Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pg8oRcgzAtQxIzw9TmYNzqddRBs.roa
File: pg8oRcgzAtQxIzw9TmYNzqddRBs.roa (raw, json)
Hash identifier: ZSJzT31wAtlwpj8fI44BH/sbNvMFf0bNuEM0QHiV7zo=
Subject key identifier: A6:0F:28:45:C8:33:02:D4:31:23:3C:3D:4E:66:0D:CE:A7:5D:44:1B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F2F255BE19909E281B16A82332F3601C3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pg8oRcgzAtQxIzw9TmYNzqddRBs.roa
Signing time: Tue 30 Apr 2024 13:15:28 +0000
ROA not before: Tue 30 Apr 2024 13:15:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399486
IP address blocks: 45.88.91.0/24 maxlen: 24
80.76.49.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 15:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:25:5b:e1:99:09:e2:81:b1:6a:82:33:2f:36:01:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 30 13:15:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a60f2845c83302d431233c3d4e660dcea75d441b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:04:03:97:70:ad:f9:a3:fe:67:88:13:f8:
80:fb:f7:54:8d:5d:ef:0e:3f:a0:de:e8:e6:07:4d:
fd:0e:17:2b:e5:01:de:33:95:4c:74:dd:d8:80:0f:
c0:c6:d2:4f:66:b7:9b:9a:5b:7b:ea:92:dd:9e:b6:
21:cc:19:2d:96:b2:34:58:d6:42:b8:88:5e:e4:ee:
e1:7e:1a:96:df:d6:cb:96:a4:e3:14:3c:97:5e:0d:
f9:a2:a5:99:a1:3a:d9:0b:75:78:21:ff:40:95:10:
20:9b:ad:6e:00:8d:d4:74:65:3c:a9:93:10:2d:1c:
b8:74:5c:8c:4c:c0:46:9b:27:ef:0a:2c:ee:e3:b7:
c8:be:5a:82:75:ef:56:27:11:95:5e:2e:f6:84:08:
32:31:b9:fa:d6:68:23:f1:39:df:2b:67:ad:b4:de:
b4:03:de:ba:0b:4d:ef:80:66:f3:90:45:0f:0c:07:
6c:40:40:bf:e5:4e:16:5e:86:a0:8e:38:ef:ee:3e:
6d:ca:43:b5:13:76:b7:da:fb:8f:0a:e1:cc:a4:95:
02:e2:48:4e:11:ea:35:11:99:ec:ce:06:7a:c3:c1:
88:e2:aa:25:8c:ff:f2:16:d1:0f:44:4b:b0:69:df:
a4:a4:2f:cc:51:0b:23:e3:99:9f:64:7a:3d:f3:a6:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0F:28:45:C8:33:02:D4:31:23:3C:3D:4E:66:0D:CE:A7:5D:44:1B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pg8oRcgzAtQxIzw9TmYNzqddRBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.91.0/24
80.76.49.0/24
85.209.133.0/24
178.215.236.0/24
194.59.31.0/24
Signature Algorithm: sha256WithRSAEncryption
55:3d:35:7b:fb:d7:98:aa:eb:e7:b2:33:ca:82:5a:a7:d9:60:
b6:95:f3:5b:51:29:52:13:64:69:0e:11:6b:a0:62:8d:c9:e6:
ec:a0:ad:96:97:fb:90:a3:c2:77:0b:d1:57:2c:85:2d:0f:8c:
cb:c1:d8:a4:77:c8:2d:e8:31:b9:a3:0f:e2:7e:71:25:c1:eb:
55:9c:f7:af:3e:a8:26:ed:53:23:5e:58:e8:fa:29:84:7a:46:
1e:bc:b7:c8:06:e5:e9:88:cf:8f:ea:87:1e:e8:ac:6a:f4:01:
12:6b:55:64:bf:8d:53:0a:7d:0d:24:2c:27:13:36:b6:fd:80:
0c:ef:90:51:0d:d7:0a:72:b8:29:c9:b8:56:23:45:3c:7f:c5:
0d:ea:36:08:9b:c9:ff:64:95:8a:0d:f8:ea:90:ea:27:71:e7:
67:44:6a:4c:e1:7d:fb:0f:93:4e:1c:84:0d:fd:45:82:87:61:
9d:e8:43:10:33:66:0d:3d:06:fc:f6:a4:8d:0f:05:a9:41:94:
bc:7e:28:9c:f6:26:9f:ba:44:36:9c:8d:28:4a:38:8b:02:15:
e4:c9:fe:7b:01:ca:11:97:a1:fc:62:31:7e:fc:72:df:95:f6:
36:ee:ff:f7:52:c3:d1:9e:8c:45:93:a0:e4:0c:20:fb:52:ce:
9d:a2:16:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:43 2024 by rpki-client on console-ams.rpki-client.org