Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ux7ys4cyrAERnCFHFQr4hHQI7y0.roa
File: ux7ys4cyrAERnCFHFQr4hHQI7y0.roa (raw, json)
Hash identifier: pdtqb2/sCaGO5d0gkY0FPiYG6pVnxj39QM6YYbQAMJg=
Subject key identifier: BB:1E:F2:B3:87:32:AC:01:11:9C:21:47:15:0A:F8:84:74:08:EF:2D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187C244CFA204037722C532852C1D932E95
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ux7ys4cyrAERnCFHFQr4hHQI7y0.roa
Signing time: Thu 27 Apr 2023 10:31:42 +0000
ROA not before: Thu 27 Apr 2023 10:31:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206003
IP address blocks: 87.121.124.0/23 maxlen: 24
81.161.239.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
45.66.228.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
185.246.223.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
82.115.210.0/23 maxlen: 24
45.139.104.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 14:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:44:cf:a2:04:03:77:22:c5:32:85:2c:1d:93:2e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 27 10:31:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb1ef2b38732ac01119c2147150af8847408ef2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:b3:c0:ea:9a:50:35:f9:73:90:7b:1b:8a:
cb:f8:36:0a:38:d6:e0:a4:53:43:d7:33:82:45:06:
ca:23:94:bc:00:74:15:2e:f2:de:8b:36:33:cd:dc:
9b:98:80:f2:c6:f9:b3:ca:23:e4:04:25:1e:32:1d:
9e:6d:12:82:60:09:7b:b6:05:63:2f:70:f8:96:55:
83:8d:a7:61:4b:0c:85:a1:c5:f2:98:a7:a9:99:92:
89:44:65:31:20:72:5e:5e:c3:63:58:46:0b:c7:f6:
8b:52:1d:e4:ff:b0:2f:8f:84:3b:cb:7d:4f:72:01:
4c:8f:09:37:38:98:0e:6a:2f:f2:2f:b7:79:fc:85:
f4:46:3c:95:f5:a1:a8:e3:22:6d:f9:6c:c4:e2:1d:
72:34:12:75:f8:93:f9:21:73:93:fd:81:65:9a:8d:
14:8e:f9:cc:98:0c:74:47:ac:d4:09:18:b6:de:9f:
6d:1f:4e:06:57:61:98:96:6d:b3:c8:a5:32:61:dc:
d7:f8:8e:9a:0d:11:52:16:ec:d7:31:6a:47:5e:a1:
c1:08:32:d5:9a:7a:6a:2a:b2:cf:5e:ad:d0:0b:21:
41:84:08:b5:36:e6:c2:ab:81:c9:7e:7e:51:87:69:
93:af:fb:0a:04:f0:9b:a7:ea:37:1e:a7:f3:ba:43:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1E:F2:B3:87:32:AC:01:11:9C:21:47:15:0A:F8:84:74:08:EF:2D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ux7ys4cyrAERnCFHFQr4hHQI7y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.139.104.0/24
45.141.158.0/24
81.161.239.0/24
82.115.210.0/23
83.219.97.0/24
87.121.124.0/23
87.121.220.0/24
91.200.192.0/22
94.154.172.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
178.215.226.0/24
185.246.223.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:bc:80:18:25:8d:95:7b:41:fb:3f:c3:4f:c2:5a:cb:9e:0b:
f4:55:4a:38:64:2e:1b:d2:79:94:bb:54:57:19:68:56:bf:89:
d1:3a:9c:ec:c7:79:14:3c:d8:82:00:1e:93:3f:5a:bb:70:52:
dc:97:88:db:5a:21:2a:7c:5c:16:45:c2:54:c4:73:40:87:b5:
d5:fe:f0:ea:e9:11:b3:00:35:50:8c:73:3f:aa:37:1a:04:9e:
8f:60:d1:cf:11:c8:c0:3b:be:09:bd:c2:b4:85:53:5f:71:44:
36:68:5d:ac:2a:05:aa:62:46:ce:b6:1c:ad:66:c1:a9:2f:73:
2b:e1:25:c2:85:5c:66:07:22:0d:25:81:54:40:67:b4:36:d9:
df:ee:f2:f0:85:2a:e8:69:ee:c5:2a:61:e9:a0:db:6a:66:8f:
86:5c:38:ce:07:a4:92:c6:2b:ba:a4:ff:08:83:be:30:4c:75:
1d:7e:e5:b5:9a:dc:de:55:ff:49:47:8e:b4:75:94:a7:a5:36:
19:7d:5f:31:e0:1c:7d:10:f2:6b:ef:83:6b:20:54:46:4d:69:
8e:d6:d0:8f:cb:31:b8:13:0e:54:ac:0b:88:e7:32:1e:0b:36:
b0:4e:5a:0d:16:7e:e7:1f:4c:09:53:20:7c:9c:6b:f7:f6:23:
de:59:d9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:45 2024 by rpki-client on console-ams.rpki-client.org