Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y9xGXBusYLqKuAtORbBeKpFOsu8.roa
File: y9xGXBusYLqKuAtORbBeKpFOsu8.roa (raw, json)
Hash identifier: OsL2xXPGM5h07aHH50TTEkIw7plGpLEUNH5ZizYpId4=
Subject key identifier: CB:DC:46:5C:1B:AC:60:BA:8A:B8:0B:4E:45:B0:5E:2A:91:4E:B2:EF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191124DA919221C70B3539B52DF9D990C08
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y9xGXBusYLqKuAtORbBeKpFOsu8.roa
Signing time: Fri 02 Aug 2024 08:56:04 +0000
ROA not before: Fri 02 Aug 2024 08:56:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.58.95.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.35.18.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
195.178.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 10:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:4d:a9:19:22:1c:70:b3:53:9b:52:df:9d:99:0c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 2 08:56:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbdc465c1bac60ba8ab80b4e45b05e2a914eb2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:2a:74:bf:5d:69:4f:6e:cb:0c:de:3f:bf:
7a:8d:fd:94:56:5b:8d:f0:b4:c0:e6:c9:0e:3d:c4:
9e:d7:77:f7:99:16:e6:a5:0d:3a:b2:3b:a4:89:f3:
bc:be:52:24:ca:cd:08:fa:1c:d5:8c:57:30:d3:d3:
54:c3:62:db:ed:f7:60:70:44:3a:4b:73:b7:27:80:
dd:c6:93:10:d7:22:c6:c5:30:a8:79:3f:3d:54:a2:
55:c3:79:a2:0b:ad:7c:06:84:5c:2e:c8:a3:04:07:
57:41:e2:da:d3:bf:df:6d:15:a5:1c:36:34:7c:b6:
b1:2e:d2:1a:8b:1a:5e:80:a0:02:50:14:c3:3c:d1:
e7:21:f5:a6:44:06:1c:b2:39:b8:14:b6:60:61:a3:
cc:da:43:74:1e:b1:fb:d0:e5:e6:be:e6:ab:72:b7:
c0:ea:a0:3a:ff:26:59:33:7a:8e:94:9f:ab:ad:b7:
62:c9:9e:0b:df:78:1e:47:cc:b4:1a:40:e5:70:0b:
9b:2e:fc:07:d1:d2:26:e7:50:c7:7e:28:c1:ad:74:
94:73:e9:c3:6e:57:b1:33:bf:75:a7:0e:90:82:53:
22:dc:5c:c7:c5:60:56:78:14:41:ab:c9:2f:ec:d3:
ba:b8:a5:51:1b:11:db:30:37:c4:8c:2a:0a:cc:90:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DC:46:5C:1B:AC:60:BA:8A:B8:0B:4E:45:B0:5E:2A:91:4E:B2:EF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y9xGXBusYLqKuAtORbBeKpFOsu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
45.8.92.0/24
45.88.90.0/24
45.128.96.0/24
45.128.232.0/24
45.144.154.0/24
45.151.89.0/24
80.76.51.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
84.54.51.0/24
85.31.47.0/24
87.120.87.0/24
87.120.93.0/24
87.121.38.0/24
87.121.45.0/24
87.121.58.0/24
87.121.69.0/24
87.121.221.0/24
91.92.16.0/24
92.119.196.0/23
93.123.39.0/24
94.103.124.0/23
94.154.160.0/22
94.156.2.0/24
94.156.8.0/24
94.156.10.0/23
94.156.79.0/24
109.206.237.0/24
141.98.1.0/24
141.98.4.0/24
147.78.102.0/23
171.22.72.0/22
178.215.224.0/24
185.216.70.0/24
185.216.84.0/22
185.218.84.0/22
193.35.18.0/24
193.37.41.0/24
193.37.44.0/24
193.222.96.0/24
194.48.251.0/24
194.55.224.0/24
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5f:19:04:8e:2a:e8:28:e7:da:2e:51:14:9b:3c:38:f4:9f:
e9:92:77:ac:00:1c:93:51:2d:8f:c1:4e:51:28:3d:c4:ae:db:
53:87:bd:b8:e0:fe:da:28:9b:76:00:c9:b3:ca:7c:32:bd:d3:
fb:07:53:53:e1:87:ee:fd:7e:3f:0a:08:dc:d0:40:5f:07:25:
9a:63:e4:90:ad:5d:00:92:dd:ba:41:86:a7:af:ce:1a:8b:bf:
66:73:da:f0:43:de:29:9a:05:7d:66:fb:be:46:6e:2a:55:9c:
f9:b1:43:ff:b0:98:e0:b7:87:f0:3f:ca:54:26:d7:5d:68:ae:
08:07:e2:cd:07:e7:57:fe:b6:af:18:d7:d5:f4:4a:e6:b3:5f:
33:fc:2d:63:54:6e:3e:ca:8c:c3:2e:c0:a0:1c:85:a9:7f:21:
0d:68:32:96:32:8e:12:ec:ed:5b:2f:00:1a:8e:e7:c5:bc:df:
d6:21:8d:9d:eb:a5:0c:18:c7:71:ed:08:47:cc:ed:07:dd:24:
88:58:14:91:0a:45:97:09:85:13:c4:05:d6:c4:91:eb:f1:3c:
a1:75:84:f4:d1:dd:c9:fe:e1:c1:df:a0:62:8a:25:92:32:c1:
77:bf:6f:c0:2d:47:4b:f0:50:92:f4:f7:03:21:b9:63:7c:d1:
a3:9b:84:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 13:49:46 2024 by rpki-client on console-fra.rpki-client.org