Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DOe5P46Qs79FMpYkPLkG6STU95U.roa
File: DOe5P46Qs79FMpYkPLkG6STU95U.roa (raw, json)
Hash identifier: umY1tY/jJO0Gir2KElMOuROxu4WWCRILE+l2dI5jqqQ=
Subject key identifier: 0C:E7:B9:3F:8E:90:B3:BF:45:32:96:24:3C:B9:06:E9:24:D4:F7:95
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019035366254E8FC8DCCFB63730904C3715B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DOe5P46Qs79FMpYkPLkG6STU95U.roa
Signing time: Thu 20 Jun 2024 10:34:34 +0000
ROA not before: Thu 20 Jun 2024 10:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.149.242.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 08:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:36:62:54:e8:fc:8d:cc:fb:63:73:09:04:c3:71:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 20 10:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ce7b93f8e90b3bf453296243cb906e924d4f795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:51:79:27:32:04:be:b3:e3:56:82:58:fb:
c7:ae:fe:fe:c5:df:21:62:2f:8b:02:15:fd:d5:49:
4d:4e:f8:60:ab:cf:bd:57:50:d5:1e:bf:6a:95:ce:
b6:5c:11:8c:f8:b4:ab:f7:85:d8:fd:e7:56:7e:ad:
a4:c0:5e:c1:5d:16:3a:e5:42:98:ad:ba:91:28:86:
58:76:69:48:11:48:56:d2:0a:9f:8e:bb:5d:61:7d:
bb:08:c5:c6:cb:25:ce:04:d8:0d:2f:ae:2d:be:ad:
c6:04:96:7a:c2:77:16:4e:2d:21:43:35:ba:ce:03:
6d:79:ee:21:f1:9b:47:56:ac:e0:bf:67:b3:88:4c:
70:04:96:96:31:92:b3:2a:f4:f5:72:17:7a:cd:08:
57:11:37:96:e0:4a:ba:d1:ba:c4:7d:ca:19:c0:15:
2a:6c:9b:12:ef:84:9d:f4:55:5b:b3:64:46:33:22:
71:30:c3:99:2b:28:19:95:35:e6:81:28:8c:e3:ac:
58:6b:5c:fd:83:43:f1:51:82:83:d3:ce:a0:35:79:
b4:b2:f7:51:d5:48:fe:33:01:be:41:a5:67:5e:01:
47:94:df:1e:41:c1:d5:c1:a9:37:cb:d8:60:4a:f4:
2b:84:63:25:bd:2c:53:12:eb:f3:50:97:96:c4:7b:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E7:B9:3F:8E:90:B3:BF:45:32:96:24:3C:B9:06:E9:24:D4:F7:95
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DOe5P46Qs79FMpYkPLkG6STU95U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.149.242.0/23
45.151.88.0/23
82.115.211.0/24
83.219.97.0/24
84.21.174.0/23
87.120.33.0/24
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
20:1d:41:7f:f4:6f:37:14:51:b4:21:21:ff:8f:7f:f4:93:8f:
95:bd:e5:32:c8:1d:fa:94:eb:cb:5f:94:80:28:41:7e:46:c6:
8c:6d:e4:6b:b2:5e:de:5e:d4:e6:74:d5:fb:fb:47:a9:5d:9c:
