Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4wpHpWQtCVrUET_Lt2vjbgBHEes.roa
File: 4wpHpWQtCVrUET_Lt2vjbgBHEes.roa (raw, json)
Hash identifier: eJSo21nQL65kw9ntaCHZR8up3Wsgyy8C3lUuvWXI4MM=
Subject key identifier: E3:0A:47:A5:64:2D:09:5A:D4:11:3F:CB:B7:6B:E3:6E:00:47:11:EB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01918D8B01C56D2507C4D919CF145EC8EF6B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4wpHpWQtCVrUET_Lt2vjbgBHEes.roa
Signing time: Mon 26 Aug 2024 07:16:23 +0000
ROA not before: Mon 26 Aug 2024 07:16:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 5.253.56.0/22 maxlen: 24
31.13.247.0/24 maxlen: 24
31.169.124.0/22 maxlen: 24
37.139.128.0/24 maxlen: 24
45.84.88.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
45.95.0.0/22 maxlen: 24
45.128.97.0/24 maxlen: 24
45.128.99.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.216.0/22 maxlen: 24
91.92.21.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
94.125.100.0/22 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.16.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
185.218.137.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.8.184.0/22 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/22 maxlen: 24
193.168.196.0/22 maxlen: 24
194.113.36.0/22 maxlen: 24
212.87.220.0/22 maxlen: 24
212.87.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 10:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:8b:01:c5:6d:25:07:c4:d9:19:cf:14:5e:c8:ef:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 26 07:16:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e30a47a5642d095ad4113fcbb76be36e004711eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:83:c4:1b:de:1e:84:94:7c:38:b0:82:7b:
11:ec:c8:27:f6:aa:83:02:08:a1:62:1e:3c:a6:c5:
b0:b6:a8:ff:0e:e0:6d:8f:58:5e:4b:4d:0d:c7:7c:
74:87:8e:73:df:26:9f:ec:52:0b:58:b7:f8:f5:5a:
a2:60:48:05:58:fb:c5:ba:f8:f0:a8:a3:a6:44:32:
78:26:a5:54:2d:28:93:f3:51:a9:66:8a:79:7b:ff:
cb:96:de:9c:84:ec:6c:d7:85:4f:43:07:bb:cf:59:
83:f9:dd:51:7f:78:e7:90:fb:8e:f7:fc:36:c9:9c:
eb:db:83:4e:dc:e2:b6:b5:8b:6a:2f:e2:bb:f4:04:
2d:ba:b0:d8:9a:f4:15:77:36:ad:f0:98:ff:51:06:
e3:f4:1b:18:e2:48:52:2d:de:72:38:a1:ab:56:e7:
45:fa:94:e7:14:cb:cc:3a:51:08:85:13:5d:b1:d9:
ff:85:de:b3:51:1e:a3:6c:f0:4d:ef:dd:5d:81:e8:
42:17:b9:d4:28:ca:48:1b:95:a7:f0:e7:3e:b4:cd:
f3:3c:bc:5b:08:e0:d9:06:2c:44:92:ed:31:40:e0:
99:c0:d1:26:3d:73:90:bd:6f:a6:10:7b:13:b5:6f:
b8:74:47:20:4d:11:89:35:95:2e:78:7b:15:7f:b1:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0A:47:A5:64:2D:09:5A:D4:11:3F:CB:B7:6B:E3:6E:00:47:11:EB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4wpHpWQtCVrUET_Lt2vjbgBHEes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
31.13.247.0/24
31.169.124.0/22
37.139.128.0/24
45.84.88.0/24
45.88.66.0/24
45.89.244.0/24
45.91.193.0/24
45.95.0.0/22
45.128.97.0/24
45.128.99.0/24
45.128.234.0/23
45.149.235.0/24
79.110.63.0/24
83.143.113.0/24
84.21.172.0/24
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
85.208.139.0/24
87.120.36.0/24
87.120.88.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
