Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9LgOsZ6EDEJhpCOScokhL9J_htM.roa
File: 9LgOsZ6EDEJhpCOScokhL9J_htM.roa (raw, json)
Hash identifier: 9ceT1Y67eB4hVcwcQn7U2c31v3wPJmL/eHIO40lNj0A=
Subject key identifier: F4:B8:0E:B1:9E:84:0C:42:61:A4:23:92:72:89:21:2F:D2:7F:86:D3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C34D134D43A2DA7E4F5466B484052ABA6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9LgOsZ6EDEJhpCOScokhL9J_htM.roa
Signing time: Mon 04 Dec 2023 12:32:54 +0000
ROA not before: Mon 04 Dec 2023 12:32:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 94.156.8.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
185.226.172.0/24 maxlen: 24
2.59.253.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:d1:34:d4:3a:2d:a7:e4:f5:46:6b:48:40:52:ab:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 4 12:32:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4b80eb19e840c4261a423927289212fd27f86d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:ea:31:9f:50:b5:9f:7b:30:68:3a:6f:a5:
c0:8d:27:da:f4:ff:fa:fc:78:13:da:15:d2:30:5b:
e3:16:8c:e6:1d:91:6e:d9:ae:6b:39:1c:f7:81:11:
13:a5:17:ba:c9:b8:63:43:5c:8f:a5:02:aa:fc:59:
2a:ae:f3:b2:a9:78:c9:cc:e7:f2:1c:66:02:09:7c:
56:eb:29:96:cc:4b:eb:13:29:c1:5a:db:1a:80:46:
81:bc:a1:92:bb:cc:ab:5e:50:e5:e9:37:44:87:8e:
4a:09:ed:76:f9:d5:f5:0e:2b:3c:15:f2:30:bb:95:
a5:0c:64:91:ae:41:80:cb:b0:b6:5c:a0:7c:61:f8:
db:e3:23:10:08:f3:95:f8:d5:b7:4a:0d:98:22:e2:
f5:95:5e:7b:5f:a4:26:90:54:1f:92:bb:81:b9:8c:
49:ea:b5:74:1f:89:79:29:7c:19:b5:49:b9:8c:36:
91:55:ad:2a:4c:bd:26:8a:ba:b6:35:47:e8:d1:5a:
1b:d4:1c:e3:f3:7e:76:16:d7:82:ac:1d:7d:5c:cd:
26:1e:ec:2d:11:c0:74:3a:0e:7e:d4:d3:e7:c4:e0:
8d:94:85:e1:3f:4d:81:fd:97:84:ab:cf:1b:cf:94:
15:a2:30:8a:cf:66:71:ce:8b:3d:8d:6b:55:d0:88:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B8:0E:B1:9E:84:0C:42:61:A4:23:92:72:89:21:2F:D2:7F:86:D3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9LgOsZ6EDEJhpCOScokhL9J_htM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
94.156.8.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
178.215.238.0/24
185.222.160.0-185.222.162.255
185.225.73.0/24
185.226.172.0/24
185.246.223.0/24
193.25.217.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.31.205.0/24
194.48.248.0/24
194.55.187.0/24
194.55.225.0/24
194.169.172.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
39:dd:4d:c6:bc:98:b6:20:21:45:3d:e4:26:52:96:92:12:53:
