Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zU-GsJj-h8hwyBx1DFtCTS_7T_w.roa
File: zU-GsJj-h8hwyBx1DFtCTS_7T_w.roa (raw, json)
Hash identifier: Dc19Gnv8b7tGbJiIZy+iv21efe39PrLhYUKEx4c1Ges=
Subject key identifier: CD:4F:86:B0:98:FE:87:C8:70:C8:1C:75:0C:5B:42:4D:2F:FB:4F:FC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DEE6CF95A1BB78BC9F8686905A7ABE96E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zU-GsJj-h8hwyBx1DFtCTS_7T_w.roa
Signing time: Wed 28 Feb 2024 06:35:35 +0000
ROA not before: Wed 28 Feb 2024 06:35:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61302
IP address blocks: 45.129.84.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 09:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ee:6c:f9:5a:1b:b7:8b:c9:f8:68:69:05:a7:ab:e9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 28 06:35:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd4f86b098fe87c870c81c750c5b424d2ffb4ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:78:9b:22:90:7d:b4:44:88:87:bc:6b:bd:
f3:eb:d3:98:0a:b5:d1:06:52:64:cf:60:04:c5:c0:
47:75:c2:a5:fa:a2:f3:a2:4a:7f:40:ee:b4:90:37:
4b:3b:60:26:02:ca:1f:dc:c5:ca:3e:10:e1:42:6b:
a7:c9:7f:f4:25:6b:d5:ff:91:d4:73:15:69:51:01:
34:85:f5:53:1d:9d:e1:1f:23:ba:be:b3:f0:07:73:
98:82:2f:9a:d4:cc:4b:30:c8:2e:b8:f8:cc:6b:e0:
9b:0c:3e:f7:bb:5c:48:0a:a5:c5:5a:7c:2f:b4:8a:
c5:d1:b1:38:f4:1f:77:b2:4a:3b:69:29:c9:f1:c4:
06:9e:a5:88:28:a7:ca:8d:3c:86:ae:48:95:81:9b:
7d:3a:0b:fc:cd:36:20:d3:60:67:88:97:3b:04:74:
21:06:cd:2a:a3:85:1e:f9:76:b9:d9:10:97:aa:72:
40:5f:dc:a5:56:da:a3:7d:58:b7:4a:7b:2f:13:61:
81:5d:cd:41:8f:15:b7:1d:36:c3:db:b9:14:4b:40:
21:df:8c:1b:72:c5:11:eb:68:b4:57:43:a3:69:b4:
d6:6f:24:7d:68:e5:26:62:1c:15:39:c7:03:22:4c:
d4:36:69:ba:8f:c7:fb:b1:f0:02:92:1e:f5:6b:af:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4F:86:B0:98:FE:87:C8:70:C8:1C:75:0C:5B:42:4D:2F:FB:4F:FC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zU-GsJj-h8hwyBx1DFtCTS_7T_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.84.0/24
45.141.158.0/24
81.161.239.0/24
82.115.210.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
147.78.100.0/24
171.22.17.0/24
171.22.31.0/24
Signature Algorithm: sha256WithRSAEncryption
87:81:51:4e:76:a3:2c:fa:6a:a3:89:46:03:28:9f:76:74:47:
16:ec:05:a5:92:99:9e:f9:79:3f:72:8a:af:8a:cf:14:dc:ba:
e7:fd:91:38:fe:72:68:5b:4f:99:91:b9:e5:c0:53:5b:17:7f:
02:8d:76:e2:d4:8e:51:6e:26:35:a5:7d:7a:24:92:cb:da:b6:
97:0e:60:2a:8d:27:5b:e5:21:17:a9:24:de:8a:df:fc:10:3e:
47:1c:1e:ad:1c:d4:26:f1:17:b4:12:ac:6d:81:ea:dc:eb:1a:
2e:22:bf:32:72:d6:05:36:6f:d5:2c:ed:13:20:82:25:ac:2b:
5d:68:b8:5d:77:7e:3a:99:55:1a:8f:77:d0:ad:c8:f3:e4:75:
90:bd:b0:9e:17:cb:dd:92:a7:3a:72:46:cc:12:f6:62:44:4f:
1f:90:0d:3a:c4:1e:11:71:fe:8d:d2:21:a8:9f:24:31:c8:e1:
1c:91:5d:1a:d3:7e:f6:66:ca:c7:e3:58:64:8e:2f:d8:4c:c6:
de:37:80:84:f8:42:0b:1f:7b:36:97:7a:d1:95:1c:97:be:fa:
03:af:3b:03:30:27:81:7d:fb:6c:ed:94:2e:98:7f:fa:c7:4b:
7d:4a:81:08:3b:29:b9:91:ae:27:92:d5:a0:64:0f:d2:47:3d:
9e:79:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 14:02:44 2024 by rpki-client on console-ams.rpki-client.org