Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xCmXgq7SabcM65fBtazWh9uAliQ.roa
File: xCmXgq7SabcM65fBtazWh9uAliQ.roa (raw, json)
Hash identifier: CynvuBfnA17hNs+tqZsXjHgWoLuK5Rx+SRs/nM/8+RE=
Subject key identifier: C4:29:97:82:AE:D2:69:B7:0C:EB:97:C1:B5:AC:D6:87:DB:80:96:24
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F7B7043ABB3F2FBEFD164B83074F55DD5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xCmXgq7SabcM65fBtazWh9uAliQ.roa
Signing time: Wed 15 May 2024 08:48:25 +0000
ROA not before: Wed 15 May 2024 08:48:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203168
IP address blocks: 45.88.90.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 May 2024 12:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:70:43:ab:b3:f2:fb:ef:d1:64:b8:30:74:f5:5d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 15 08:48:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4299782aed269b70ceb97c1b5acd687db809624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:7c:ec:9d:6c:c2:0a:a1:23:b6:ea:6b:e5:
51:45:a6:3f:50:d1:68:bf:f5:47:9a:4f:05:d5:1c:
73:f8:f7:11:05:19:ce:7e:3b:47:a9:03:d1:1d:99:
66:79:1c:d5:de:f4:c0:3f:ae:b2:2e:70:e9:33:4f:
f8:2a:d9:75:ba:93:8c:41:7b:b0:fa:b1:e0:5a:ab:
f1:55:98:95:08:79:5b:c7:f0:e9:9d:bc:bb:30:9b:
69:4e:7d:79:d3:f6:e2:6f:ca:a6:98:e3:5d:e0:ec:
ef:2d:38:cf:e7:90:03:93:22:8c:a7:c5:3c:5f:e0:
15:d3:8f:95:09:a1:cb:82:27:0e:18:0b:69:c3:ef:
de:b6:64:d3:b7:85:9b:68:58:7b:fe:50:ec:f2:10:
e6:62:2b:b7:d4:04:df:fb:15:b9:28:c8:ed:3e:93:
11:54:18:41:0b:dd:21:30:f7:9b:6b:69:09:96:9c:
14:3d:41:35:76:1e:ed:b5:00:7f:cd:29:4c:12:0e:
d7:7d:3e:26:d9:67:7e:76:45:8d:d6:c1:bb:5b:36:
47:62:4a:0d:1c:c5:d0:b1:c5:5e:6c:62:29:32:b9:
de:90:72:6b:55:4c:8a:f9:8b:6a:bc:42:35:94:9c:
48:37:45:6a:3c:33:5d:1f:fe:72:c0:94:00:81:e4:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:29:97:82:AE:D2:69:B7:0C:EB:97:C1:B5:AC:D6:87:DB:80:96:24
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xCmXgq7SabcM65fBtazWh9uAliQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
87.121.105.0/24
94.156.10.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a8:be:17:b7:7d:a3:2a:06:11:47:cb:00:3a:97:a8:0f:c9:
fc:56:7b:85:ed:a7:b4:f1:79:c4:22:83:5b:0d:cc:6f:a2:ad:
9a:02:40:3a:68:be:f0:7e:fb:3e:69:4b:44:22:91:fe:04:4a:
6e:6b:ea:96:6c:47:69:82:0b:28:0a:a3:5e:2a:eb:19:24:35:
67:33:57:5c:f4:42:2a:0c:c4:b4:1a:f3:6a:f6:c4:0c:e2:3a:
db:d0:04:b7:29:73:fb:1f:0d:92:54:17:68:be:f0:1f:b9:7e:
91:81:eb:a2:d0:a3:a4:e6:9b:b9:08:fe:a7:19:75:dc:96:1a:
43:43:8e:01:84:9a:1b:3e:c9:a4:74:f9:9c:e7:65:55:a2:89:
ed:0e:04:f6:26:17:f1:75:13:6b:50:cd:4e:81:6e:d8:bc:7b:
ea:6f:5f:b0:3b:68:91:71:f4:0c:80:91:f2:64:0d:22:53:8a:
5f:d1:7f:ff:17:23:4c:d1:e6:e2:a1:c4:36:3f:30:88:d0:6b:
fe:69:f1:bd:70:50:d3:ee:7a:4c:42:81:b2:b6:06:b2:13:b6:
04:32:65:52:29:42:1f:1b:ad:8c:9a:fa:bb:81:f5:8a:6e:e9:
f7:b6:e5:b5:99:fa:2d:28:4f:dd:9b:6c:fa:57:ba:a7:34:44:
32:4f:27:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:21 2024 by rpki-client on console-fra.rpki-client.org