Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/874ty-dd09L8iNudmdC5U-o_Jj0.roa
File: 874ty-dd09L8iNudmdC5U-o_Jj0.roa (raw, json)
Hash identifier: wzgkYt8mzF4V6A/krM0r3Xguviyg6bP19IY+knekZfc=
Subject key identifier: F3:BE:2D:CB:E7:5D:D3:D2:FC:88:DB:9D:99:D0:B9:53:EA:3F:26:3D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191BD7C904F3D378E2ECC8D394C8E292CE7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/874ty-dd09L8iNudmdC5U-o_Jj0.roa
Signing time: Wed 04 Sep 2024 14:42:22 +0000
ROA not before: Wed 04 Sep 2024 14:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.88.90.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.37.41.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 14:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:7c:90:4f:3d:37:8e:2e:cc:8d:39:4c:8e:29:2c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 4 14:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3be2dcbe75dd3d2fc88db9d99d0b953ea3f263d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:6a:f4:d1:24:82:e4:26:4f:fd:6d:e2:b9:
f7:fe:e0:aa:da:19:af:d4:89:06:4e:db:e3:e2:23:
21:5d:23:f7:23:d0:55:b9:d6:ed:37:b0:e9:69:b4:
2e:38:c3:c5:17:84:d7:c7:90:6f:04:22:0e:ea:cb:
bb:d8:7e:b8:eb:4a:ec:ca:41:8a:9c:a9:84:1b:86:
e6:b0:5f:48:c1:29:b2:50:02:71:f8:53:ae:41:24:
db:48:22:87:01:f2:ea:44:dd:b2:55:b8:3b:7d:2c:
19:df:39:a5:61:63:60:06:5e:11:ff:77:ee:8c:d0:
e0:c8:37:08:ff:ca:ac:aa:49:de:da:28:70:e0:09:
5e:a3:87:b3:90:35:2c:0c:bd:b7:5a:fe:08:d5:52:
5f:b8:4b:cc:8b:ff:11:d5:c5:b3:f3:4b:c9:2a:41:
2b:64:4f:80:39:34:2c:3e:c2:56:fa:a1:af:1c:96:
10:1f:6c:4d:d8:e1:ca:40:f1:60:07:36:65:11:c9:
34:a6:b8:5a:ec:ca:73:6f:bf:28:b4:4e:3d:0f:00:
29:23:cb:ea:6c:7b:e6:3a:c0:d5:59:3b:92:b7:bf:
26:0d:1f:92:24:c0:a1:ea:fe:4e:3b:85:27:7f:52:
37:61:71:b9:54:f6:25:87:65:4b:17:0d:29:82:25:
75:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BE:2D:CB:E7:5D:D3:D2:FC:88:DB:9D:99:D0:B9:53:EA:3F:26:3D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/874ty-dd09L8iNudmdC5U-o_Jj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.149.241.0/24
45.151.89.0/24
45.151.91.0/24
80.76.51.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
93.123.39.0/24
94.103.125.0/24
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.37.41.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e4:dc:48:ed:82:ac:68:a2:0c:5e:08:30:41:b9:3e:d8:1b:
53:e5:d0:98:f0:0a:17:b1:f1:b2:eb:12:e9:51:62:bf:09:4d:
f0:88:58:90:95:7b:71:3f:9e:0d:06:94:13:c5:29:50:4a:70:
99:8b:af:c8:5e:c1:2f:9c:56:19:9a:ef:71:0a:cd:e8:24:eb:
ed:91:ed:85:3c:e7:9f:b1:e0:b7:d6:6c:24:2e:ac:31:cd:50:
75:fa:2b:4f:6f:74:75:c2:42:38:f9:52:93:1e:c1:ec:c8:86:
b0:61:f3:14:56:d9:80:48:ac:32:5c:7f:f9:8c:9b:e5:67:28:
22:1d:36:97:81:db:28:0b:3d:c4:fd:18:71:47:af:b8:ef:02:
08:7c:05:b1:8a:f3:03:7f:f1:56:44:54:3e:40:e8:c8:6f:96:
0d:0f:91:62:c2:8e:8f:e5:1f:58:60:0b:69:75:6a:4d:d3:ca:
cf:0c:51:f3:17:f5:4f:b3:4c:e5:01:f3:8f:1b:1b:49:ef:de:
d4:67:32:e6:cc:30:46:ea:24:21:6f:86:5a:1b:5f:28:a6:0e:
25:6f:1a:f1:d4:86:1c:17:53:ff:87:26:60:41:d2:3c:2e:69:
c2:7b:30:49:73:0f:d7:14:5f:0b:d0:ac:bb:2c:66:fd:94:3c:
ed:42:19:87
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAZG9fJBPPTeOLsyNOUyOKSznMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwOTA0MTQ0MjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2JlMmRjYmU3NWRkM2QyZmM4OGRiOWQ5OWQwYjk1M2VhM2YyNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9tq9NEkguQmT/1t4rn3/uCq2hmv
1IkGTtvj4iMhXSP3I9BVudbtN7DpabQuOMPFF4TXx5BvBCIO6su72H6460rsykGK
nKmEG4bmsF9IwSmyUAJx+FOuQSTbSCKHAfLqRN2yVbg7fSwZ3zmlYWNgBl4R/3fu
jNDgyDcI/8qsqkne2ihw4Aleo4ezkDUsDL23Wv4I1VJfuEvMi/8R1cWz80vJKkEr
ZE+AOTQsPsJW+qGvHJYQH2xN2OHKQPFgBzZlEck0prha7Mpzb78otE49DwApI8vq
bHvmOsDVWTuSt78mDR+SJMCh6v5OO4Unf1I3YXG5VPYlh2VLFw0pgiV1MwIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFPO+LcvnXdPS/IjbnZnQuVPqPyY9MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvODc0dHktZGQwOUw4aU51ZG1kQzVVLW9fSmowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAt
WFoDBAAtlfEDBAAtl1kDBAAtl1sDBABQTDMDBABT22EDBAFUFa4DBABUNjADBABX
eFcDBABXeF0DBABXeS0DBABXed0DBAFcd8QDBABdeycDBABeZ30DBAJemqADBABe
nAsDBACNYgEDBACTTmcDBAKrFkgDBAK52FQDBAK52lQDBADBJSkDBADB3mADBADC
MPswDQYJKoZIhvcNAQELBQADggEBAEfk3EjtgqxoogxeCDBBuT7YG1Pl0JjwChex
8bLrEulRYr8JTfCIWJCVe3E/ng0GlBPFKVBKcJmLr8hewS+cVhma73EKzegk6+2R
7YU855+x4LfWbCQurDHNUHX6K09vdHXCQjj5UpMewezIhrBh8xRW2YBIrDJcf/mM
m+VnKCIdNpeB2ygLPcT9GHFHr7jvAgh8BbGK8wN/8VZEVD5A6Mhvlg0PkWLCjo/l
H1hgC2l1ak3Tys8MUfMX9U+zTOUB848bG0nv3tRnMubMMEbqJCFvhlobXyimDiVv
GvHUhhwXU/+HJmBB0jwuacJ7MElzD9cUXwvQrLssZv2UPO1CGYc=
-----END CERTIFICATE-----
Generated at Sun Sep 8 16:45:09 2024 by rpki-client on console-ams.rpki-client.org