55:0b:5e:17:10:ff:e6:f6:4b:03:b2:47:86:07:66:fa:b6:79:
70:c7:ed:85:54:e0:5b:dc:8d:ad:8e:8a:14:6f:2f:5d:b5:40:
74:1b:d3:18:fb:92:44:3c:6c:d5:2d:e9:c9:89:e2:f2:2b:4b:
6a:8e:8a:82:12:30:bd:da:a6:f2:14:0c:d3:31:25:02:88:74:
d6:97:8c:9a:ed:45:5e:53:29:43:96:b7:4d:1c:d3:9b:6e:5b:
55:27:97:18:f9:f9:d3:b7:df:2e:a3:4c:78:f9:8a:91:85:f7:
ea:19:70:d0:6f:fe:ba:c5:e2:9a:7f:fb:9a:46:ba:4b:ed:b1:
4b:48:cf:bd:9c:a6:37:bd:69:6d:36:26:85:32:8d:0c:1b:f1:
a6:7b:29:70:47:53:7f:e9:42:9b:1f:9d:27:31:a2:4b:73:7d:
05:5c:0e:06:74:30:e3:e8:10:02:c4:f4:3a:f2:9e:de:25:67:
00:7f:bc:89:16:1d:c0:fb:fb:37:22:9d:8c:5d:5b:2c:b6:6e:
3c:f9:a8:3d
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgISAZA1NmJU6PyNzPtjcwkEw3FbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNjIwMTAzNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2U3YjkzZjhlOTBiM2JmNDUzMjk2MjQzY2I5MDZlOTI0ZDRmNzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodhReScyBL6z41aCWPvHrv7+xd8h
Yi+LAhX91UlNTvhgq8+9V1DVHr9qlc62XBGM+LSr94XY/edWfq2kwF7BXRY65UKY
rbqRKIZYdmlIEUhW0gqfjrtdYX27CMXGyyXOBNgNL64tvq3GBJZ6wncWTi0hQzW6
zgNtee4h8ZtHVqzgv2eziExwBJaWMZKzKvT1chd6zQhXETeW4Eq60brEfcoZwBUq
bJsS74Sd9FVbs2RGMyJxMMOZKygZlTXmgSiM46xYa1z9g0PxUYKD086gNXm0svdR
1Uj+MwG+QaVnXgFHlN8eQcHVwak3y9hgSvQrhGMlvSxTEuvzUJeWxHt8IwIDAQAB
o4IC4DCCAtwwHQYDVR0OBBYEFAznuT+OkLO/RTKWJDy5Bukk1PeVMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRE9lNVA0NlFzNzlGTXBZa1BMa0c2U1RVOTVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH1BggrBgEFBQcBBwEB/wSB5TCB4jCB3wQCAAEwgdgDBAIl
3XgDBAAtQuUwDAMEAC1R8QMEAC1R8gMEAC1YWDAMAwQDLZCYAwQALZCaAwQALZXp
AwQBLZXyAwQBLZdYAwQAUnPTAwQAU9thAwQBVBWuAwQAV3ghAwQAV3hXAwQAV3kt
AwQBV3lWAwQAV3ndAwQBXHfEAwQCXpqgAwQAXpwLAwQAXpxOMAwDBABf1hkDBABf
1hoDBACNYgEDBACTTmYDBACrFhEDBAKrFkgDBACy1+ADBAK52FQDBAK52lQDBAHB
KiADBAHBlQIDBADCMPgDBADCN+AwDQYJKoZIhvcNAQELBQADggEBACAdQX/0bzcU
UbQhIf+Pf/STj5W95TLIHfqU68tflIAoQX5Gxoxt5GuyXt5e1OZ01fv7R6ldnFUL
XhcQ/+b2SwOyR4YHZvq2eXDH7YVU4Fvcja2OihRvL121QHQb0xj7kkQ8bNUt6cmJ
4vIrS2qOioISML3apvIUDNMxJQKIdNaXjJrtRV5TKUOWt00c05tuW1Unlxj5+dO3
3y6jTHj5ipGF9+oZcNBv/rrF4pp/+5pGukvtsUtIz72cpje9aW02JoUyjQwb8aZ7
KXBHU3/pQpsfnScxoktzfQVcDgZ0MOPoEALE9Drynt4lZwB/vIkWHcD7+zcinYxd
Wyy2bjz5qD0=
-----END CERTIFICATE-----
Generated at Mon Jun 24 12:53:23 2024 by rpki-client on console-ams.rpki-client.org