Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/72gjs7e1jH9iHlj8u3rIuiY_j_g.roa
File: 72gjs7e1jH9iHlj8u3rIuiY_j_g.roa (raw, json)
Hash identifier: ipzgY9CGZXb2dMAeQxPukR7hYtqs7N2jK7GXu2oxHZ0=
Subject key identifier: EF:68:23:B3:B7:B5:8C:7F:62:1E:58:FC:BB:7A:C8:BA:26:3F:8F:F8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C57B4410650B366375990B85A94340220
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/72gjs7e1jH9iHlj8u3rIuiY_j_g.roa
Signing time: Mon 11 Dec 2023 07:08:00 +0000
ROA not before: Mon 11 Dec 2023 07:08:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199605
IP address blocks: 171.22.31.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:b4:41:06:50:b3:66:37:59:90:b8:5a:94:34:02:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 11 07:08:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef6823b3b7b58c7f621e58fcbb7ac8ba263f8ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:29:d8:32:1a:e8:8b:25:8a:3c:30:5a:bc:
f9:80:e3:b5:98:8b:ed:7b:62:69:5d:5a:f2:b7:b6:
62:63:fa:0c:70:14:e0:3e:6b:5f:51:8c:37:a5:2c:
b2:35:b9:19:4f:5c:26:86:57:55:f5:64:4c:4b:90:
2c:66:22:fd:a0:d3:e6:34:1f:3f:cc:e2:e3:de:c3:
62:57:6e:f0:fe:3d:f4:31:39:e1:10:ca:4a:a9:47:
f3:55:db:fc:fd:a0:ce:b1:be:92:99:5d:28:ed:9b:
1b:4b:8b:f7:89:b7:ef:5a:98:1e:d8:37:e3:66:b3:
52:b7:a9:92:59:38:25:46:f5:0a:31:b6:09:5b:4e:
31:17:ae:1c:f9:44:68:80:93:43:d8:00:e0:5a:df:
90:d5:d0:0e:9c:8d:ef:20:60:77:2b:09:0a:33:f1:
25:3f:86:ce:ec:9f:e3:15:c3:99:c1:86:62:6e:f5:
0e:46:66:ab:65:c9:c4:6f:53:84:19:2f:03:44:e9:
68:73:f7:6d:d7:48:bd:f6:2a:93:6b:b9:80:df:b3:
49:b9:fe:b9:25:82:64:59:40:60:7a:7e:71:60:31:
d9:fc:f9:91:bf:f1:ba:00:fc:bc:46:5b:10:72:22:
9f:f5:ea:d7:ba:dd:4e:8f:cc:96:f3:78:0f:02:94:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:68:23:B3:B7:B5:8C:7F:62:1E:58:FC:BB:7A:C8:BA:26:3F:8F:F8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/72gjs7e1jH9iHlj8u3rIuiY_j_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.129.84.0/24
45.129.86.0/24
171.22.31.0/24
193.35.19.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e2:ff:83:70:98:77:48:d7:f2:65:90:55:a7:f2:0d:b3:3c:
67:18:ba:10:f7:87:20:b8:78:5e:86:d5:b1:80:be:b3:d4:fc:
41:0b:2d:81:33:62:34:43:9a:4c:85:b7:b7:cb:57:2c:eb:f3:
fc:81:bb:87:dc:0f:21:ea:c5:2d:d1:2d:ad:ae:8c:b6:7b:7f:
0b:09:e3:65:8d:6a:f1:5f:2b:59:0d:65:52:7f:6d:11:5c:58:
51:3e:44:e0:78:8e:4b:86:41:1c:bd:46:ec:8c:de:12:7e:db:
9d:8e:a5:04:1f:48:b9:63:65:5d:bf:75:ae:f7:17:8a:86:93:
10:c3:93:e3:91:b1:48:8e:ca:bd:32:01:74:a6:07:e6:6b:df:
ae:47:3d:6d:97:49:5c:e7:a0:3b:06:5d:c3:10:c3:c9:3e:da:
69:6d:02:2f:89:1d:74:32:af:b5:06:61:29:ee:61:39:58:87:
fa:4d:f0:fd:1a:88:b8:ca:84:fa:13:42:2b:20:08:77:3c:6b:
4c:6c:28:e4:90:2f:60:ad:52:a7:96:40:f8:9d:dc:f9:ce:4f:
99:d8:ce:81:d9:3b:13:57:51:9e:3d:80:76:1d:74:87:8d:d8:
d2:97:86:b0:62:2a:ab:ca:82:67:d6:22:cd:85:c9:16:86:35:
89:8b:1f:07
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYxXtEEGULNmN1mQuFqUNAIgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMjExMDcwODAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjY4MjNiM2I3YjU4YzdmNjIxZTU4ZmNiYjdhYzhiYTI2M2Y4ZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK0p2DIa6IslijwwWrz5gOO1mIvt
e2JpXVryt7ZiY/oMcBTgPmtfUYw3pSyyNbkZT1wmhldV9WRMS5AsZiL9oNPmNB8/
zOLj3sNiV27w/j30MTnhEMpKqUfzVdv8/aDOsb6SmV0o7ZsbS4v3ibfvWpge2Dfj
ZrNSt6mSWTglRvUKMbYJW04xF64c+URogJND2ADgWt+Q1dAOnI3vIGB3KwkKM/El
P4bO7J/jFcOZwYZibvUORmarZcnEb1OEGS8DROloc/dt10i99iqTa7mA37NJuf65
JYJkWUBgen5xYDHZ/PmRv/G6APy8RlsQciKf9erXut1Oj8yW83gPApRkzQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFO9oI7O3tYx/Yh5Y/Lt6yLomP4/4MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNzJnanM3ZTFqSDlpSGxqOHUzckl1aVlfal9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAJYuCAwQA
LYFUAwQALYFWAwQAqxYfAwQAwSMTMA0GCSqGSIb3DQEBCwUAA4IBAQCY4v+DcJh3
SNfyZZBVp/INszxnGLoQ94cguHhehtWxgL6z1PxBCy2BM2I0Q5pMhbe3y1cs6/P8
gbuH3A8h6sUt0S2troy2e38LCeNljWrxXytZDWVSf20RXFhRPkTgeI5LhkEcvUbs
jN4SftudjqUEH0i5Y2Vdv3Wu9xeKhpMQw5PjkbFIjsq9MgF0pgfma9+uRz1tl0lc
56A7Bl3DEMPJPtppbQIviR10Mq+1BmEp7mE5WIf6TfD9Goi4yoT6E0IrIAh3PGtM
bCjkkC9grVKnlkD4ndz5zk+Z2M6B2TsTV1GePYB2HXSHjdjSl4awYiqryoJn1iLN
hckWhjWJix8H
-----END CERTIFICATE-----
Generated at Thu Dec 21 08:18:04 2023 by rpki-client on console-ams.rpki-client.org