Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oMIpyDY-MZ6E_IT3I7q0HdMMyNs.roa
File: oMIpyDY-MZ6E_IT3I7q0HdMMyNs.roa (raw, json)
Hash identifier: AMywaZXPi/x9uJ+Wpms27o2+B9HqDQOKNOekjbWcuMM=
Subject key identifier: A0:C2:29:C8:36:3E:31:9E:84:FC:84:F7:23:BA:B4:1D:D3:0C:C8:DB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01932C6D239D0B3593EB570CE3D51861B765
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oMIpyDY-MZ6E_IT3I7q0HdMMyNs.roa
Signing time: Thu 14 Nov 2024 20:46:10 +0000
ROA not before: Thu 14 Nov 2024 20:46:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 10:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2c:6d:23:9d:0b:35:93:eb:57:0c:e3:d5:18:61:b7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 14 20:46:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0c229c8363e319e84fc84f723bab41dd30cc8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d5:84:15:0c:bd:7f:c8:56:85:06:f2:95:1c:
4d:f9:b3:2c:76:67:22:30:c6:41:b9:a8:a4:7f:4a:
66:b1:f3:71:de:35:db:85:1e:a0:af:91:59:31:9b:
c3:5b:4b:74:6a:79:04:71:da:a5:97:bc:1e:2b:36:
2b:60:e3:8e:33:8c:41:68:55:12:c2:ef:4a:f1:ba:
d8:46:10:83:ca:da:16:93:91:56:02:2a:43:58:70:
15:d1:1f:bf:ac:47:e7:c1:2f:85:5b:f2:53:ef:d0:
85:68:98:a7:a7:fe:d6:a9:c6:ea:c7:3f:b4:3d:fc:
aa:6a:18:0d:b1:fb:9c:73:a6:37:6e:48:fd:f0:03:
a2:2b:59:cf:35:d0:3f:85:7e:6d:36:fd:5d:fa:b5:
ef:cc:e0:56:ee:74:55:ae:9f:a4:98:8c:25:e7:e1:
5c:ee:4d:d1:08:a9:1e:ce:3c:36:62:78:e2:3e:85:
49:99:26:7b:fd:f5:ad:60:d8:12:0d:ae:00:6d:ba:
5b:7d:e9:bd:09:b0:83:64:69:8c:aa:b3:8a:f6:2a:
7d:cd:33:86:c5:b1:d0:3e:3f:f8:85:cd:83:62:7f:
e5:f6:dc:14:68:12:0d:c3:03:ba:73:bd:e6:66:31:
be:37:5c:7c:30:d1:00:bb:60:c8:2e:be:69:29:f5:
e1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C2:29:C8:36:3E:31:9E:84:FC:84:F7:23:BA:B4:1D:D3:0C:C8:DB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oMIpyDY-MZ6E_IT3I7q0HdMMyNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
45.149.235.0/24
83.143.113.0/24
85.208.139.0/24
87.120.36.0/24
87.120.88.0/24
87.121.98.0/24
87.121.218.0/24
94.125.100.0/23
109.206.236.0/24
109.206.242.0/24
185.218.137.0/24
185.246.222.0/24
193.168.196.0/23
193.168.199.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2d:e4:9a:05:4b:5d:36:21:96:d3:d3:cd:e5:5e:51:aa:83:
a3:06:5e:c9:35:57:97:16:89:22:71:69:d2:5b:b7:de:c7:f1:
e5:c9:02:5b:d6:db:91:9e:a3:ac:a0:43:af:2a:05:93:56:ce:
5e:03:3d:dc:ab:63:99:73:14:06:70:0c:a2:45:6d:9e:81:c0:
ea:0a:16:ed:68:68:38:3d:bd:58:5d:18:c3:f8:3d:16:83:12:
6d:da:b2:03:0d:3f:40:9d:e6:5c:3e:d3:5f:ff:99:ba:45:d0:
00:fc:26:c2:1f:0c:c1:d3:87:ab:8b:18:b2:b5:9b:bb:e3:56:
4f:8b:08:46:5d:fd:53:b5:5a:95:d4:42:b4:e7:76:4b:e2:06:
8c:a5:c4:c0:09:f8:b3:18:ac:00:37:25:a5:e3:02:54:a8:1c:
0f:f2:a2:1e:ca:df:79:43:86:9a:3c:7b:2b:f0:b6:ae:80:b9:
ee:80:38:26:e2:5c:6e:bb:ed:6c:26:51:3b:b1:82:1c:12:95:
b0:9d:69:86:c6:c7:f9:5d:36:b7:9c:57:33:bd:63:41:2f:d2:
da:9f:d1:8c:ef:79:75:72:08:97:a7:3e:60:26:d7:43:23:1b:
d0:71:2d:a3:69:3f:e1:f6:4e:f6:d3:7a:1f:58:95:00:b8:0c:
32:68:62:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 12:16:04 2024 by rpki-client on console-fra.rpki-client.org