Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uDz5FNmcWw2oDkE3yfc1PRuE030.roa
File: uDz5FNmcWw2oDkE3yfc1PRuE030.roa (raw, json)
Hash identifier: t2I/55rnx0OAXM+Etl46Lqkeq2pbrlKjyOGnslcYCog=
Subject key identifier: B8:3C:F9:14:D9:9C:5B:0D:A8:0E:41:37:C9:F7:35:3D:1B:84:D3:7D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F8B96B83679020FD52A9011276C69DF81
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uDz5FNmcWw2oDkE3yfc1PRuE030.roa
Signing time: Sat 18 May 2024 12:04:21 +0000
ROA not before: Sat 18 May 2024 12:04:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203168
IP address blocks: 45.88.90.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 21:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8b:96:b8:36:79:02:0f:d5:2a:90:11:27:6c:69:df:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 18 12:04:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b83cf914d99c5b0da80e4137c9f7353d1b84d37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:50:71:8f:25:59:5f:07:10:17:d0:66:d9:
d3:1b:20:20:79:8f:49:10:34:ef:9b:77:bc:fe:7c:
2b:ff:86:c7:24:e0:c5:e3:fc:42:88:91:1a:c9:95:
21:d6:16:61:b9:4e:15:63:f3:c5:25:84:12:18:95:
78:46:0a:c1:e6:f6:40:83:ea:8e:1a:e9:1f:5b:ef:
b6:6d:2d:91:40:35:57:64:c8:b2:6f:97:d7:44:b1:
1d:3e:1e:b3:72:e5:70:13:9a:54:66:05:de:35:d8:
c5:9b:b6:1b:32:19:c7:bb:e6:e9:7b:aa:7d:b1:52:
93:d6:8f:1a:73:47:43:6c:5b:52:48:8f:00:4e:4b:
77:f6:bc:e6:05:c0:f1:02:8e:da:24:de:92:18:8f:
9e:f2:e4:25:79:bc:23:62:ce:41:ce:83:44:53:fb:
a5:b9:44:64:b9:eb:fb:52:9a:2c:df:a5:e3:49:df:
53:24:c8:71:35:f4:d8:29:42:0b:4b:66:65:d6:d7:
78:ca:7c:54:91:a9:65:9b:30:72:f8:11:63:72:f0:
e4:fd:cf:1a:ed:e5:32:9b:e0:a1:04:75:f5:db:a8:
12:ac:dd:4d:ba:5f:3d:94:49:f1:41:c3:bc:89:4b:
ad:e8:46:4b:10:50:5e:e9:8e:0f:28:c9:af:ff:e4:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3C:F9:14:D9:9C:5B:0D:A8:0E:41:37:C9:F7:35:3D:1B:84:D3:7D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uDz5FNmcWw2oDkE3yfc1PRuE030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
94.156.10.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9d:eb:30:9f:f2:8c:a8:cb:76:bf:6f:b8:8c:4f:f4:c5:7d:
c6:57:26:32:be:58:4e:f2:3d:02:55:0d:12:e3:c2:8d:7b:4f:
fb:27:05:af:27:ca:ef:dc:c2:43:53:0e:95:0f:61:4d:4a:db:
d2:2a:6a:43:66:4d:3b:7e:bb:18:fb:b6:4b:20:1c:11:f7:44:
5c:4e:a4:e4:34:4d:05:aa:da:ed:4c:90:d3:f2:d6:cd:81:62:
21:21:32:9e:a4:95:15:05:54:a7:83:63:cd:f6:a0:c2:18:d2:
8c:a8:b0:f1:c3:e9:75:0c:49:56:27:15:8e:82:7f:db:2c:7f:
f3:45:8a:52:db:52:b5:0a:4a:c9:a4:23:a1:1f:da:76:cf:ee:
52:b0:f2:c3:42:a0:a5:fc:60:45:6a:b3:4c:c7:cd:65:8a:7f:
d6:9e:8c:02:0b:4c:e7:c8:b8:8f:ab:e6:3a:3a:1b:5c:e2:23:
91:cc:6d:67:b6:06:5e:1c:7d:b9:6d:96:53:ab:c1:3a:e8:d7:
15:a6:d7:39:0d:68:9f:85:6e:90:59:db:38:46:28:fc:de:cb:
72:f6:fb:10:b1:43:43:c2:f8:ce:27:04:f8:6b:1f:58:6a:3e:
39:e8:64:72:81:b4:b3:cd:12:ff:da:06:aa:4a:b9:71:1b:a2:
3d:e2:4d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:45 2024 by rpki-client on console-ams.rpki-client.org