Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/53XAYgh3-50EenrMiVIK79Wj8xM.roa
File: 53XAYgh3-50EenrMiVIK79Wj8xM.roa (raw, json)
Hash identifier: 3/Y9ZmeHNsdqSqXd7W4TqrNAiPs2W6dBWfT8I55atRM=
Subject key identifier: E7:75:C0:62:08:77:FB:9D:04:7A:7A:CC:89:52:0A:EF:D5:A3:F3:13
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F953366F3220559EF9CC0667EF86C223F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/53XAYgh3-50EenrMiVIK79Wj8xM.roa
Signing time: Mon 20 May 2024 08:52:04 +0000
ROA not before: Mon 20 May 2024 08:52:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.253.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 13:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:33:66:f3:22:05:59:ef:9c:c0:66:7e:f8:6c:22:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 20 08:52:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e775c0620877fb9d047a7acc89520aefd5a3f313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:1e:2b:5b:79:96:0f:b0:dc:ab:bc:2a:1d:
64:cb:b2:0f:c6:e0:06:e2:7f:e3:8a:ec:65:1a:ff:
0e:88:9b:57:59:2e:92:7d:a2:15:5a:56:d9:e2:7f:
d2:b8:e1:c0:4a:ef:e7:29:d2:8b:11:22:79:35:41:
70:0a:74:a9:98:e8:e1:fa:84:b2:e5:16:c1:bf:85:
f2:2f:f6:4f:5a:42:c1:6f:5a:20:ba:a3:ed:c7:ff:
cf:74:c2:58:34:9a:df:4e:af:01:98:12:b9:58:57:
75:33:9b:e4:ef:86:1f:2f:1c:05:c5:be:0d:0a:cb:
4a:41:be:3e:db:84:ea:37:c6:d3:c5:2b:37:90:42:
32:7a:be:2e:5b:5c:78:1a:19:a5:82:ab:73:3d:c0:
70:ab:8b:40:e0:3b:64:a2:be:48:bd:ef:f5:9e:f5:
8e:6c:cf:2a:ce:f3:6a:39:77:26:6e:43:88:cc:ce:
48:2d:2e:d5:9d:66:ab:ab:80:83:c0:f6:3d:b5:85:
b4:77:89:a1:aa:ab:d5:44:47:48:7c:d9:a0:2a:f4:
b9:f0:d0:6c:32:5c:73:d2:8c:65:be:f6:b0:23:3d:
89:b2:01:f4:a4:e7:90:46:d9:0b:88:f0:d3:fe:63:
87:80:cb:00:ef:6a:e5:97:e1:e5:03:c1:36:c6:38:
48:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:75:C0:62:08:77:FB:9D:04:7A:7A:CC:89:52:0A:EF:D5:A3:F3:13
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/53XAYgh3-50EenrMiVIK79Wj8xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.88.64.0/24
79.110.51.0/24
87.120.166.0/24
94.154.162.0/24
109.206.239.0/24
178.215.227.0/24
185.222.161.0-185.222.162.255
185.246.223.0/24
193.37.40.0/24
193.37.42.0/24
193.222.97.0/24
194.55.225.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:c3:21:1d:0c:04:31:7c:5f:5a:56:8c:93:81:ed:f5:35:90:
f2:72:6f:67:d2:33:31:dc:28:52:6d:d1:51:b9:c3:47:ff:72:
38:79:12:ac:10:f0:cf:d9:bf:93:4e:4e:d2:e1:e3:54:db:65:
9f:1e:9e:e3:47:c5:23:7e:b1:42:9b:e2:96:b0:a0:f3:9f:e5:
ef:14:55:9f:cc:59:d2:ac:c1:5c:a6:04:5f:7b:a2:b3:29:ef:
19:4a:a3:76:d9:de:64:58:7a:4c:05:f7:0a:e2:79:0c:06:71:
6f:50:85:d0:b6:5c:51:d1:33:a9:44:bd:cb:ef:27:70:54:57:
47:60:34:f3:09:61:71:b8:db:ea:40:00:ee:0e:59:3e:80:44:
b9:15:2d:f8:cb:18:97:19:f7:0b:cb:51:69:03:77:44:97:dc:
c3:2b:5d:de:6e:38:d5:bd:82:7e:d4:be:de:2f:ef:cc:4b:16:
8b:19:af:f2:83:05:ac:4a:5d:aa:4f:95:4c:8a:7b:86:7c:f8:
4a:ea:a3:fd:5c:f3:96:68:42:77:32:fd:a4:a4:ba:31:74:5c:
62:fd:e8:e5:d4:c3:48:71:26:e8:a9:81:80:80:63:8a:89:17:
9a:dd:d8:42:94:c6:cb:b9:e6:04:9c:76:65:fa:d7:d8:ce:e5:
04:c9:b1:64
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAY+VM2bzIgVZ75zAZn74bCI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNTIwMDg1MjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzc1YzA2MjA4NzdmYjlkMDQ3YTdhY2M4OTUyMGFlZmQ1YTNmMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVYeK1t5lg+w3Ku8Kh1ky7IPxuAG
4n/jiuxlGv8OiJtXWS6SfaIVWlbZ4n/SuOHASu/nKdKLESJ5NUFwCnSpmOjh+oSy
5RbBv4XyL/ZPWkLBb1oguqPtx//PdMJYNJrfTq8BmBK5WFd1M5vk74YfLxwFxb4N
CstKQb4+24TqN8bTxSs3kEIyer4uW1x4GhmlgqtzPcBwq4tA4Dtkor5Ive/1nvWO
bM8qzvNqOXcmbkOIzM5ILS7VnWarq4CDwPY9tYW0d4mhqqvVREdIfNmgKvS58NBs
Mlxz0oxlvvawIz2JsgH0pOeQRtkLiPDT/mOHgMsA72rll+HlA8E2xjhIFwIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFOd1wGIId/udBHp6zIlSCu/Vo/MTMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNTNYQVlnaDMtNTBFZW5yTWlWSUs3OVdqOHhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAAjv9AwQA
LVhAAwQAT24zAwQAV3imAwQAXpqiAwQAbc7vAwQAstfjMAwDBAC53qEDBAC53qID
BAC59t8DBADBJSgDBADBJSoDBADB3mEDBADCN+EwDQYJKoZIhvcNAQELBQADggEB
AKDDIR0MBDF8X1pWjJOB7fU1kPJyb2fSMzHcKFJt0VG5w0f/cjh5EqwQ8M/Zv5NO
TtLh41TbZZ8enuNHxSN+sUKb4pawoPOf5e8UVZ/MWdKswVymBF97orMp7xlKo3bZ
3mRYekwF9wrieQwGcW9QhdC2XFHRM6lEvcvvJ3BUV0dgNPMJYXG42+pAAO4OWT6A
RLkVLfjLGJcZ9wvLUWkDd0SX3MMrXd5uONW9gn7Uvt4v78xLFosZr/KDBaxKXapP
lUyKe4Z8+Erqo/1c85ZoQncy/aSkujF0XGL96OXUw0hxJuipgYCAY4qJF5rd2EKU
xsu55gScdmX619jO5QTJsWQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:58 2024 by rpki-client on console-fra.rpki-client.org