Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3uNK-5_eoAOz3jwN2xFZIOUonco.roa
File: 3uNK-5_eoAOz3jwN2xFZIOUonco.roa (raw, json)
Hash identifier: ApxyTX01AKKks/aPhwqY322l2UT2BdeCSn9kOnYvA9I=
Subject key identifier: DE:E3:4A:FB:9F:DE:A0:03:B3:DE:3C:0D:DB:11:59:20:E5:28:9D:CA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C7BE83C425DA56DF4A4E782621D418D2D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3uNK-5_eoAOz3jwN2xFZIOUonco.roa
Signing time: Mon 18 Dec 2023 07:51:06 +0000
ROA not before: Mon 18 Dec 2023 07:51:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 87.121.124.0/23 maxlen: 24
171.22.31.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.248.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:e8:3c:42:5d:a5:6d:f4:a4:e7:82:62:1d:41:8d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 18 07:51:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dee34afb9fdea003b3de3c0ddb115920e5289dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:03:6c:3f:46:f9:a1:f7:03:a8:2d:7a:fa:
44:0e:6f:b8:5b:62:fd:30:fd:da:19:6e:82:c2:af:
ba:11:3d:b8:06:a0:27:75:fb:c8:fd:18:3c:06:a9:
56:80:76:09:ef:c8:86:e0:4a:92:af:b8:06:b0:ad:
e9:ad:16:f9:cb:98:27:34:92:e4:ec:e9:d7:24:c7:
19:69:72:0d:1b:e3:78:fd:e3:e3:30:77:78:60:29:
5f:89:7f:f6:88:74:4b:49:1d:ec:7c:ed:b4:cc:c3:
57:04:14:b2:2f:c5:a4:21:2c:78:86:90:64:b7:35:
4a:2f:7f:c4:d7:5b:93:e8:e9:5d:88:21:a2:74:f4:
df:1d:e3:aa:aa:73:3d:9d:e3:7d:c3:b6:dd:ad:18:
58:dc:25:3f:33:9b:86:f6:04:21:8c:35:a6:02:d1:
2d:bf:a5:96:0e:99:2d:7a:64:b7:c7:1f:c1:b8:93:
25:82:cf:1b:ef:5b:e1:ec:ac:a4:41:0a:85:b1:a9:
63:95:85:2f:34:37:c0:c5:1e:70:1e:75:6d:17:14:
b3:18:db:75:04:69:a1:63:5d:4e:ad:39:41:f8:61:
1b:ab:96:a1:af:a3:3a:cb:26:7c:b9:1d:cd:d3:24:
68:bf:02:6d:ad:c2:84:28:8b:e3:aa:08:d3:cc:87:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E3:4A:FB:9F:DE:A0:03:B3:DE:3C:0D:DB:11:59:20:E5:28:9D:CA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3uNK-5_eoAOz3jwN2xFZIOUonco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.129.84.0/24
45.129.86.0/24
45.141.158.0/24
79.110.61.0/24
81.161.239.0/24
83.219.97.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
92.249.48.0/24
94.154.172.0/24
94.156.248.0/24
147.78.100.0/23
171.22.17.0-171.22.18.255
171.22.31.0/24
193.25.216.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:bf:9a:46:92:ab:61:57:d8:fb:d0:1d:c4:b6:33:5a:c1:98:
e9:bd:57:05:0c:f0:77:6b:57:42:45:55:16:72:00:90:f2:4b:
73:23:5c:b0:76:dd:d8:e5:d3:5f:26:98:d8:b7:f7:92:ed:e3:
55:5e:e3:dc:a2:f8:4a:90:1b:38:0b:68:77:2d:a5:dc:3b:27:
ad:87:78:75:79:30:b4:c2:d5:d5:89:9b:8e:59:96:9e:79:05:
2e:37:fb:d0:c7:86:bd:17:b2:65:f5:b7:5f:4f:9d:cf:4c:19:
59:cd:86:c7:05:bf:64:f1:5d:35:f8:9e:fb:1f:e5:36:e8:69:
e3:b8:2d:c0:ba:4b:c6:ef:8a:ac:cb:31:5e:bc:78:71:a2:43:
f6:59:a7:35:35:b9:9d:e5:43:c9:d4:b5:ff:4f:ba:05:ed:73:
19:0c:e6:59:1c:0f:d9:e5:cc:0b:39:8a:8f:04:51:63:53:bd:
b7:55:fa:09:db:c2:30:e5:c0:d5:3e:de:a5:89:2f:d4:1a:24:
c0:1d:df:0f:2d:41:3a:71:3f:45:11:93:18:22:f5:f3:88:65:
56:d6:a4:90:ef:a2:69:f6:bb:2b:82:ab:f4:ad:96:4e:23:a1:
4d:e1:7b:7b:15:65:62:f6:89:e7:ea:5c:79:1a:c3:24:6e:7e:
b1:d5:96:1f
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAYx76DxCXaVt9KTngmIdQY0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMjE4MDc1MTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWUzNGFmYjlmZGVhMDAzYjNkZTNjMGRkYjExNTkyMGU1Mjg5ZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7EDbD9G+aH3A6gtevpEDm+4W2L9
MP3aGW6Cwq+6ET24BqAndfvI/Rg8BqlWgHYJ78iG4EqSr7gGsK3prRb5y5gnNJLk
7OnXJMcZaXING+N4/ePjMHd4YClfiX/2iHRLSR3sfO20zMNXBBSyL8WkISx4hpBk
tzVKL3/E11uT6OldiCGidPTfHeOqqnM9neN9w7bdrRhY3CU/M5uG9gQhjDWmAtEt
v6WWDpktemS3xx/BuJMlgs8b71vh7KykQQqFsaljlYUvNDfAxR5wHnVtFxSzGNt1
BGmhY11OrTlB+GEbq5ahr6M6yyZ8uR3N0yRovwJtrcKEKIvjqgjTzIfU4wIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFN7jSvuf3qADs948DdsRWSDlKJ3KMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvM3VOSy01X2VvQU96M2p3TjJ4RlpJT1VvbmNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEACWLggME
AC2BVAMEAC2BVgMEAC2NngMEAE9uPQMEAFGh7wMEAFPbYQMEAVd5fAMEAFd5ogME
AlvIwAMEAFz5MAMEAF6arAMEAF6c+AMEAZNOZDAMAwQAqxYRAwQAqxYSAwQAqxYf
AwQAwRnYAwQAwSMTMA0GCSqGSIb3DQEBCwUAA4IBAQBfv5pGkqthV9j70B3EtjNa
wZjpvVcFDPB3a1dCRVUWcgCQ8ktzI1ywdt3Y5dNfJpjYt/eS7eNVXuPcovhKkBs4
C2h3LaXcOyeth3h1eTC0wtXViZuOWZaeeQUuN/vQx4a9F7Jl9bdfT53PTBlZzYbH
Bb9k8V01+J77H+U26GnjuC3AukvG74qsyzFevHhxokP2Wac1Nbmd5UPJ1LX/T7oF
7XMZDOZZHA/Z5cwLOYqPBFFjU723VfoJ28Iw5cDVPt6liS/UGiTAHd8PLUE6cT9F
EZMYIvXziGVW1qSQ76Jp9rsrgqv0rZZOI6FN4Xt7FWVi9onn6lx5GsMkbn6x1ZYf
-----END CERTIFICATE-----
Generated at Thu Dec 21 08:18:04 2023 by rpki-client on console-ams.rpki-client.org