Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rhiIR-6Vh7fWvbA24rGmtI0uThQ.roa
File: rhiIR-6Vh7fWvbA24rGmtI0uThQ.roa (raw, json)
Hash identifier: 4HCEtcS6Ij+0hyALvfs2Ekqfl+rc1ucRZv2g3s4fU/A=
Subject key identifier: AE:18:88:47:EE:95:87:B7:D6:BD:B0:36:E2:B1:A6:B4:8D:2E:4E:14
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01920989A872F31551896699CCC064CB847C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rhiIR-6Vh7fWvbA24rGmtI0uThQ.roa
Signing time: Thu 19 Sep 2024 09:07:49 +0000
ROA not before: Thu 19 Sep 2024 09:07:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401120
IP address blocks: 45.88.88.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.166.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 06:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:09:89:a8:72:f3:15:51:89:66:99:cc:c0:64:cb:84:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 19 09:07:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae188847ee9587b7d6bdb036e2b1a6b48d2e4e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:61:39:af:83:10:60:b9:61:6a:ad:b9:c5:
f9:c8:7a:46:2d:18:7b:75:94:87:6c:22:ac:65:28:
f2:38:0b:34:58:60:72:9b:23:f1:ee:c8:2a:62:0f:
e8:cb:40:05:e6:5a:38:6c:59:6f:39:5f:64:87:07:
7c:79:fa:49:79:98:96:e1:9b:2a:c2:4d:3a:13:91:
3d:1f:b3:22:07:9e:e3:72:92:66:18:14:bf:f2:a1:
91:08:c0:77:bd:3a:b1:c2:b8:83:71:71:1f:bc:ae:
9c:2c:42:90:20:d4:63:cc:7e:9d:84:31:ef:5c:51:
05:52:0b:cc:8e:d7:d6:4c:15:8d:e1:c7:ca:fb:ca:
88:63:31:03:07:69:2b:35:af:18:35:1a:18:6b:fa:
a0:f9:d6:8d:f3:95:2e:93:ef:40:bb:f7:21:43:ca:
ea:5f:24:16:19:03:0d:7c:4c:f9:f0:f1:90:cc:a0:
e9:80:45:67:58:0d:7f:d9:f5:84:bc:58:8f:9f:bf:
71:15:e5:c3:4d:32:d8:59:b6:a0:49:05:6e:4a:a1:
b0:c8:be:82:80:be:30:e1:61:dc:c3:b6:cc:5d:09:
ad:ba:53:77:00:f5:0b:d6:92:80:25:22:1e:48:e2:
1a:ec:06:07:7b:96:41:91:f4:9b:99:78:cd:9f:4c:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:18:88:47:EE:95:87:B7:D6:BD:B0:36:E2:B1:A6:B4:8D:2E:4E:14
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rhiIR-6Vh7fWvbA24rGmtI0uThQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
81.161.238.0/24
93.123.39.0/24
94.156.104.0/23
94.156.166.0/23
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e2:65:b6:9e:8a:a1:52:8b:4c:4e:81:cc:a2:2e:06:11:7a:
01:a7:0b:94:81:6d:68:ee:b5:78:c0:0f:c4:14:ca:27:9a:2e:
97:66:f9:d2:b5:5f:07:e9:c9:cd:81:15:6b:73:14:a9:af:ba:
d9:8c:7f:c0:f4:74:d1:bf:44:69:8e:c7:4d:cc:c7:b9:0b:21:
46:67:f4:bd:a4:83:04:19:b6:9e:2c:34:09:97:22:5a:86:57:
6c:13:dc:b7:0a:e8:b1:ee:e3:7e:b1:17:ba:5b:2e:62:6f:8e:
2e:cb:0b:40:99:14:f2:cd:7b:c4:e5:ae:64:71:1b:45:28:81:
15:13:13:1f:2e:8b:e0:1c:d5:43:35:c8:00:3f:ff:f2:c7:10:
06:7e:36:c9:8c:37:e4:14:5e:12:10:ec:80:93:33:f9:ae:9c:
52:1e:a1:c7:28:75:d1:62:b5:f2:92:a0:c3:c6:ad:0b:b7:a5:
52:4a:41:e2:0b:82:e0:90:c5:81:ac:e3:43:ed:38:93:8b:44:
8d:1c:59:b4:7d:9e:a3:fa:76:bb:ae:aa:ca:5e:1f:cf:10:ce:
59:65:c1:b4:e9:08:8b:e1:1e:65:61:3c:a7:1f:fd:43:b7:6d:
0c:69:09:a4:06:8e:eb:d9:a8:fb:8f:42:83:b9:56:f1:22:2d:
0c:7a:da:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 09:10:19 2024 by rpki-client on console-fra.rpki-client.org