Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q-kaDQldvYKwM258imv8-Agr2do.roa
File: q-kaDQldvYKwM258imv8-Agr2do.roa (raw, json)
Hash identifier: 68pZnQg7D1pkt1yN1A1fBErHoU9I4mJoU4P+FwmfauU=
Subject key identifier: AB:E9:1A:0D:09:5D:BD:82:B0:33:6E:7C:8A:6B:FC:F8:08:2B:D9:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191BD343D0915B58B72238F33825E4985BB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q-kaDQldvYKwM258imv8-Agr2do.roa
Signing time: Wed 04 Sep 2024 13:23:22 +0000
ROA not before: Wed 04 Sep 2024 13:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.88.90.0/24 maxlen: 24
45.128.233.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.221.64.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 14:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:34:3d:09:15:b5:8b:72:23:8f:33:82:5e:49:85:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 4 13:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abe91a0d095dbd82b0336e7c8a6bfcf8082bd9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b3:a5:db:ba:f4:32:a0:6a:d3:17:ab:2a:20:
de:da:6b:a0:07:68:1f:b0:c5:27:1a:18:97:a0:19:
9c:1e:fb:87:6c:54:94:0c:fb:10:f9:10:ad:92:fe:
05:5d:c0:8a:30:cd:a3:cc:a8:d9:f0:32:89:72:99:
9c:33:9e:39:24:44:57:06:bd:0a:93:d7:db:f9:b4:
93:96:81:4b:82:21:07:76:08:ad:f7:d0:bf:50:54:
70:c1:1a:3b:b3:0a:3b:99:0f:64:5f:03:23:7d:98:
af:29:0e:da:32:d2:65:e7:9d:93:12:a9:4d:45:56:
75:98:18:68:56:e6:8f:97:10:94:c0:f2:74:30:de:
75:5d:87:5e:b8:d9:a5:ed:92:b3:1f:b4:78:6d:a4:
20:de:ea:37:92:75:88:fa:c7:80:f6:7d:39:5f:db:
49:fb:5f:26:6a:fa:c0:22:35:c4:2a:13:f7:54:f3:
5b:88:7a:cd:e0:10:69:5b:89:59:1c:1e:1c:ae:95:
83:61:35:5b:75:da:1f:8f:dd:60:a1:66:87:e6:97:
03:53:1f:da:68:1c:06:4f:ac:5e:35:8c:0c:7e:22:
18:7e:53:c1:59:51:1a:53:30:46:21:33:75:3f:bd:
9e:01:e0:bf:c6:ba:91:c7:d6:a8:bc:4a:c1:50:2f:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E9:1A:0D:09:5D:BD:82:B0:33:6E:7C:8A:6B:FC:F8:08:2B:D9:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/q-kaDQldvYKwM258imv8-Agr2do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.128.233.0/24
45.149.241.0/24
45.151.89.0/24
45.151.91.0/24
80.76.51.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
93.123.39.0/24
94.103.125.0/24
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
185.221.64.0/24
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:de:98:a5:2d:17:75:83:3f:80:5b:3b:42:66:21:36:7b:d2:
a4:c6:70:64:75:e1:6d:a8:2c:e6:c1:7e:ac:d2:d8:21:35:d1:
33:62:3f:97:11:ad:3b:53:32:5e:cd:bf:c7:84:35:d6:35:13:
e0:28:91:d2:ab:4d:e4:86:00:f8:26:c4:71:8c:6d:f6:25:40:
25:18:c7:83:42:88:92:66:7f:81:95:bc:68:08:20:21:63:30:
cf:25:db:bc:bd:88:54:1d:86:63:0f:ff:02:ac:75:ec:5b:65:
96:0b:a3:87:dc:47:66:34:f1:5b:bd:f6:59:75:10:f3:a3:7c:
67:f8:3e:c1:51:b5:29:de:c9:dd:ab:76:78:93:ff:dc:28:5b:
1e:08:dc:38:6b:09:0f:f3:36:27:fb:80:38:77:38:3e:08:ce:
fc:25:bf:46:3f:2d:6f:22:3b:24:1d:89:2f:02:98:42:7f:f2:
79:5e:9f:f5:1a:cd:3d:27:dc:19:da:f3:21:2e:f1:f5:19:cf:
f0:09:8e:65:9d:10:ac:7c:d5:00:36:40:08:e4:b8:31:0e:c8:
e4:fe:61:ee:07:e7:dd:99:c8:fa:5d:8d:f5:f6:69:2b:e4:fa:
ce:74:15:2b:6e:42:97:04:86:4e:9a:30:66:a1:4e:f9:8f:63:
98:bf:1c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 16:54:14 2024 by rpki-client on console-fra.rpki-client.org