Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6tzVoEJtrlpglBeBMmHmNxXz8u0.roa
File: 6tzVoEJtrlpglBeBMmHmNxXz8u0.roa (raw, json)
Hash identifier: TwZ3iFzDL3mvfduSyGYz84wFDEB5wnsKEGv92lSfGfM=
Subject key identifier: EA:DC:D5:A0:42:6D:AE:5A:60:94:17:81:32:61:E6:37:15:F3:F2:ED
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F862C5B7DDB93A1F46E15D764A1E6909E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6tzVoEJtrlpglBeBMmHmNxXz8u0.roa
Signing time: Fri 17 May 2024 10:50:04 +0000
ROA not before: Fri 17 May 2024 10:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 37.221.120.0/22 maxlen: 24
45.81.241.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.253.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
193.149.2.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 13:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:2c:5b:7d:db:93:a1:f4:6e:15:d7:64:a1:e6:90:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 17 10:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eadcd5a0426dae5a609417813261e63715f3f2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:4d:eb:6d:2b:d2:24:a8:bd:3b:71:f7:54:
11:3d:0b:a0:36:b3:46:ff:52:32:47:e6:ca:df:ab:
17:8a:a0:18:34:f5:94:0c:3a:c9:2f:4b:6c:7a:bb:
d8:5b:0a:c4:5d:51:b3:c6:ef:b5:c4:8c:ef:c7:2b:
84:94:fa:2e:ff:45:ca:5c:2c:5d:40:3f:08:74:6e:
94:a7:0d:b8:51:a2:e6:26:cb:71:4a:3b:ca:b5:ff:
18:da:9c:d5:a5:3b:89:3d:46:43:15:2a:a3:04:72:
c3:d5:e5:c5:a9:26:53:22:98:a9:be:4a:f8:d7:bf:
ed:f7:a9:24:04:f6:10:ca:4b:21:0f:95:06:f3:54:
85:34:67:91:f6:87:87:42:f7:29:25:9d:e2:49:9f:
50:ed:5a:b8:6e:19:2a:32:69:b6:49:c9:3f:46:14:
10:78:65:36:b2:fe:48:2c:bf:9a:05:b2:9d:e2:ae:
97:0b:33:d4:4f:74:b6:98:61:7c:24:ca:96:bd:c0:
fe:fa:1f:a0:ff:28:47:5b:4b:e9:f4:25:2c:25:c8:
6c:5c:8b:fd:71:64:3d:4b:6d:82:e2:9d:35:da:a4:
7e:f0:00:20:2f:d9:3b:26:eb:30:4b:3b:26:05:36:
a1:c5:d1:95:90:29:1c:77:c5:69:36:c2:98:f5:e1:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DC:D5:A0:42:6D:AE:5A:60:94:17:81:32:61:E6:37:15:F3:F2:ED
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6tzVoEJtrlpglBeBMmHmNxXz8u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.81.241.0/24
45.144.153.0-45.144.154.255
94.156.11.0/24
94.156.253.0/24
141.98.1.0/24
193.149.2.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:2a:d3:2a:7b:af:3a:d7:b6:b7:72:61:d0:d6:11:1e:68:ac:
cb:71:c5:02:f7:4f:09:85:75:aa:f8:91:68:a5:11:3c:36:f5:
92:d2:0e:be:ca:65:27:23:49:a7:3e:b5:5c:b4:00:52:32:3e:
05:98:b0:ff:a6:d7:c4:5c:9f:af:2e:c8:66:29:c8:9d:ff:36:
ed:c1:14:69:65:06:ed:fd:5f:18:a0:12:a5:52:1b:88:e6:fb:
3d:2d:d4:80:62:3a:8b:5c:ae:69:b7:bf:61:69:41:e1:40:a5:
2c:6c:0c:2f:94:e9:8b:95:fc:db:ff:81:25:82:1c:d2:2f:90:
82:a4:89:96:4c:77:f6:4e:b3:4a:af:1d:32:4f:dd:8d:49:cd:
e4:fb:32:ee:af:ff:43:12:78:c5:c4:69:fe:d5:33:28:07:91:
7b:cd:ed:da:e2:ff:47:6c:67:51:26:57:c1:6c:49:83:3a:49:
00:a6:8f:e8:e0:39:ae:06:ce:e6:7e:9b:34:3c:32:f4:2c:9d:
76:a8:76:84:e2:6a:9f:7d:24:94:c6:e5:c8:cf:ae:10:32:79:
29:dd:9f:79:16:fb:a0:5d:8d:30:da:bb:b9:97:13:df:ae:9f:
90:31:64:ab:b9:1b:b6:30:9f:85:c6:6e:d8:7c:c7:aa:b0:1a:
e4:eb:8a:0a
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAY+GLFt925Oh9G4V12Sh5pCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNTE3MTA1MDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWRjZDVhMDQyNmRhZTVhNjA5NDE3ODEzMjYxZTYzNzE1ZjNmMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub9N620r0iSovTtx91QRPQugNrNG
/1IyR+bK36sXiqAYNPWUDDrJL0tservYWwrEXVGzxu+1xIzvxyuElPou/0XKXCxd
QD8IdG6Upw24UaLmJstxSjvKtf8Y2pzVpTuJPUZDFSqjBHLD1eXFqSZTIpipvkr4
17/t96kkBPYQykshD5UG81SFNGeR9oeHQvcpJZ3iSZ9Q7Vq4bhkqMmm2Sck/RhQQ
eGU2sv5ILL+aBbKd4q6XCzPUT3S2mGF8JMqWvcD++h+g/yhHW0vp9CUsJchsXIv9
cWQ9S22C4p012qR+8AAgL9k7JuswSzsmBTahxdGVkCkcd8VpNsKY9eF3FwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFOrc1aBCba5aYJQXgTJh5jcV8/LtMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNnR6Vm9FSnRybHBnbEJlQk1tSG1OeFh6OHUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQCJd14AwQA
LVHxMAwDBAAtkJkDBAAtkJoDBABenAsDBABenP0DBACNYgEDBAHBlQIwDQYJKoZI
hvcNAQELBQADggEBAKAq0yp7rzrXtrdyYdDWER5orMtxxQL3TwmFdar4kWilETw2
9ZLSDr7KZScjSac+tVy0AFIyPgWYsP+m18Rcn68uyGYpyJ3/Nu3BFGllBu39Xxig
EqVSG4jm+z0t1IBiOotcrmm3v2FpQeFApSxsDC+U6YuV/Nv/gSWCHNIvkIKkiZZM
d/ZOs0qvHTJP3Y1JzeT7Mu6v/0MSeMXEaf7VMygHkXvN7dri/0dsZ1EmV8FsSYM6
SQCmj+jgOa4GzuZ+mzQ8MvQsnXaodoTiap99JJTG5cjPrhAyeSndn3kW+6BdjTDa
u7mXE9+un5AxZKu5G7Ywn4XGbth8x6qwGuTrigo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:25 2024 by rpki-client on console-ams.rpki-client.org