Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zgOtfCsLjJLAG5AFve686CrsW3o.roa
File: zgOtfCsLjJLAG5AFve686CrsW3o.roa (raw, json)
Hash identifier: b5gK3SSB6EA0gR/1paoAaPTb1++gKd7TZjae6jGSuRM=
Subject key identifier: CE:03:AD:7C:2B:0B:8C:92:C0:1B:90:05:BD:EE:BC:E8:2A:EC:5B:7A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CFE0F8E3EA919E8D64B9F225350D00F54
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zgOtfCsLjJLAG5AFve686CrsW3o.roa
Signing time: Fri 12 Jan 2024 14:24:41 +0000
ROA not before: Fri 12 Jan 2024 14:24:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 95.214.27.0/24 maxlen: 24
87.120.68.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
45.149.240.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 11:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:0f:8e:3e:a9:19:e8:d6:4b:9f:22:53:50:d0:0f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 12 14:24:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce03ad7c2b0b8c92c01b9005bdeebce82aec5b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:a6:15:e6:14:8a:2d:4b:21:1e:89:78:aa:
d0:63:14:7a:17:de:e1:2a:ce:81:9a:2f:98:24:f4:
8a:b0:fc:60:f6:7a:a5:f2:e8:26:bd:84:8f:68:75:
98:f7:09:6d:22:0d:24:1f:71:17:a4:a0:83:71:a3:
ab:37:58:c7:52:38:ab:25:de:05:17:c0:44:20:6c:
31:6e:b7:b6:a8:68:72:90:27:57:72:13:26:01:49:
fd:59:26:9b:3a:15:ed:ac:c3:a8:3c:43:6f:ef:2d:
75:21:df:fa:4a:d7:b4:0a:a6:93:62:4f:e9:13:52:
39:35:60:ac:74:7b:28:1a:3a:88:4d:76:29:71:9f:
bf:a8:b6:c0:dd:8b:af:de:04:22:0c:c0:a0:b5:81:
41:4a:d6:26:5b:e0:32:1b:3b:6e:74:ea:cf:d7:ec:
05:e9:61:b7:4a:c3:27:99:9b:10:01:5c:48:c5:2a:
37:b9:70:36:a9:51:62:49:73:45:cb:42:93:29:29:
90:da:ba:a9:6f:18:1c:ae:a6:87:69:5f:42:7a:d7:
31:d7:31:91:cc:80:df:25:58:fb:19:ab:27:90:b9:
01:88:a7:7b:20:f7:74:0b:58:40:6d:25:59:2e:5b:
af:81:bb:7b:ad:ad:2f:35:de:c4:49:9c:a4:31:2f:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:03:AD:7C:2B:0B:8C:92:C0:1B:90:05:BD:EE:BC:E8:2A:EC:5B:7A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zgOtfCsLjJLAG5AFve686CrsW3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/24
87.120.68.0/24
93.123.116.0/24
94.156.14.0/24
95.214.27.0/24
185.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b9:dc:8d:ff:16:fe:7b:c3:6e:f0:3c:13:e9:55:df:8c:c7:
c3:de:2b:fe:d0:23:54:2a:b7:f0:64:b9:4d:e6:90:0e:3b:0a:
2f:0e:91:2f:e7:88:2a:1b:e1:55:92:52:39:6c:65:bc:3c:d7:
9c:eb:e7:e5:93:1f:6a:6e:6a:64:ee:fd:2f:a0:bc:96:c1:43:
6c:4f:c9:6e:79:24:1d:e2:41:c1:e0:52:d7:e2:76:da:17:db:
1b:d5:e7:0c:e5:d5:9f:70:95:d6:f8:00:2f:f6:af:c9:0b:52:
ea:74:61:c3:97:3a:83:50:6c:0a:ec:d9:47:ca:0c:23:7f:38:
5a:0e:88:89:31:7d:68:18:07:5f:f4:bc:5b:4c:6f:7c:04:d5:
bc:15:9b:be:9a:a5:28:1b:29:f7:af:9e:ce:dd:ed:c4:39:f9:
e8:c1:41:cd:aa:d4:8b:5c:ea:76:42:50:df:9d:8e:95:53:89:
c7:28:cd:ae:01:48:ee:bd:fb:18:39:38:78:73:82:76:35:46:
2c:ac:6e:ff:af:9d:ad:03:60:2f:91:06:56:31:e6:f6:16:ed:
31:61:00:c6:f1:ac:35:1f:96:8d:04:a2:33:fd:f5:34:e0:39:
87:c5:97:cb:15:57:43:d5:5a:e3:91:fd:66:2b:0c:d2:65:85:
80:92:ff:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 14:35:31 2024 by rpki-client on console-ams.rpki-client.org