Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/NjVzZd5nX8viklq6YX_pc_GLY9Q.roa
File: NjVzZd5nX8viklq6YX_pc_GLY9Q.roa (raw, json)
Hash identifier: cqENOsO2rVFLoRSibjWl//TnjU9k3wv/oJ8lwOLG0lo=
Subject key identifier: 36:35:73:65:DE:67:5F:CB:E2:92:5A:BA:61:7F:E9:73:F1:8B:63:D4
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 018D8ABE2CD834F697FAAA224DC9D027643D
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/NjVzZd5nX8viklq6YX_pc_GLY9Q.roa
Signing time: Thu 08 Feb 2024 22:02:15 +0000
ROA not before: Thu 08 Feb 2024 22:02:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 5.183.240.0/23 maxlen: 23
5.183.242.0/23 maxlen: 23
45.14.80.0/24 maxlen: 24
45.14.81.0/24 maxlen: 24
45.86.24.0/22 maxlen: 22
92.119.24.0/23 maxlen: 23
92.119.26.0/23 maxlen: 23
171.22.60.0/23 maxlen: 23
171.22.62.0/23 maxlen: 23
185.45.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 01:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8a:be:2c:d8:34:f6:97:fa:aa:22:4d:c9:d0:27:64:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Feb 8 22:02:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36357365de675fcbe2925aba617fe973f18b63d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:10:35:99:ec:a8:d9:40:5b:6b:97:3e:87:
71:3e:09:38:a2:1c:d2:be:b9:b9:7b:d7:5c:88:41:
3b:ec:97:5c:d1:43:af:d2:58:54:1b:46:74:ca:cf:
6a:61:b7:c7:0a:fb:23:20:f8:a2:f7:ee:10:c5:8c:
83:a3:40:88:59:28:69:a6:d4:72:ab:35:18:ae:23:
f5:b5:3f:3f:1b:12:f2:f9:b9:e5:63:04:d8:53:04:
27:3d:15:7b:e5:36:a7:39:bc:58:6c:b6:04:e4:bf:
0d:b6:6e:37:f4:60:44:02:98:1a:ff:a0:ed:02:c6:
64:2f:79:d9:29:cb:a3:10:c1:74:a5:aa:4c:b9:ce:
25:7a:ad:90:ac:3e:e4:ed:a7:0d:fc:36:d1:00:8c:
d3:0c:a5:24:cc:ab:4a:20:c9:41:0e:09:08:69:7b:
90:a3:e8:0c:95:16:51:66:14:44:18:83:b6:73:d1:
72:78:d8:f4:9a:fd:01:92:2f:d0:13:d9:fa:b7:c7:
1e:60:ce:f7:74:13:e5:31:32:3d:0b:82:89:7c:64:
1e:83:25:5e:49:09:7f:73:34:a4:62:2f:7a:9b:e3:
29:0a:ea:f6:24:2d:0b:35:c5:74:6f:43:49:31:65:
6d:bf:8b:d3:76:fe:f8:95:e5:b4:1e:c8:a6:cf:c7:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:35:73:65:DE:67:5F:CB:E2:92:5A:BA:61:7F:E9:73:F1:8B:63:D4
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/NjVzZd5nX8viklq6YX_pc_GLY9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.240.0/22
45.14.80.0/23
45.86.24.0/22
92.119.24.0/22
171.22.60.0/22
185.45.94.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3e:24:56:56:35:87:2a:74:56:8f:cd:da:2c:b9:87:a5:3b:
17:b8:80:15:ba:3d:0e:58:9c:65:17:43:9c:a1:bc:f1:d6:31:
5b:90:d7:71:8a:41:36:63:32:3b:8b:be:35:b3:cf:27:c9:a4:
8a:3b:fb:da:39:cc:27:8c:96:06:7c:c5:7c:9e:3a:1c:65:ee:
b3:1c:02:cc:44:b0:27:cf:12:c0:6b:70:3e:87:0c:71:c7:26:
82:6c:52:1a:82:9b:07:19:8d:ee:1a:16:32:bc:26:cd:64:5f:
55:4e:8b:de:2d:15:a5:38:07:59:49:bc:99:b7:01:20:42:18:
cb:8b:5c:c7:11:c4:63:a2:6a:04:14:f4:d5:39:33:a1:08:74:
7c:47:28:3c:f1:4b:59:b4:4e:34:94:81:67:58:2b:c7:bb:e7:
ec:1c:51:fa:c4:7b:3c:dc:f5:90:21:2f:ef:f0:c1:50:30:f6:
33:cb:94:0e:b3:a8:70:69:28:f8:95:4a:f2:82:f5:ac:0f:75:
f1:ba:90:89:bd:94:41:88:d5:25:91:b9:33:5a:a5:2f:94:49:
68:a0:fb:fc:cd:c8:a3:6b:31:af:51:90:88:4c:4b:2a:cf:29:
8f:0a:b3:fd:88:eb:09:90:40:73:23:c7:bb:9c:ef:3c:f3:dc:
9b:5e:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 03:03:06 2024 by rpki-client on console-fra.rpki-client.org