30
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/n0q43pw6tDYHjK1AZL8H7oYsKjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.144.154.0/24
45.151.89.0/24
80.76.51.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
93.123.39.0/24
94.103.125.0/24
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:43:fd:45:14:7e:82:2e:17:2c:2d:02:c5:f3:e9:3c:1d:2b:
40:b9:c5:28:59:d1:e9:bc:05:02:8f:0f:f2:ff:29:d8:b0:40:
98:30:a8:d8:a8:03:0f:b3:70:2d:f6:fa:72:dd:ef:6c:63:90:
be:53:41:ce:65:59:4a:8a:95:9a:7d:1b:0c:05:97:bc:cb:08:
a3:7a:c8:ab:e4:97:0b:12:7f:ac:4c:d2:66:25:6f:56:05:78:
e4:70:66:d0:5e:21:d2:c3:a5:57:7d:3f:f4:0c:c3:39:c0:ad:
9b:b7:98:27:59:59:23:5a:13:34:0f:f9:21:0f:2e:e6:ef:e1:
10:5b:7e:be:1e:65:79:11:03:ad:60:f7:c3:a6:59:4e:ea:f8:
7d:d8:73:a8:d5:ef:aa:31:2d:03:d4:70:23:4b:13:d2:2f:e2:
c0:19:a9:be:28:af:ac:f1:62:c8:c8:df:42:3d:a8:b0:21:16:
07:05:32:c3:68:95:f6:46:4d:13:d6:30:9b:38:9b:96:9b:2d:
e1:25:98:de:bc:15:e7:35:af:67:29:f5:3d:0a:29:79:a9:ca:
6e:ac:bd:70:a5:87:96:bd:5a:99:6d:73:8b:1d:4e:03:72:5a:
90:bc:b9:8b:92:c7:be:30:03:cf:b8:2b:1f:39:17:2e:eb:15:
e7:aa:45:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 11:56:59 2024 by rpki-client on console-fra.rpki-client.org