Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/whiRDDKMLXn98aZQjx-jm7zOnIk.roa
File: whiRDDKMLXn98aZQjx-jm7zOnIk.roa (raw, json)
Hash identifier: Rvz6B9ZOw4EAbjrEPm/BBmXtaB30MpfFBcyeVPEpKzg=
Subject key identifier: C2:18:91:0C:32:8C:2D:79:FD:F1:A6:50:8F:1F:A3:9B:BC:CE:9C:89
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019204BA445D862206D241EEFEABFA85E700
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/whiRDDKMLXn98aZQjx-jm7zOnIk.roa
Signing time: Wed 18 Sep 2024 10:42:48 +0000
ROA not before: Wed 18 Sep 2024 10:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 31.13.224.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.166.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 06:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:ba:44:5d:86:22:06:d2:41:ee:fe:ab:fa:85:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 18 10:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c218910c328c2d79fdf1a6508f1fa39bbcce9c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:68:e5:8e:79:fa:78:51:c8:09:5b:7c:d4:
fd:c6:30:bc:95:d1:bb:18:37:8e:c9:44:06:01:cf:
56:6b:8c:00:e7:f6:b9:6d:fe:91:ed:e2:87:74:8b:
b1:c9:8c:c3:33:65:f1:70:87:f3:b2:74:8c:fa:ed:
20:3f:87:c9:7d:64:3f:d2:6c:34:fe:db:66:76:1f:
a1:68:cb:fb:62:0f:85:48:0b:3f:da:03:15:a5:38:
1e:b2:c9:3c:9a:fb:0c:c3:31:b3:3f:56:a6:42:b7:
9d:1d:33:03:1e:b2:9b:b6:d3:d5:62:80:38:24:ba:
21:78:a9:29:08:b1:8a:32:69:63:27:29:7b:63:44:
bc:37:8f:3e:d1:b2:2d:95:88:b5:e4:bc:bb:f4:a0:
f1:85:20:44:0b:d9:91:6a:6c:94:13:a7:f8:9e:98:
4b:98:ca:59:da:7b:e6:82:1c:a2:fa:6d:26:db:95:
fb:31:76:03:91:19:e0:e9:28:75:48:38:70:05:d0:
77:52:49:c4:98:ab:f3:e7:b1:b0:28:b4:50:7a:f1:
ce:44:ed:e8:20:e2:f8:41:e9:62:a1:35:f3:1c:34:
65:d1:05:42:2e:f4:fb:08:d4:78:ab:af:9b:bc:e8:
0f:0b:46:2d:d8:99:28:ea:54:21:54:26:bc:dc:59:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:18:91:0C:32:8C:2D:79:FD:F1:A6:50:8F:1F:A3:9B:BC:CE:9C:89
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/whiRDDKMLXn98aZQjx-jm7zOnIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
45.66.228.0/24
45.88.88.0/24
45.149.241.0/24
45.151.89.0/24
45.151.91.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.86.0/24
92.119.196.0/23
93.123.39.0/24
93.123.109.0/24
94.154.160.0/22
94.156.11.0/24
94.156.104.0/23
94.156.166.0/23
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
62:56:e3:c7:60:67:a9:c9:a8:60:f7:b3:4c:d4:13:14:e9:3e:
b1:c5:69:9c:3e:b6:19:04:ae:2b:dc:a7:ce:7d:f8:a0:b4:8f:
5c:c6:f0:c4:10:f4:aa:2d:47:73:90:99:ed:4f:56:8e:94:89:
42:ca:90:fe:ff:e1:93:b9:11:e1:86:be:b7:f6:bd:76:e6:36:
14:03:29:63:c0:65:2a:fb:6d:bd:5b:54:bf:7e:74:0b:e1:16:
81:82:0b:f6:80:84:e1:dc:da:aa:0d:66:2e:b6:a2:6e:55:5a:
0a:61:a5:04:65:52:00:87:14:4c:c4:66:94:10:ef:ee:19:15:
70:9f:b1:e7:26:00:a4:cc:5b:ec:b5:3a:ba:ed:b9:1e:55:66:
22:bd:8a:80:84:16:76:7d:e0:e5:4b:c1:fc:bb:a2:9a:42:77:
53:1e:5c:55:2c:19:c5:32:40:4b:70:cf:1f:a0:93:7f:14:4d:
32:74:5c:a7:9a:d3:80:70:d1:82:66:a4:a9:fd:b0:ad:36:09:
5a:88:ac:3f:ae:5c:9d:0a:1f:9e:1c:78:3a:48:57:a3:c6:36:
c6:71:2c:7d:5f:9e:57:05:a9:e9:9c:76:fe:55:1c:4d:15:ce:
86:79:1a:2e:ca:6a:58:d1:9f:7b:68:68:82:07:1b:6b:41:09:
36:25:f9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 07:47:40 2024 by rpki-client on console-fra.rpki-client.org