87.121.98.0/24
87.121.216.0/22
91.92.21.0/24
93.123.30.0/23
94.125.100.0/22
94.156.236.0/24
109.206.236.0/24
109.206.240.0/24
109.206.242.0/23
171.22.16.0/24
171.22.19.0/24
171.22.30.0/24
185.207.14.0/23
185.218.137.0-185.218.138.255
185.246.220.0-185.246.222.255
185.252.179.0/24
193.8.184.0/22
193.47.60.0/23
193.148.56.0/22
193.168.196.0/22
194.113.36.0/22
212.87.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:48:40:28:89:e8:21:42:fe:71:aa:a4:77:34:ef:89:7a:0e:
1b:ee:59:d8:1c:6e:b2:12:a7:7b:b2:ab:d6:d3:1c:1f:bd:df:
2c:75:ff:3b:ef:9d:5e:86:e6:60:e1:19:58:e2:b2:fa:73:7c:
07:58:1b:79:ee:88:15:4b:2e:2c:05:a7:f4:8f:03:6f:f6:86:
6e:7a:27:f6:e9:5d:7d:07:07:0f:45:83:e2:66:99:81:40:1b:
9c:cf:b1:d1:07:43:bf:03:7f:06:f6:d7:82:22:99:16:f8:4a:
2a:ba:07:c0:75:d5:30:2c:52:b0:3b:cc:48:7c:ea:31:ee:bd:
1e:37:5d:e7:51:44:64:0d:af:e3:0f:17:15:64:58:5a:f1:2a:
db:89:51:b3:e9:b1:7c:90:6d:fd:8c:cc:47:64:29:81:c9:bc:
96:07:1e:fe:6f:b5:03:f5:58:68:5c:81:98:14:db:31:7c:60:
37:f2:78:be:5d:8a:34:f8:f9:29:c3:b2:46:f4:df:03:b7:64:
7b:36:2a:81:8f:06:dc:55:27:76:e1:ac:62:aa:09:01:82:33:
e4:46:e4:91:bd:82:77:34:8d:5f:52:47:b4:15:a9:2f:ce:6a:
f7:fc:01:04:4e:44:30:ec:36:de:1b:7d:83:49:e0:64:90:09:
51:2a:b0:98
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgISAZGNiwHFbSUHxNkZzxReyO9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwODI2MDcxNjIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzBhNDdhNTY0MmQwOTVhZDQxMTNmY2JiNzZiZTM2ZTAwNDcxMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrWDxBveHoSUfDiwgnsR7Mgn9qqD
AgihYh48psWwtqj/DuBtj1heS00Nx3x0h45z3yaf7FILWLf49VqiYEgFWPvFuvjw
qKOmRDJ4JqVULSiT81GpZop5e//Llt6chOxs14VPQwe7z1mD+d1Rf3jnkPuO9/w2
yZzr24NO3OK2tYtqL+K79AQturDYmvQVdzat8Jj/UQbj9BsY4khSLd5yOKGrVudF
+pTnFMvMOlEIhRNdsdn/hd6zUR6jbPBN791dgehCF7nUKMpIG5Wn8Oc+tM3zPLxb
CODZBixEku0xQOCZwNEmPXOQvW+mEHsTtW+4dEcgTRGJNZUueHsVf7GcuwIDAQAB
o4IDVTCCA1EwHQYDVR0OBBYEFOMKR6VkLQla1BE/y7dr424ARxHrMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNHdwSHBXUXRDVnJVRVRfTHQydmpiZ0JIRWVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBaQYIKwYBBQUHAQcBAf8EggFYMIIBVDCCAVAEAgABMIIB
SAMEAgX9OAMEAB8N9wMEAh+pfAMEACWLgAMEAC1UWAMEAC1YQgMEAC1Z9AMEAC1b
wQMEAi1fAAMEAC2AYQMEAC2AYwMEAS2A6gMEAC2V6wMEAE9uPwMEAFOPcQMEAFQV
rAMEAFUfLAMEAFUfLgMEAFXQiAMEAFXQiwMEAFd4JAMEAFd4WAMEAFd4XAMEAFd4
bAMEAFd4xAMEAFd4zQMEAFd42AMEAFd42wMEAFd43gMEAFd5LwMEAFd5YgMEAld5
2AMEAFtcFQMEAV17HgMEAl59ZAMEAF6c7AMEAG3O7AMEAG3O8AMEAW3O8gMEAKsW
EAMEAKsWEwMEAKsWHgMEAbnPDjAMAwQAudqJAwQAudqKMAwDBAK59twDBAC59t4D
BAC5/LMDBALBCLgDBAHBLzwDBALBlDgDBALBqMQDBALCcSQDBALUV9wwDQYJKoZI
hvcNAQELBQADggEBAEpIQCiJ6CFC/nGqpHc074l6DhvuWdgcbrISp3uyq9bTHB+9
3yx1/zvvnV6G5mDhGVjisvpzfAdYG3nuiBVLLiwFp/SPA2/2hm56J/bpXX0HBw9F
g+JmmYFAG5zPsdEHQ78Dfwb214IimRb4Siq6B8B11TAsUrA7zEh86jHuvR43XedR
RGQNr+MPFxVkWFrxKtuJUbPpsXyQbf2MzEdkKYHJvJYHHv5vtQP1WGhcgZgU2zF8
YDfyeL5dijT4+SnDskb03wO3ZHs2KoGPBtxVJ3bhrGKqCQGCM+RG5JG9gnc0jV9S
R7QVqS/Oavf8AQRORDDsNt4bfYNJ4GSQCVEqsJg=
-----END CERTIFICATE-----
Generated at Tue Oct 15 14:42:40 2024 by rpki-client on console-ams.rpki-client.org