Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u4qFU22bq0Lkw5r6eCi6q01reE8.roa
File: u4qFU22bq0Lkw5r6eCi6q01reE8.roa (raw, json)
Hash identifier: bo8OM/bVklFLO9FNjqpt1UwfNczX+lxfEDz9h6o+Trk=
Subject key identifier: BB:8A:85:53:6D:9B:AB:42:E4:C3:9A:FA:78:28:BA:AB:4D:6B:78:4F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01929D9BA99579E0BA92E9DE3045D2A0389C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u4qFU22bq0Lkw5r6eCi6q01reE8.roa
Signing time: Fri 18 Oct 2024 03:11:17 +0000
ROA not before: Fri 18 Oct 2024 03:11:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.12.253.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
93.123.113.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
193.148.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 11:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9d:9b:a9:95:79:e0:ba:92:e9:de:30:45:d2:a0:38:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 18 03:11:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb8a85536d9bab42e4c39afa7828baab4d6b784f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:5c:dd:6e:19:4e:47:ed:69:6a:11:21:de:
96:aa:70:a7:b3:97:0c:70:87:d4:93:30:e8:e9:8b:
19:9a:d7:9f:c3:cc:53:e3:85:81:1e:8d:55:a1:eb:
28:31:cc:62:3c:54:d2:e9:69:32:9d:80:14:0c:fe:
33:f8:60:cf:a1:05:44:64:80:55:a3:91:64:98:48:
e8:f6:f1:f0:aa:66:d7:96:77:f3:8e:fb:d4:68:21:
56:84:5d:08:9a:5a:8a:da:a0:63:f4:d2:43:87:d3:
9a:f9:db:70:f4:ad:88:53:6e:6d:7b:f9:fc:d5:77:
05:10:1b:01:d2:79:df:44:86:33:f7:88:01:e0:72:
52:e2:61:03:25:b3:71:f7:97:f7:b7:5c:00:a5:b9:
84:fa:a7:6c:db:21:6a:ef:4e:1e:bd:b1:07:1f:88:
ef:e6:a3:99:04:a3:eb:27:f2:3f:4a:81:41:3d:db:
c9:05:57:7d:f6:ef:c0:40:30:7b:2a:03:74:cf:9b:
cd:f4:bf:fb:fe:2a:cc:8a:ba:20:9b:c0:a8:82:e1:
b8:fc:f2:98:db:ae:f7:85:11:36:35:55:fb:8d:7d:
b7:a2:2d:18:e3:18:43:ab:6c:d5:ad:e5:06:f8:9b:
74:10:c4:72:62:9f:da:86:cf:7a:b4:09:cc:79:a7:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8A:85:53:6D:9B:AB:42:E4:C3:9A:FA:78:28:BA:AB:4D:6B:78:4F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u4qFU22bq0Lkw5r6eCi6q01reE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.253.0/24
87.120.68.0/23
93.123.74.0/23
93.123.113.0/24
185.252.160.0/23
193.148.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:94:20:2a:b7:b7:aa:8a:f3:22:51:aa:07:c4:9f:d5:6c:6a:
55:d2:5f:26:77:0e:2c:e9:24:3c:b0:53:37:2b:9d:8b:aa:a7:
e9:81:ce:cf:94:d2:a7:56:29:05:9d:04:3e:c1:b2:71:e1:1a:
0c:f1:74:de:6a:1c:a2:96:62:bd:e3:cc:13:55:c6:4a:b2:fe:
35:09:a9:01:0a:ea:2e:31:99:20:26:f2:79:40:5f:14:77:69:
29:8d:34:1d:8c:c4:e4:55:cd:8b:7e:ab:62:8d:c8:2d:6a:9e:
83:93:14:3f:4d:6e:c9:6b:7e:d5:ea:fd:22:59:91:0b:9a:9c:
ef:d5:ac:f9:2f:49:c4:9b:7f:36:41:71:bf:29:bc:c7:d8:1e:
d6:62:b7:7f:1f:be:c6:c2:e7:53:5f:99:03:5f:c2:3b:63:0f:
51:ef:af:be:40:d4:71:31:a7:1a:09:26:5f:87:a7:1f:2d:57:
fd:e9:06:2d:ef:97:ca:cc:7d:aa:50:05:0b:3b:33:45:03:53:
e3:8f:3d:80:b8:f1:2b:ab:80:7b:fb:71:5c:5e:4e:d3:ef:1e:
05:31:27:31:84:96:91:ee:5d:7e:8a:c4:28:eb:a2:b7:ac:ba:
2f:c5:31:50:1b:d8:48:db:f8:39:a3:5c:1a:3c:54:c0:50:3e:
c4:f5:ad:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 13:26:13 2024 by rpki-client on console-fra.rpki-client.org