Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zKTVgBlvpxIcTMylGhx8jrSTuyo.roa
File: zKTVgBlvpxIcTMylGhx8jrSTuyo.roa (raw, json)
Hash identifier: 4qQALOPU9j77g/SjA7ERM0/+/cXYpLCL6Eo88hfQ+WU=
Subject key identifier: CC:A4:D5:80:19:6F:A7:12:1C:4C:CC:A5:1A:1C:7C:8E:B4:93:BB:2A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01915600AE8632B9078631C24EC418AC03C3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zKTVgBlvpxIcTMylGhx8jrSTuyo.roa
Signing time: Thu 15 Aug 2024 12:26:10 +0000
ROA not before: Thu 15 Aug 2024 12:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.88.90.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.246.223.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 05:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:00:ae:86:32:b9:07:86:31:c2:4e:c4:18:ac:03:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 15 12:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cca4d580196fa7121c4ccca51a1c7c8eb493bb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:b3:13:70:37:40:62:e0:c0:84:a3:9f:e9:
f8:84:8e:3f:f6:76:d6:6a:1a:2d:04:9d:66:96:7d:
fb:8c:f7:e4:5f:80:80:ce:ee:ae:ac:bf:de:d1:29:
d5:80:fc:8b:80:f5:11:9c:c7:13:c4:fd:71:14:81:
91:0e:ba:61:81:1b:1b:12:f5:24:2c:60:63:c1:6b:
bc:15:be:1f:05:08:e9:c5:5f:05:b3:96:72:7a:1b:
29:37:2b:28:41:ab:f8:60:f5:00:74:5e:fd:48:78:
53:bf:3a:dc:d2:ac:4c:9f:96:d5:11:42:4d:22:8f:
83:71:c3:ff:e7:c1:50:02:fe:d0:6b:f0:49:15:c1:
b5:86:b5:18:90:99:60:3c:5e:13:02:f5:6d:42:e2:
61:ed:23:2f:fa:c2:34:8d:de:df:e1:aa:ea:ee:25:
95:65:7a:20:9e:c4:05:f2:2f:42:d8:9f:0a:dc:60:
c3:80:ab:e8:c0:c8:e2:46:23:6b:8b:18:90:32:d4:
e4:be:fc:fd:50:a0:59:22:1c:ac:70:65:90:46:ab:
e5:fa:65:9a:ac:14:5d:80:dc:d4:d5:e8:76:35:7a:
7e:2f:db:35:59:8e:75:b8:d0:29:34:49:3a:04:55:
73:d2:9a:47:b3:29:d0:e8:95:17:1e:04:23:a6:b9:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A4:D5:80:19:6F:A7:12:1C:4C:CC:A5:1A:1C:7C:8E:B4:93:BB:2A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zKTVgBlvpxIcTMylGhx8jrSTuyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.144.154.0/24
45.151.89.0/24
80.76.51.0/24
81.161.230.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.69.0/24
87.121.221.0/24
92.119.196.0/23
93.123.39.0/24
94.103.125.0/24
94.154.160.0/22
94.156.8.0/24
94.156.11.0/24
109.206.237.0/24
141.98.1.0/24
147.78.102.0/23
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
185.246.223.0/24
193.35.18.0/24
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ca:8f:ea:ad:a2:6a:c7:f2:d9:8a:fa:53:5a:d2:4d:84:0e:
a7:fe:80:e5:8a:d7:e1:5e:4a:00:59:a0:62:e7:62:ee:25:5a:
c6:a1:46:86:bb:8f:13:de:f1:5d:fe:e1:0d:69:f0:cd:f5:7c:
8f:d7:36:ad:b0:6c:06:38:14:a0:e4:54:15:a5:a4:eb:95:c7:
63:46:eb:5a:d3:ed:dc:5e:f3:63:7b:8b:ff:af:26:27:a9:a7:
9a:63:9a:d4:aa:3b:d2:a4:bd:03:bd:37:d2:b7:e8:6b:d4:a3:
c4:47:de:e3:4e:60:1f:6c:b3:a8:f6:93:ae:65:20:a1:f0:21:
e4:a9:38:ff:cc:f3:c6:b1:f4:85:e3:e0:1f:12:e3:8b:c4:c4:
25:a1:ae:0f:57:83:5d:10:41:2c:6b:77:ac:67:e2:f3:3e:ab:
7b:71:29:97:f9:90:4d:71:41:ac:70:40:e2:17:f1:95:fe:85:
d4:d5:f8:ba:13:fb:6c:a7:41:d0:cd:72:63:09:67:fe:eb:e4:
2b:2f:88:f9:f0:ce:35:c9:9a:cc:d4:e1:09:6d:28:54:e9:45:
e5:32:86:a5:0c:aa:47:59:38:19:ae:7e:cd:bd:0f:5d:a1:0a:
74:89:16:26:0d:6b:25:a6:7f:f4:d8:5a:78:fe:47:aa:47:bb:
30:29:4a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 07:21:24 2024 by rpki-client on console-ams.rpki-client.org