Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sDuitMjeuSiZGecA3qKz9HerRLM.roa
File: sDuitMjeuSiZGecA3qKz9HerRLM.roa (raw, json)
Hash identifier: ZitFTk+Qv8jkoP22d9QodwjIeijriSNiMnrcFNajhuw=
Subject key identifier: B0:3B:A2:B4:C8:DE:B9:28:99:19:E7:00:DE:A2:B3:F4:77:AB:44:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192D73AA362CD17044B3588FE437A4D06F1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sDuitMjeuSiZGecA3qKz9HerRLM.roa
Signing time: Tue 29 Oct 2024 07:43:17 +0000
ROA not before: Tue 29 Oct 2024 07:43:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 5.253.59.0/24 maxlen: 24
45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
45.95.0.0/22 maxlen: 24
83.143.113.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.217.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
93.123.31.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
193.8.185.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 13:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:3a:a3:62:cd:17:04:4b:35:88:fe:43:7a:4d:06:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 29 07:43:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b03ba2b4c8deb9289919e700dea2b3f477ab44b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:61:d3:77:0d:5b:7e:50:0d:39:62:3f:96:
36:8c:e1:3a:00:39:07:4e:4f:5a:2b:51:83:cb:d8:
34:d2:30:91:8d:1e:14:a2:2a:65:15:0a:c4:40:f9:
c8:91:a1:ae:8d:41:50:6d:83:f8:72:c2:05:bd:f6:
bd:31:8c:33:b0:50:a1:57:aa:f6:9d:4d:f2:52:dd:
82:6a:41:1a:7d:bc:20:df:b6:79:27:cf:48:98:b1:
d2:84:7c:21:9c:95:d4:0d:71:ca:64:85:8d:9b:0f:
d5:a5:00:d3:08:bf:26:22:cb:93:88:48:8b:60:d5:
69:8a:a1:6d:34:8a:b1:3c:bd:66:79:f7:f9:7b:b5:
e7:5b:d7:79:5e:60:bc:b8:b2:08:de:66:21:5c:09:
d7:64:11:53:21:68:dc:f1:7a:e4:24:ba:83:89:c6:
b1:ac:62:6c:ea:97:64:ef:98:6d:ca:17:e1:f1:52:
3e:ba:07:d7:ed:53:ca:80:c7:ac:94:b4:f7:1c:0d:
55:ab:16:5f:54:69:ab:f0:40:bb:0a:90:4e:67:87:
4d:0e:aa:49:0b:ac:8e:72:ae:1b:4a:d7:4c:80:56:
f3:73:89:2f:72:52:83:4a:cb:d6:a7:2f:eb:4a:e7:
e0:a3:e5:f5:9d:82:19:f1:7c:97:e2:4a:22:ba:35:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3B:A2:B4:C8:DE:B9:28:99:19:E7:00:DE:A2:B3:F4:77:AB:44:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sDuitMjeuSiZGecA3qKz9HerRLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.59.0/24
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
45.95.0.0/22
83.143.113.0/24
85.208.139.0/24
87.120.36.0/24
87.120.88.0/24
87.121.98.0/24
87.121.217.0-87.121.218.255
93.123.31.0/24
94.125.100.0/23
109.206.236.0/24
109.206.242.0/24
185.218.137.0/24
185.246.222.0/24
193.8.185.0/24
193.168.196.0/23
193.168.199.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d9:be:c7:49:ad:e0:81:5f:d3:04:ab:8d:a3:56:b2:85:c8:
d9:c5:02:09:1e:c3:fc:32:2d:41:34:c6:1a:2a:96:0e:db:96:
e9:e6:34:05:a9:69:71:0f:ed:69:63:d6:5a:e1:72:83:99:70:
28:22:2f:a4:46:5e:25:3a:c0:12:da:77:a2:b9:78:ab:6a:cc:
4f:f4:3e:d1:3b:f0:79:20:a1:01:75:d3:fe:92:ef:9f:22:84:
90:b7:fb:bf:aa:f5:37:d4:3e:92:1c:c5:70:f8:06:ca:ea:b8:
a4:1e:5d:9b:3b:44:dd:ec:66:ed:54:9f:9b:97:28:ef:ea:1a:
64:17:46:91:fc:da:39:7e:55:28:d9:be:de:1f:80:dc:61:af:
e5:21:1c:65:f5:3c:7b:00:f3:a6:db:f7:7a:cd:b4:2c:b0:13:
4c:4d:e3:c3:36:c3:26:eb:84:de:c8:d1:2e:86:23:3f:f6:36:
49:aa:28:60:f0:75:27:bd:b2:c9:fe:8b:65:87:64:53:93:0f:
ee:7c:30:00:51:b3:37:5a:53:fa:b7:ec:82:f5:84:ac:62:03:
7a:cf:45:12:52:4c:54:f3:93:9e:be:3f:a8:66:3a:0e:8f:65:
93:ec:0f:80:6a:8a:aa:92:f0:ce:e0:ef:fd:75:5b:b1:d6:ff:
10:0b:99:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 14:50:23 2024 by rpki-client on console-fra.rpki-client.org