Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u9tZgpO20OVFV2ZWnfR7hsawjoo.roa
File: u9tZgpO20OVFV2ZWnfR7hsawjoo.roa (raw, json)
Hash identifier: jkbmm3MTgkvQLpS5F7iw+DcRuS3zPBJk9C/LdXKu1c4=
Subject key identifier: BB:DB:59:82:93:B6:D0:E5:45:57:66:56:9D:F4:7B:86:C6:B0:8E:8A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01937780CEA62E8905F03EC33CC9BD6654A8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u9tZgpO20OVFV2ZWnfR7hsawjoo.roa
Signing time: Fri 29 Nov 2024 10:39:10 +0000
ROA not before: Fri 29 Nov 2024 10:39:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Nov 2024 09:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:80:ce:a6:2e:89:05:f0:3e:c3:3c:c9:bd:66:54:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 29 10:39:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbdb598293b6d0e5455766569df47b86c6b08e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:39:26:c2:b8:c5:41:7f:b5:83:c7:a5:35:
cf:8c:5a:71:f6:f6:04:ce:f9:f6:13:82:0d:04:6a:
a5:3c:6c:79:11:bc:86:fe:51:13:bd:51:6c:ad:04:
df:c0:56:c4:f0:0c:c3:e8:b7:db:88:ba:c0:f5:96:
3a:b4:82:20:5c:e4:a8:92:9f:cf:4f:e1:2a:34:42:
db:d0:c7:72:cc:bd:75:1a:d2:3e:7d:53:18:4c:3d:
57:3e:a0:1b:8f:9d:d4:58:75:ab:3a:3c:ff:5d:fe:
74:e9:2b:8d:86:47:6c:9f:5f:84:52:f3:cd:51:6b:
e1:7c:34:81:41:e9:04:20:4f:4e:08:eb:37:55:63:
94:93:8d:5d:b4:43:99:f6:5c:77:e6:17:02:75:63:
99:13:75:76:26:f9:f6:fc:a8:e2:2f:e3:03:12:e1:
5e:07:99:e0:45:ba:6b:c7:2e:6e:c4:12:22:dc:44:
9e:9a:c1:bd:03:02:8b:82:9c:ee:e7:e3:9d:a0:73:
fe:c5:06:d4:70:ba:a4:93:0c:cc:b7:71:69:8e:ae:
eb:37:cb:93:49:5b:39:4b:0b:37:4c:11:07:a4:8b:
5f:f4:e4:06:e2:c6:c2:0f:0f:0c:1d:77:a4:b3:15:
17:bb:b7:28:7d:57:46:04:e5:21:db:ff:2d:0e:f8:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DB:59:82:93:B6:D0:E5:45:57:66:56:9D:F4:7B:86:C6:B0:8E:8A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u9tZgpO20OVFV2ZWnfR7hsawjoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
45.149.235.0/24
83.143.113.0/24
87.120.36.0/24
87.120.88.0/24
109.206.242.0/24
Signature Algorithm: sha256WithRSAEncryption
89:7b:5f:6c:6f:22:f9:31:39:41:ec:0b:95:3b:0a:de:7b:ea:
4e:32:18:41:e3:81:88:f1:04:50:df:d1:f3:17:e4:f7:9d:f7:
b7:fb:c1:ef:0b:c5:c9:3b:93:15:07:ae:d5:59:b8:3f:64:14:
63:cf:6a:c9:23:73:b6:0d:47:84:24:ca:a4:19:8b:66:1e:a5:
87:9b:fc:5d:4b:88:77:d6:53:36:c3:ec:f3:8d:13:df:6a:dc:
c5:f4:57:8d:3b:9d:20:84:23:bf:12:ec:d3:36:54:8c:d5:bd:
d8:6e:35:23:dc:4b:8c:8a:0e:d4:b3:de:68:ab:34:29:5f:b5:
72:81:91:9f:81:e5:d1:a2:58:7e:c1:c2:9e:b9:9b:20:c5:70:
1f:04:4e:88:d0:d3:a8:5c:27:58:68:b8:28:b3:8a:1c:74:a4:
fe:40:97:18:53:ec:e6:0f:4f:65:58:60:50:59:a3:9f:9f:43:
6e:e9:29:f0:9a:4e:ff:5d:d4:f8:86:3d:0d:45:ff:64:b5:6c:
64:d7:56:5d:a1:69:fe:50:2e:54:86:59:e2:c3:76:06:5b:76:
3a:8a:51:44:17:4a:75:8c:a2:b1:09:e9:84:ff:c7:1d:18:a6:
89:29:c9:cd:82:7c:45:e8:e2:60:59:ad:44:0a:3a:84:21:1a:
73:f0:aa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:21:30 2025 by rpki-client