Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3s9M7RyFsRYLbFgBd9DHk5ZeIsM.roa
File: 3s9M7RyFsRYLbFgBd9DHk5ZeIsM.roa (raw, json)
Hash identifier: TIrg5g0toTbobjdC6CnkslrihLaIAzk+w6DPWIwklSU=
Subject key identifier: DE:CF:4C:ED:1C:85:B1:16:0B:6C:58:01:77:D0:C7:93:96:5E:22:C3
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F7987282A8A5C0D3BFC682A55B5C6F6
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3s9M7RyFsRYLbFgBd9DHk5ZeIsM.roa
Signing time: Sun 01 Jan 2023 22:35:13 +0000
ROA not before: Sun 01 Jan 2023 22:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54103
IP address blocks: 45.87.23.0/24 maxlen: 24
45.87.21.0/24 maxlen: 24
45.88.121.0/24 maxlen: 24
45.88.123.0/24 maxlen: 24
45.133.253.0/24 maxlen: 24
45.133.255.0/24 maxlen: 24
185.243.245.0/24 maxlen: 24
185.243.247.0/24 maxlen: 24
45.143.193.0/24 maxlen: 24
45.143.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:87:28:2a:8a:5c:0d:3b:fc:68:2a:55:b5:c6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=decf4ced1c85b1160b6c580177d0c793965e22c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0c:58:15:6d:8c:f7:57:94:e8:32:31:b3:14:
ce:a8:c4:13:55:34:65:b7:05:77:c9:46:73:ed:e0:
b7:98:f0:de:7e:1f:15:f3:eb:75:c4:d7:51:12:91:
38:dd:e9:fe:4a:f4:10:ae:3c:cc:dc:b6:ce:b1:2d:
7e:96:41:47:1c:ed:80:20:a6:b4:aa:7f:b6:aa:80:
c0:32:2e:ef:b6:21:e2:80:fd:fb:89:1b:5d:fe:88:
bf:3d:bd:bd:f7:8a:d0:2c:0b:ca:51:91:6d:85:49:
9b:9b:c4:ab:c9:8e:69:b8:b3:f0:6c:80:3e:4c:99:
be:96:f2:c9:2e:e7:61:59:c7:f0:a4:d1:0d:bf:3f:
a2:95:f7:76:67:93:ef:11:ee:a8:e8:2b:68:5d:50:
37:7d:48:e8:88:fe:0e:11:98:e5:2f:50:13:43:a1:
85:62:f9:6d:f7:dd:3b:2b:a6:4d:e9:3a:15:f1:1c:
24:69:b0:98:29:26:e1:6d:9d:ac:23:8d:06:bf:2a:
d1:40:fb:d9:3f:80:87:d0:37:29:cd:36:5c:92:9c:
6c:5f:bf:c7:89:e5:5b:c1:5e:0b:73:eb:9c:ec:c7:
d9:51:51:b6:4e:fa:c3:42:40:89:8d:95:38:29:79:
73:2c:38:01:98:19:e2:79:a3:43:3a:6b:d4:26:c0:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CF:4C:ED:1C:85:B1:16:0B:6C:58:01:77:D0:C7:93:96:5E:22:C3
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3s9M7RyFsRYLbFgBd9DHk5ZeIsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.21.0/24
45.87.23.0/24
45.88.121.0/24
45.88.123.0/24
45.133.253.0/24
45.133.255.0/24
45.143.193.0/24
45.143.195.0/24
185.243.245.0/24
185.243.247.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f8:17:d5:99:85:29:18:94:10:fb:cc:f3:04:5c:02:b8:98:
28:20:e1:ef:7e:9d:45:5d:61:22:7e:d9:5f:89:60:1b:10:b6:
93:66:e0:2e:a9:57:62:05:47:05:ae:82:0c:6f:58:d5:1f:35:
14:48:bb:a6:7a:b7:ff:2b:3e:0f:c0:2e:75:d0:38:31:f8:25:
4c:9b:08:a2:b0:e5:ce:0f:7f:2c:52:32:e7:11:41:71:f1:30:
81:da:f6:7c:83:56:7b:56:eb:5e:09:88:5a:ee:c6:f8:7a:10:
e2:6e:53:a4:2c:19:4a:d2:64:13:eb:e5:73:e6:38:18:02:cf:
96:d2:25:9b:58:39:33:90:9e:4b:51:d4:4e:db:a0:89:21:01:
74:19:fd:2c:fa:e0:76:17:c4:2f:fc:ad:bc:3a:3a:2e:ec:ee:
a4:1c:e5:92:18:2f:6c:89:0e:99:92:21:a6:bc:b0:d0:29:dd:
1b:6d:ab:08:bc:50:67:64:48:d3:01:32:80:b5:47:92:5a:85:
f0:cd:e2:ee:6a:79:89:71:50:a2:58:96:5e:b6:38:b9:a9:6f:
a6:e6:21:90:8d:a9:95:d5:fb:38:88:f9:c1:4a:2c:dd:2b:26:
3a:b4:e1:0d:98:b2:46:eb:83:94:65:9e:b6:5f:ab:69:02:49:
3c:f3:f0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:51 2024 by rpki-client on console-ams.rpki-client.org