Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u3px0ASFuaBX4Aa496XfZb3Z1yw.roa
File: u3px0ASFuaBX4Aa496XfZb3Z1yw.roa (raw, json)
Hash identifier: sH6hFVsEb4VCUjX6CJ4xr3GiW+jURnfRqcedNBIAn8c=
Subject key identifier: BB:7A:71:D0:04:85:B9:A0:57:E0:06:B8:F7:A5:DF:65:BD:D9:D7:2C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D83AB452D7CA89B8D3B4DE75A1B1E15E6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u3px0ASFuaBX4Aa496XfZb3Z1yw.roa
Signing time: Wed 07 Feb 2024 13:04:15 +0000
ROA not before: Wed 07 Feb 2024 13:04:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
5.253.58.0/23 maxlen: 24
45.8.92.0/24 maxlen: 24
45.139.123.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.112.0/22 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.178.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
94.156.237.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 14:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:83:ab:45:2d:7c:a8:9b:8d:3b:4d:e7:5a:1b:1e:15:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 7 13:04:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb7a71d00485b9a057e006b8f7a5df65bdd9d72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:23:3d:bb:9e:59:b4:b1:f5:8b:d9:2c:73:
05:c8:5a:41:24:ba:02:78:f9:df:0b:4d:15:82:e9:
a4:9d:fa:d4:4b:ec:69:96:85:e6:eb:a3:90:61:b4:
1d:96:b4:15:4c:28:31:c7:d5:14:2f:b1:33:a1:c5:
8f:e1:1c:26:e8:54:f8:bf:ed:a5:27:8a:04:7f:57:
c9:34:e0:34:e3:74:35:19:e5:cc:df:21:bb:ad:e1:
c2:18:6b:88:10:68:de:ed:43:cd:52:10:81:ec:d6:
0b:46:8f:1d:e5:33:06:7a:9c:c2:96:cc:1c:4e:5a:
ce:b3:f0:eb:a0:fd:03:16:f5:9e:78:0c:04:a8:24:
ea:8d:23:03:50:f3:49:83:2c:83:ea:32:1c:52:e0:
09:bc:2b:2b:b7:05:98:03:a1:8c:49:e2:fc:12:cf:
95:f0:42:9a:62:67:f7:c5:89:f4:bc:79:e6:d6:a3:
e6:5e:ab:be:09:27:b2:cb:a7:ff:a2:1f:15:46:8d:
43:75:21:ae:8c:d2:44:89:ae:23:2f:03:44:e7:bc:
5e:94:96:95:0e:7f:a4:05:7c:1c:91:27:f8:f6:be:
4c:4e:a0:eb:d4:15:c0:33:50:71:6c:80:70:7c:d3:
5b:82:c7:a6:59:06:e0:b4:75:b8:06:84:85:e3:28:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:71:D0:04:85:B9:A0:57:E0:06:B8:F7:A5:DF:65:BD:D9:D7:2C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u3px0ASFuaBX4Aa496XfZb3Z1yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.8.92.0/24
45.139.123.0/24
87.121.38.0/24
87.121.103.0/24
91.92.16.0/24
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.76.0/22
93.123.112.0/22
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0-94.156.238.255
141.98.5.0/24
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
33:0f:ce:c3:f9:98:12:3b:5b:1f:34:dd:e0:cf:be:67:cf:f5:
74:a1:32:4c:b1:21:e6:07:75:16:aa:38:3d:a8:67:78:95:b7:
76:ae:28:c9:86:c3:b6:44:8b:ea:31:a2:de:87:fd:a6:3d:4a:
da:1b:d8:9e:b8:5c:28:e8:94:f5:a8:24:57:0c:29:e3:ee:74:
3f:a2:bf:99:f7:cb:05:89:7e:11:93:70:7b:4f:bd:7e:71:21:
c1:a0:d1:c0:5d:d0:d5:ee:d4:eb:00:95:9a:85:98:c9:d6:52:
10:d5:f4:e7:07:6c:45:85:c5:e6:b2:fd:b3:ac:f0:95:81:36:
2e:a2:90:85:67:94:74:28:af:3f:49:b0:5b:00:1a:a7:85:d9:
cc:ac:1c:5d:73:68:a4:24:12:a8:8e:e2:f0:a4:f1:79:01:f0:
82:f9:82:ad:b0:02:4d:7f:fb:56:4d:2b:c9:6c:4a:15:97:a9:
af:ec:81:c3:3e:65:d5:b4:a6:a4:33:79:80:13:02:85:44:c1:
7f:1f:41:ea:80:5f:83:e6:e5:c5:a9:f3:59:09:23:ac:ed:ab:
51:f8:42:16:0b:f9:5a:06:92:b4:bf:2a:8e:05:42:f1:71:81:
c9:e4:d7:a0:06:14:be:31:1d:dd:70:3b:14:6a:0d:93:3a:81:
70:e5:e4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 19:42:17 2024 by rpki-client on console-ams.rpki-client.org