Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0jC8-_ytFFTcSyACJCHJvyjKyZg.roa
File: 0jC8-_ytFFTcSyACJCHJvyjKyZg.roa (raw, json)
Hash identifier: 1t8cCvc22OJmKN7b0WGxLQd3hpN84cg9jf2arnGSgrA=
Subject key identifier: D2:30:BC:FB:FC:AD:14:54:DC:4B:20:02:24:21:C9:BF:28:CA:C9:98
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01924BA443144C0A26403786F70F686DB060
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0jC8-_ytFFTcSyACJCHJvyjKyZg.roa
Signing time: Wed 02 Oct 2024 05:11:49 +0000
ROA not before: Wed 02 Oct 2024 05:11:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.66.228.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 08:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4b:a4:43:14:4c:0a:26:40:37:86:f7:0f:68:6d:b0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 2 05:11:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d230bcfbfcad1454dc4b20022421c9bf28cac998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:c0:b3:25:39:03:3e:c6:55:d3:67:89:0d:
d8:12:50:ba:80:2d:4b:19:e1:08:fb:34:b3:eb:c2:
9c:60:9c:0f:31:c4:9b:ea:42:ce:3a:f7:54:49:6e:
41:09:52:86:04:89:16:4b:ed:5c:8d:de:28:ea:1c:
60:2a:2e:b4:ac:9e:ae:1b:be:f2:9a:d1:3e:38:a5:
97:9e:1b:31:c2:61:12:80:d8:e4:13:ee:69:24:2b:
66:df:c8:27:98:d6:ed:b8:79:e2:03:13:3b:63:66:
cb:37:0a:28:32:25:4b:bc:85:d0:79:b8:eb:ad:db:
9e:00:aa:ce:66:b9:c4:96:1e:7a:0c:f4:db:d7:ed:
53:58:3a:00:c1:26:89:80:6d:20:86:e3:46:00:2c:
97:a8:c0:2b:dd:b6:54:2d:0f:e8:38:3b:f1:e4:86:
ec:b0:81:73:b3:f5:8b:32:11:c1:08:7f:79:21:77:
bc:67:f8:2b:27:dd:09:05:5f:8e:64:0b:6a:ba:ab:
39:28:05:33:65:19:56:3a:ac:61:7b:a4:33:c5:91:
ea:2f:5b:75:86:66:2a:60:b3:d8:28:f3:35:e4:8b:
9c:b5:ab:bf:de:22:8e:28:2d:9c:6b:99:be:c4:37:
ed:7e:a0:4d:a5:4c:13:72:c9:75:e4:68:59:e0:08:
80:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:30:BC:FB:FC:AD:14:54:DC:4B:20:02:24:21:C9:BF:28:CA:C9:98
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0jC8-_ytFFTcSyACJCHJvyjKyZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.139.106.0/24
45.151.89.0/24
45.151.91.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:19:a6:59:dd:bc:92:55:69:3f:bb:a0:99:26:b1:2c:87:99:
a8:7b:e5:a1:e2:21:63:5c:6c:7d:94:3a:ae:77:98:8a:89:56:
b7:e8:4e:b0:99:58:53:eb:83:4b:50:ae:37:ac:6d:2f:f6:73:
6e:ff:78:e6:1f:48:e0:39:46:eb:04:54:33:8a:10:7f:d5:0a:
13:4a:0f:df:df:3b:f3:23:a9:3e:c5:1f:23:82:37:7a:2b:da:
0d:40:90:c5:fa:d1:65:9d:32:92:40:fa:75:a8:5d:59:09:28:
6f:e0:c3:06:bb:41:25:a5:c8:19:af:49:23:01:82:9b:8c:22:
5b:6b:de:38:dd:dc:df:97:26:72:cc:49:59:08:49:4c:22:89:
ec:9a:52:18:1b:21:74:59:20:41:65:fe:70:41:6b:ef:11:5c:
72:9c:7e:e0:0c:0a:24:fc:8a:a6:f6:09:09:4f:1c:11:56:e5:
6d:45:31:a3:51:3e:a9:4d:88:af:64:3c:a5:22:d3:37:61:71:
73:59:ec:ac:2b:d0:85:d2:43:3a:66:00:a7:eb:27:ab:46:e9:
91:6c:b0:c1:64:9e:dd:61:0a:25:fd:1c:23:36:a0:d4:ac:e5:
ef:2a:7d:e9:b1:81:01:c4:15:e4:89:99:9f:ca:bd:4b:44:19:
32:55:17:9d
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAZJLpEMUTAomQDeG9w9obbBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMDAyMDUxMTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjMwYmNmYmZjYWQxNDU0ZGM0YjIwMDIyNDIxYzliZjI4Y2FjOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IPAsyU5Az7GVdNniQ3YElC6gC1L
GeEI+zSz68KcYJwPMcSb6kLOOvdUSW5BCVKGBIkWS+1cjd4o6hxgKi60rJ6uG77y
mtE+OKWXnhsxwmESgNjkE+5pJCtm38gnmNbtuHniAxM7Y2bLNwooMiVLvIXQebjr
rdueAKrOZrnElh56DPTb1+1TWDoAwSaJgG0ghuNGACyXqMAr3bZULQ/oODvx5Ibs
sIFzs/WLMhHBCH95IXe8Z/grJ90JBV+OZAtquqs5KAUzZRlWOqxhe6QzxZHqL1t1
hmYqYLPYKPM15Iuctau/3iKOKC2ca5m+xDftfqBNpUwTcsl15GhZ4AiA8QIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFNIwvPv8rRRU3EsgAiQhyb8oysmYMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMGpDOC1feXRGRlRjU3lBQ0pDSEp2eWpLeVpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQALULkAwQA
LYtqAwQALZdZAwQALZdbAwQAU9thAwQAVDYwAwQAV3hXAwQAV3hdAwQAV3ktAwQB
XHfEAwQCXpqgAwQAXpwLAwQAjWIBAwQCqxZIAwQCudhUAwQCudpUAwQAwd5gMA0G
CSqGSIb3DQEBCwUAA4IBAQANGaZZ3bySVWk/u6CZJrEsh5moe+Wh4iFjXGx9lDqu
d5iKiVa36E6wmVhT64NLUK43rG0v9nNu/3jmH0jgOUbrBFQzihB/1QoTSg/f3zvz
I6k+xR8jgjd6K9oNQJDF+tFlnTKSQPp1qF1ZCShv4MMGu0ElpcgZr0kjAYKbjCJb
a9443dzflyZyzElZCElMIonsmlIYGyF0WSBBZf5wQWvvEVxynH7gDAok/Iqm9gkJ
TxwRVuVtRTGjUT6pTYivZDylItM3YXFzWeysK9CF0kM6ZgCn6yerRumRbLDBZJ7d
YQol/RwjNqDUrOXvKn3psYEBxBXkiZmfyr1LRBkyVRed
-----END CERTIFICATE-----
Generated at Sat Oct 12 10:37:08 2024 by rpki-client on console-fra.rpki-client.org