Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6PD94IOlNchGTwR4wlkv5B5NGnM.roa
File: 6PD94IOlNchGTwR4wlkv5B5NGnM.roa (raw, json)
Hash identifier: 1VOxhQiMkqdNsTNfUQrrXa8OkKy4LwB9S7CeA4lCS0E=
Subject key identifier: E8:F0:FD:E0:83:A5:35:C8:46:4F:04:78:C2:59:2F:E4:1E:4D:1A:73
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193493833BB068D0D0B02D0CBE7E703EED6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6PD94IOlNchGTwR4wlkv5B5NGnM.roa
Signing time: Wed 20 Nov 2024 10:57:20 +0000
ROA not before: Wed 20 Nov 2024 10:57:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Nov 2024 07:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:38:33:bb:06:8d:0d:0b:02:d0:cb:e7:e7:03:ee:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 20 10:57:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8f0fde083a535c8464f0478c2592fe41e4d1a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:04:09:87:14:d5:30:26:78:04:6f:b1:77:
f8:e8:ec:46:0f:d0:5c:bc:14:bc:ec:16:76:3d:8a:
d7:5e:f7:fa:ea:e5:7c:e6:4f:ec:e4:0c:2f:72:ee:
5f:a2:45:80:b2:d2:56:fc:99:42:fa:c0:28:17:e1:
f8:13:d4:8a:ae:d4:f6:2d:46:fc:02:68:7e:ba:26:
ca:bd:55:f9:f7:28:f0:d7:09:8b:c0:7a:55:a2:98:
88:f4:c8:90:e8:87:8f:ae:a5:48:73:80:07:bb:52:
5e:83:0c:5e:f0:5f:04:5e:fa:36:05:86:f7:8e:3e:
3b:e9:37:cd:ef:7e:3a:f3:b2:95:df:a1:8d:a5:16:
17:e3:13:d2:e9:ae:2b:82:9d:e9:8e:6f:9c:3b:5a:
85:eb:51:03:06:d1:c1:e0:76:98:62:3e:bc:45:e2:
b2:9c:18:04:12:43:84:cd:34:b9:8e:20:ef:7e:40:
52:20:90:6e:28:ab:5d:93:a3:8b:c6:dc:06:77:71:
74:8a:7d:a0:45:a0:ae:3f:3c:cb:1a:9b:ea:c1:f4:
e3:fe:93:eb:c7:b7:64:94:0e:63:5f:4a:3e:ee:4b:
a2:47:3d:10:97:17:ff:7c:bc:68:96:fb:08:25:f6:
d0:af:ed:d2:24:c0:03:40:c7:01:04:fb:fe:ff:d2:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F0:FD:E0:83:A5:35:C8:46:4F:04:78:C2:59:2F:E4:1E:4D:1A:73
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6PD94IOlNchGTwR4wlkv5B5NGnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
45.149.235.0/24
83.143.113.0/24
85.208.139.0/24
87.120.36.0/24
87.120.88.0/24
109.206.236.0/24
109.206.242.0/24
185.218.137.0/24
185.246.222.0/24
193.168.196.0/23
193.168.199.0/24
Signature Algorithm: sha256WithRSAEncryption
51:15:2d:5b:f2:98:b6:a8:0c:12:4c:65:52:ad:14:99:a1:36:
a0:0c:65:ec:63:c2:6c:ef:9c:68:2c:e6:55:f4:fc:6c:bd:8e:
73:ba:09:a4:13:91:f0:25:23:b7:06:a0:12:87:e0:a6:07:a0:
80:ee:bb:53:45:71:ac:2b:4c:89:cc:ef:f3:53:79:c6:5c:fa:
15:ce:0f:cd:84:69:af:17:93:35:e8:5b:ae:fc:3b:71:37:43:
38:02:b2:12:51:81:40:4a:d9:33:74:ca:32:94:0e:1f:74:9a:
89:48:b0:22:f0:78:91:65:24:e6:97:d8:da:53:22:86:db:66:
3f:15:a8:65:df:3f:65:f8:a6:29:3a:26:a1:58:13:aa:af:2e:
95:5e:66:44:6a:b2:ce:75:46:f9:85:b2:c3:77:aa:ec:2a:7d:
36:31:72:da:b2:f3:30:63:74:ad:66:45:b6:37:c0:1a:73:75:
90:59:9c:a5:cb:0f:ff:12:91:08:09:a7:c8:4c:18:80:05:23:
f5:d8:84:89:96:e7:68:40:7c:f7:61:20:66:2e:e1:83:2f:84:
09:5e:2a:c8:41:c3:4a:e2:3f:cd:48:5b:3e:ca:90:72:93:9f:
7d:13:a3:79:a5:58:49:41:ac:58:2f:57:94:81:dc:4f:d6:29:
d2:9b:22:88
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZNJODO7Bo0NCwLQy+fnA+7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMTIwMTA1NzIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGYwZmRlMDgzYTUzNWM4NDY0ZjA0NzhjMjU5MmZlNDFlNGQxYTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVAECYcU1TAmeARvsXf46OxGD9Bc
vBS87BZ2PYrXXvf66uV85k/s5Awvcu5fokWAstJW/JlC+sAoF+H4E9SKrtT2LUb8
Amh+uibKvVX59yjw1wmLwHpVopiI9MiQ6IePrqVIc4AHu1Jegwxe8F8EXvo2BYb3
jj476TfN734687KV36GNpRYX4xPS6a4rgp3pjm+cO1qF61EDBtHB4HaYYj68ReKy
nBgEEkOEzTS5jiDvfkBSIJBuKKtdk6OLxtwGd3F0in2gRaCuPzzLGpvqwfTj/pPr
x7dklA5jX0o+7kuiRz0Qlxf/fLxolvsIJfbQr+3SJMADQMcBBPv+/9JJhQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFOjw/eCDpTXIRk8EeMJZL+QeTRpzMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNlBEOTRJT2xOY2hHVHdSNHdsa3Y1QjVOR25NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQALVRYAwQA
LVn0AwQALVvBAwQALZXrAwQAU49xAwQAVdCLAwQAV3gkAwQAV3hYAwQAbc7sAwQA
bc7yAwQAudqJAwQAufbeAwQBwajEAwQAwajHMA0GCSqGSIb3DQEBCwUAA4IBAQBR
FS1b8pi2qAwSTGVSrRSZoTagDGXsY8Js75xoLOZV9PxsvY5zugmkE5HwJSO3BqAS
h+CmB6CA7rtTRXGsK0yJzO/zU3nGXPoVzg/NhGmvF5M16Fuu/DtxN0M4ArISUYFA
StkzdMoylA4fdJqJSLAi8HiRZSTml9jaUyKG22Y/Fahl3z9l+KYpOiahWBOqry6V
XmZEarLOdUb5hbLDd6rsKn02MXLasvMwY3StZkW2N8Aac3WQWZylyw//EpEICafI
TBiABSP12ISJludoQHz3YSBmLuGDL4QJXirIQcNK4j/NSFs+ypByk599E6N5pVhJ
QaxYL1eUgdxP1inSmyKI
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:06 2025 by rpki-client