Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tgnddlgR3KYPrNv9bZ_5bxwYXRc.roa
File: tgnddlgR3KYPrNv9bZ_5bxwYXRc.roa (raw, json)
Hash identifier: UyDPtkemFVCeIBCpAR3wvMYGPNOcHlflE6zwG05nyQU=
Subject key identifier: B6:09:DD:76:58:11:DC:A6:0F:AC:DB:FD:6D:9F:F9:6F:1C:18:5D:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DE9A9B0FE158E32ABBB5B3958F2020908
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tgnddlgR3KYPrNv9bZ_5bxwYXRc.roa
Signing time: Tue 27 Feb 2024 08:23:48 +0000
ROA not before: Tue 27 Feb 2024 08:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 45.8.93.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.31.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
212.87.207.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 08:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:a9:b0:fe:15:8e:32:ab:bb:5b:39:58:f2:02:09:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 27 08:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b609dd765811dca60facdbfd6d9ff96f1c185d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d8:b2:a4:54:fb:af:3d:ca:f9:ac:e6:a9:94:
a6:32:26:f1:cd:26:6c:7b:c3:40:f5:6e:0b:ff:22:
ad:35:12:ec:cb:16:b7:49:6e:df:0b:db:d5:76:fd:
7d:de:dc:94:b9:ff:1f:70:09:5b:e7:27:c3:f5:3b:
b7:4b:21:8b:f4:97:92:81:77:c1:0b:bd:7e:24:d6:
82:3d:6e:55:eb:5d:98:f3:b9:57:a0:6c:e7:d1:f9:
a0:4b:b2:a9:3b:dc:cb:1e:73:64:9d:e9:18:ff:1e:
96:87:36:72:71:2e:0d:e1:21:f4:a0:70:84:cf:2c:
09:7b:d9:98:11:1d:03:7d:25:17:b7:2a:88:ef:20:
aa:2c:80:ff:e2:91:83:a6:93:95:2b:60:f4:90:2a:
3e:31:08:b8:0b:c1:d6:24:f2:c7:1f:64:a7:8b:79:
f4:f1:36:12:ca:14:7c:29:a5:73:7a:0a:f8:95:0d:
05:f9:c5:23:1d:8a:8c:ce:36:a8:0f:36:a4:d3:02:
8d:c1:d7:88:da:9d:bd:da:dc:e1:98:7c:d1:ec:7a:
f6:d9:c7:b5:2a:f9:1e:42:52:81:b8:76:45:16:2b:
6a:f6:f5:ed:36:7b:54:dc:50:f9:70:13:de:f6:65:
b4:0a:38:9f:57:f3:88:89:21:3c:a9:e4:16:d4:2e:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:09:DD:76:58:11:DC:A6:0F:AC:DB:FD:6D:9F:F9:6F:1C:18:5D:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tgnddlgR3KYPrNv9bZ_5bxwYXRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
45.66.228.0/24
79.110.50.0/24
82.115.211.0/24
87.121.105.0/24
94.156.176.0/24
178.215.238.0/24
193.37.47.0/24
193.149.28.0/22
194.180.36.0/24
212.87.207.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d0:3c:a5:3f:25:8e:1a:43:bc:23:d2:6d:91:91:2a:77:7d:
8c:a5:87:20:a2:a2:de:c9:d5:cd:4b:75:5c:4e:62:69:81:1f:
11:3e:2f:60:a0:23:0e:71:f6:3e:b1:79:5b:d1:cd:76:d1:20:
7d:47:8e:b2:30:0c:92:ad:46:3f:46:7d:99:aa:b5:ff:95:86:
18:84:1c:84:09:59:9d:35:4f:4c:4c:2f:ad:51:e4:fc:12:3c:
68:11:a7:4e:d2:82:63:2b:53:11:2b:d2:e8:d6:11:19:c7:f8:
de:7a:b8:4d:05:0a:74:8d:76:2a:1a:46:af:a0:b6:f6:58:d2:
22:27:16:ec:da:82:48:34:36:b5:b8:9d:23:f4:3a:61:b1:41:
a6:ed:e7:e7:f1:ea:fa:d3:85:82:2a:cf:0a:a7:01:d3:ec:84:
73:73:53:95:c9:f3:d0:df:02:21:0b:d7:71:5f:52:d3:1e:60:
ca:15:23:dc:e8:c6:d3:c6:5a:76:2d:d7:70:70:a8:58:f4:b9:
00:4d:07:92:de:d7:63:b9:b4:4b:ed:92:5e:48:59:d3:1f:e0:
af:53:f0:04:e6:f4:f8:b6:b0:e5:80:7b:87:84:2a:75:e7:19:
1f:1b:77:26:e2:a7:ce:c6:09:2d:4a:68:5e:4f:08:b8:1d:bc:
87:3f:27:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 14:19:35 2024 by rpki-client on console-ams.rpki-client.org