Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AfMjkB_wXIE0XvhoKIhnTLofJB0.roa
File: AfMjkB_wXIE0XvhoKIhnTLofJB0.roa (raw, json)
Hash identifier: gvoY1QJNf+Ujra+XNrzBeNmIuOHCRwGAblue3Gz2Mao=
Subject key identifier: 01:F3:23:90:1F:F0:5C:81:34:5E:F8:68:28:88:67:4C:BA:1F:24:1D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188DCF995EA1138BC0E7B181EB14963EE9C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AfMjkB_wXIE0XvhoKIhnTLofJB0.roa
Signing time: Wed 21 Jun 2023 08:02:04 +0000
ROA not before: Wed 21 Jun 2023 08:02:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
45.95.0.0/22 maxlen: 24
94.103.124.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
94.103.126.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:f9:95:ea:11:38:bc:0e:7b:18:1e:b1:49:63:ee:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 21 08:02:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01f323901ff05c81345ef8682888674cba1f241d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:f6:36:66:18:72:b2:00:68:cd:3b:5f:46:
85:41:34:a2:3e:fb:05:f6:17:44:5f:1d:62:3f:5c:
d1:ef:7f:ad:53:7d:f5:28:91:7b:52:29:b2:6c:8d:
44:66:d5:39:56:d5:9d:27:ab:ff:1f:68:3b:cf:6c:
22:dc:68:0b:1c:91:c5:02:fc:80:ef:40:b6:13:79:
6d:fd:5f:54:90:d1:a9:9f:87:6f:bb:68:04:52:1d:
98:04:ea:fb:d1:46:de:b8:4b:26:03:3a:84:b8:2b:
dd:9a:9c:89:67:44:b2:50:39:37:2f:19:bd:dd:e3:
f7:6c:dd:f3:f1:3d:09:4b:f4:62:50:7e:3b:c3:01:
cd:a1:76:2e:49:64:13:29:a3:f9:78:12:e0:1b:4e:
55:89:b7:b4:ac:be:4a:f9:a2:7f:07:24:f6:eb:42:
52:ce:64:12:de:db:b4:96:d1:df:6d:ad:0d:5e:10:
95:cb:38:1f:2e:cc:21:ae:ce:da:f7:7c:44:97:fe:
45:36:5c:3f:5e:98:bd:37:02:c4:f0:41:fa:c0:42:
d2:4b:86:0b:90:e0:43:5c:e8:fb:cc:91:57:04:c1:
6d:7d:be:ef:8f:fb:a0:9c:3e:1b:26:c0:61:39:34:
79:24:00:ca:4c:4f:bd:3e:10:ea:b9:97:39:b8:4c:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F3:23:90:1F:F0:5C:81:34:5E:F8:68:28:88:67:4C:BA:1F:24:1D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AfMjkB_wXIE0XvhoKIhnTLofJB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.0.0/22
45.151.89.0/24
92.119.196.0/23
94.103.124.0/24
94.103.126.0/24
94.154.161.0-94.154.163.255
94.156.239.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
Signature Algorithm: sha256WithRSAEncryption
80:fb:26:1a:70:54:89:49:95:95:c2:2e:48:81:00:b1:ca:55:
a0:16:9b:95:25:09:b9:7c:22:f8:73:02:32:5d:1a:b6:79:ea:
e6:d3:20:2e:9b:50:8a:52:ed:db:19:88:67:f4:34:da:0d:df:
43:7f:ac:ed:4e:56:ff:38:2d:aa:3a:49:c3:0e:c2:2b:c3:cd:
d0:2d:64:55:31:cb:f5:3e:f4:30:73:5e:cb:0f:83:4c:59:ee:
9d:63:a0:79:60:8c:3e:08:85:25:ed:b9:c1:9c:68:a9:59:3b:
c9:6a:52:0f:73:8c:f4:dd:0e:0b:ea:8b:35:61:0d:4c:38:62:
d6:ee:7b:4a:a6:31:34:be:b9:41:8e:12:55:f2:f0:73:09:1a:
05:1b:cf:bb:2b:fc:d1:90:cd:d4:d2:0d:8c:a2:8e:50:46:ba:
9c:cd:2f:cb:bb:2b:0f:4c:7a:ae:95:0d:31:9c:a3:81:e4:4c:
1c:08:e8:a1:9e:b0:20:7d:64:0a:f6:b4:f5:60:f2:f6:c2:8d:
0c:17:0b:74:1f:37:c8:ed:b8:c0:35:dd:1c:31:7c:d6:52:e6:
e6:46:9c:1e:80:cf:aa:81:42:ab:3b:14:8f:cb:4e:c8:46:ac:
31:e6:59:6f:91:84:b3:d5:c8:a0:37:e8:cf:70:2b:05:d1:59:
01:40:82:d7
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAYjc+ZXqETi8DnsYHrFJY+6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNjIxMDgwMjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWYzMjM5MDFmZjA1YzgxMzQ1ZWY4NjgyODg4Njc0Y2JhMWYyNDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodn2NmYYcrIAaM07X0aFQTSiPvsF
9hdEXx1iP1zR73+tU331KJF7UimybI1EZtU5VtWdJ6v/H2g7z2wi3GgLHJHFAvyA
70C2E3lt/V9UkNGpn4dvu2gEUh2YBOr70UbeuEsmAzqEuCvdmpyJZ0SyUDk3Lxm9
3eP3bN3z8T0JS/RiUH47wwHNoXYuSWQTKaP5eBLgG05Vibe0rL5K+aJ/ByT260JS
zmQS3tu0ltHfba0NXhCVyzgfLswhrs7a93xEl/5FNlw/Xpi9NwLE8EH6wELSS4YL
kOBDXOj7zJFXBMFtfb7vj/ugnD4bJsBhOTR5JADKTE+9PhDquZc5uExGkQIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFAHzI5Af8FyBNF74aCiIZ0y6HyQdMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQWZNamtCX3dYSUUwWHZob0tJaG5UTG9mSkIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQCLV8AAwQA
LZdZAwQBXHfEAwQAXmd8AwQAXmd+MAwDBABemqEDBAJemqADBABenO8DBAGTTmQD
BAKrFkgDBACy1+wDBAK52FQDBAK52lQDBAC52okDBAC5234wDQYJKoZIhvcNAQEL
BQADggEBAID7JhpwVIlJlZXCLkiBALHKVaAWm5UlCbl8IvhzAjJdGrZ56ubTIC6b
UIpS7dsZiGf0NNoN30N/rO1OVv84Lao6ScMOwivDzdAtZFUxy/U+9DBzXssPg0xZ
7p1joHlgjD4IhSXtucGcaKlZO8lqUg9zjPTdDgvqizVhDUw4Ytbue0qmMTS+uUGO
ElXy8HMJGgUbz7sr/NGQzdTSDYyijlBGupzNL8u7Kw9Meq6VDTGco4HkTBwI6KGe
sCB9ZAr2tPVg8vbCjQwXC3QfN8jtuMA13RwxfNZS5uZGnB6Az6qBQqs7FI/LTshG
rDHmWW+RhLPVyKA36M9wKwXRWQFAgtc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org