5f:80:46:8a:4f:2f:82:26:82:14:55:16:4a:b8:89:47:b8:06:
71:bc:46:8b:58:7e:3a:65:4d:92:16:86:57:33:9c:23:e6:59:
5a:fa:53:2e:14:26:9f:29:bb:16:09:b3:72:51:dc:02:53:67:
86:ed:19:d1:b1:c0:01:d9:ce:16:1d:46:6a:02:19:70:02:68:
57:78:a5:1b:60:8f:be:c2:af:9b:e4:a0:a6:89:12:36:34:ba:
77:07:10:7c:cd:22:c0:63:ba:29:a0:83:d3:6f:f8:82:a2:18:
6f:25:8e:fd:4b:2e:64:e5:54:6d:62:b9:ca:0a:3e:a8:df:15:
f2:d0:1d:ec:d6:84:70:cb:12:7b:74:7d:92:71:a9:6a:ff:58:
fa:cf:54:86:c0:ce:94:0c:ab:9a:b0:1c:07:23:60:ba:a4:db:
ad:c3:3f:cf:71:f9:86:8c:80:de:3f:62:64:a4:5f:0e:d5:7b:
82:20:99:e1:c8:af:5e:15:97:cc:39:13:0c:56:85:07:d4:b4:
4a:7c:d3:c8:99:ad:a9:46:9a:fd:d6:a4:33:d9:2b:e0:c1:b4:
ab:8b:59:69:1b:81:a9:7e:87:66:4b:49:78:4a:b9:90:26:87:
43:3a:dc:3c
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAYw00TTUOi2n5PVGa0hAUqumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMjA0MTIzMjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGI4MGViMTllODQwYzQyNjFhNDIzOTI3Mjg5MjEyZmQyN2Y4NmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNPqMZ9QtZ97MGg6b6XAjSfa9P/6
/HgT2hXSMFvjFozmHZFu2a5rORz3gRETpRe6ybhjQ1yPpQKq/FkqrvOyqXjJzOfy
HGYCCXxW6ymWzEvrEynBWtsagEaBvKGSu8yrXlDl6TdEh45KCe12+dX1Dis8FfIw
u5WlDGSRrkGAy7C2XKB8Yfjb4yMQCPOV+NW3Sg2YIuL1lV57X6QmkFQfkruBuYxJ
6rV0H4l5KXwZtUm5jDaRVa0qTL0mirq2NUfo0Vob1Bzj8352FteCrB19XM0mHuwt
EcB0Og5+1NPnxOCNlIXhP02B/ZeEq88bz5QVojCKz2Zxzos9jWtV0IjxvQIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFPS4DrGehAxCYaQjknKJIS/Sf4bTMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvOUxnT3NaNkVERUpocENPU2Nva2hMOUpfaHRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHZBggrBgEFBQcBBwEB/wSByTCBxjCBwwQCAAEwgbwDBAAC
O/0DBAAtVFsDBAAtWEADBAAtWFsDBABPbjMDBABcd8YDBABc+TIDBABemqIDBABe
nAgDBABtzu8DBACy1+EDBACy1+MDBACy1+wDBACy1+4wDAMEBbneoAMEALneogME
ALnhSQMEALnirAMEALn23wMEAMEZ2QMEAMElKAMEAMElKgMEAMElLAMEAMHeYQME
AMHeYwMEAMIfzQMEAMIw+AMEAMI3uwMEAMI34QMEAMKprAMEAMK0JjANBgkqhkiG
9w0BAQsFAAOCAQEAOd1NxryYtiAhRT3kJlKWkhJTX4BGik8vgiaCFFUWSriJR7gG
cbxGi1h+OmVNkhaGVzOcI+ZZWvpTLhQmnym7FgmzclHcAlNnhu0Z0bHAAdnOFh1G
agIZcAJoV3ilG2CPvsKvm+SgpokSNjS6dwcQfM0iwGO6KaCD02/4gqIYbyWO/Usu
ZOVUbWK5ygo+qN8V8tAd7NaEcMsSe3R9knGpav9Y+s9UhsDOlAyrmrAcByNguqTb
rcM/z3H5hoyA3j9iZKRfDtV7giCZ4civXhWXzDkTDFaFB9S0SnzTyJmtqUaa/dak
M9kr4MG0q4tZaRuBqX6HZktJeEq5kCaHQzrcPA==
-----END CERTIFICATE-----
Generated at Wed Dec 6 14:55:49 2023 by rpki-client on console-ams.rpki-client.org