Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r1S8bX85QodJkCKTHue_PA4xMxc.roa
File: r1S8bX85QodJkCKTHue_PA4xMxc.roa (raw, json)
Hash identifier: 0FLdbrv/QWc5wHfsfNM652HkZjUWB0Zs2BwxjruRyoo=
Subject key identifier: AF:54:BC:6D:7F:39:42:87:49:90:22:93:1E:E7:BF:3C:0E:31:33:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD05FA13671B53A2CCECA17697BD93
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r1S8bX85QodJkCKTHue_PA4xMxc.roa
Signing time: Tue 02 Jan 2024 06:29:37 +0000
ROA not before: Tue 02 Jan 2024 06:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206003
IP address blocks: 171.22.31.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
81.161.239.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.248.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 08:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:05:fa:13:67:1b:53:a2:cc:ec:a1:76:97:bd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af54bc6d7f394287499022931ee7bf3c0e313317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:bb:89:9d:55:49:28:62:d1:4a:7b:e5:bf:
42:f0:3a:d7:05:07:60:78:a0:d3:22:b7:5c:82:78:
4a:b8:0d:66:19:3d:f6:43:f7:31:d3:60:d0:8b:c8:
2f:75:a7:9d:63:b3:0f:0a:fd:ac:fe:b5:91:2a:c6:
57:21:e8:8e:4c:4a:f7:02:72:c7:a5:41:ba:cd:68:
c5:e1:b3:fc:fb:7c:1c:05:0a:ec:af:ed:95:b6:6e:
be:39:1c:86:5a:6a:c0:f4:34:6f:a7:62:9e:cc:f3:
f0:db:35:96:eb:6d:f8:50:66:c1:e9:ab:ab:cb:6c:
8f:11:27:77:d3:6e:05:2f:0f:18:21:b8:55:c1:e1:
53:a5:77:b0:2f:d3:72:be:c5:99:ac:7c:bd:1f:5d:
cd:c2:eb:03:22:37:10:d7:e0:6c:80:ac:4a:c0:16:
d4:04:37:e0:6a:e3:36:6c:ec:31:1d:e2:56:6d:fa:
92:d2:e9:84:77:aa:d0:fb:44:f0:2e:9b:f7:3f:6f:
35:85:d4:4b:ab:fe:a8:26:1b:11:32:60:ec:a3:56:
7a:1a:e2:7a:0e:13:4a:54:36:e8:11:49:3d:db:c8:
a1:d7:16:6e:24:9b:50:cb:26:bd:70:c1:a2:88:30:
38:89:a8:3c:0b:ad:95:60:08:cf:77:f4:29:3c:63:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:54:BC:6D:7F:39:42:87:49:90:22:93:1E:E7:BF:3C:0E:31:33:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r1S8bX85QodJkCKTHue_PA4xMxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.129.84.0/24
45.141.158.0/24
79.110.61.0/24
81.161.239.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
94.156.248.0/24
171.22.17.0-171.22.18.255
171.22.31.0/24
193.25.216.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
54:cc:e6:73:64:0d:06:a3:8a:17:0c:a4:98:f7:41:ea:0f:94:
e2:ab:df:b7:fa:71:b7:9d:f3:cf:aa:fc:44:b7:3e:3d:53:8e:
e1:32:1a:22:4b:db:f6:0d:58:ba:64:f5:ba:e9:2d:40:8f:40:
99:5b:61:e6:a1:0a:09:62:b5:d7:24:ea:c8:4e:30:c3:81:ab:
2f:60:1b:9f:2d:c8:05:65:50:02:d0:12:29:9c:03:49:4c:5f:
42:0b:56:fe:f7:99:eb:0a:73:03:63:2b:40:bc:95:07:fc:9c:
89:7c:29:68:50:c4:2b:d4:0a:9e:67:7d:99:b9:1d:5c:5c:6b:
57:66:ba:56:ec:1e:5b:27:7b:3d:eb:0d:2d:63:c3:58:14:fc:
dd:95:66:71:30:d9:b8:ad:99:fc:90:54:20:1d:3a:5d:5b:25:
f8:e7:07:d2:36:55:2d:31:d1:c4:7c:e3:be:b8:df:94:17:22:
f1:3c:48:7d:a3:52:d6:66:66:2e:94:10:7f:21:3c:25:30:6a:
66:79:01:ba:0b:a3:ce:ec:e1:4e:2d:9c:50:b2:cc:87:f6:3c:
86:06:0f:2d:24:5b:98:ab:b3:83:a5:ac:3e:5e:0d:ed:95:20:
2b:f9:c9:ce:82:51:42:79:8d:c9:50:2d:d1:e5:c2:f8:eb:72:
b5:33:b6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 11:45:09 2024 by rpki-client on console-ams.rpki-client.org