Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nFXg-9e9ncjTsZ38_S_7m9IE58A.roa
File: nFXg-9e9ncjTsZ38_S_7m9IE58A.roa (raw, json)
Hash identifier: adiYpaJi+HhTwff7mEEkRLzi2jqBwmXQtytZYqgh8XY=
Subject key identifier: 9C:55:E0:FB:D7:BD:9D:C8:D3:B1:9D:FC:FD:2F:FB:9B:D2:04:E7:C0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191506F09A7F618E5198E1F0FD143D9DF50
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nFXg-9e9ncjTsZ38_S_7m9IE58A.roa
Signing time: Wed 14 Aug 2024 10:28:59 +0000
ROA not before: Wed 14 Aug 2024 10:28:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.88.90.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.246.223.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 13:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:50:6f:09:a7:f6:18:e5:19:8e:1f:0f:d1:43:d9:df:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 14 10:28:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c55e0fbd7bd9dc8d3b19dfcfd2ffb9bd204e7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:60:6f:1f:9a:cb:67:bd:b2:ba:8f:88:85:
a0:7f:c0:13:c7:87:46:ad:3e:4f:a3:69:f3:a5:42:
a5:f7:f6:1c:ad:0a:42:99:8c:19:b6:82:0f:02:94:
cb:53:e9:85:7c:bf:96:7f:17:8d:b3:90:b4:28:0f:
e5:38:43:29:82:a5:09:3b:07:05:64:b4:6d:89:55:
f1:a2:87:66:8f:2b:21:b8:7c:ad:65:c9:98:ed:27:
c2:9e:a4:57:df:b3:8b:38:6e:00:0d:84:c0:a7:3f:
9c:25:28:a6:de:1a:03:95:ef:bd:bf:c6:d5:3d:16:
f0:92:f8:f6:89:fa:6a:5a:5c:90:2a:e0:f4:0b:58:
c0:f9:c0:26:1c:1a:77:9c:e6:0a:bd:f8:dc:0e:c5:
b6:18:05:08:25:31:b3:d4:bb:4a:1e:d0:0e:47:0f:
4e:2f:3b:f1:61:82:a3:95:11:4a:95:f4:d5:ff:73:
3c:ef:6a:1c:76:69:cb:27:b1:79:79:32:bd:33:a9:
20:40:f6:85:ee:ca:b5:f5:9b:bd:98:1e:8e:be:09:
2a:59:57:48:d6:d8:bb:6d:ee:ae:78:ee:a6:c0:cd:
22:3a:30:9f:9d:0e:b3:14:69:42:eb:76:a3:fe:ec:
75:8d:40:f5:fe:ee:b6:1f:0c:d0:be:63:f5:5a:f9:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:55:E0:FB:D7:BD:9D:C8:D3:B1:9D:FC:FD:2F:FB:9B:D2:04:E7:C0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nFXg-9e9ncjTsZ38_S_7m9IE58A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.128.232.0/24
45.144.154.0/24
45.151.89.0/24
80.76.51.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.69.0/24
87.121.221.0/24
92.119.196.0/23
93.123.39.0/24
94.103.125.0/24
94.154.160.0/22
94.156.8.0/24
94.156.11.0/24
109.206.237.0/24
141.98.1.0/24
147.78.102.0/23
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
185.246.223.0/24
193.35.18.0/24
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
13:fc:18:b1:a5:56:66:87:64:fc:df:47:47:27:12:14:fb:55:
6c:f0:22:8c:b8:32:d2:91:12:6b:a1:48:18:dd:b7:35:dc:64:
9d:fc:f1:a7:2a:44:57:b3:6f:85:d6:f0:a1:48:06:d7:98:a5:
13:fb:d9:74:fa:63:4a:f0:86:69:6b:76:0d:fe:ae:74:fb:3c:
ef:7b:18:27:a7:41:c2:3e:a1:a3:6a:1a:a8:e1:d2:bd:10:56:
b4:7d:ba:b1:9f:c5:31:e4:6a:59:c1:8d:28:26:bc:96:52:99:
9b:79:15:cf:d6:af:49:72:62:98:ce:dd:70:29:b5:03:91:dd:
fd:bd:55:02:58:f7:f6:41:d7:1f:76:53:42:6f:77:2f:73:c0:
a7:9d:76:f1:ea:f8:2c:c9:7a:c2:47:c8:f1:f3:08:59:50:60:
08:09:81:28:15:67:16:6a:2e:5b:7a:57:8b:96:e2:47:2c:aa:
bc:55:ef:b1:65:b4:b8:95:6e:c6:7c:89:d0:28:f0:53:f8:83:
c9:ab:9c:a5:06:7e:9e:cf:c3:95:a5:38:57:ee:1d:e6:2f:49:
fa:03:eb:91:6f:d9:41:30:80:72:ed:4a:36:ad:9a:89:66:07:
4c:14:23:e5:bf:15:2b:db:e2:e7:dc:d2:9b:1a:f6:13:1b:e2:
51:51:ee:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 19:04:16 2024 by rpki-client on console-ams.rpki-client.org