Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EG1S3sXT4KOTBRaX_zrYwtHHOn8.roa
File: EG1S3sXT4KOTBRaX_zrYwtHHOn8.roa (raw, json)
Hash identifier: jkPKkrI5qRsn6bYHoJTkchExmXoxiGKdOq8BQahcTjc=
Subject key identifier: 10:6D:52:DE:C5:D3:E0:A3:93:05:16:97:FF:3A:D8:C2:D1:C7:3A:7F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D307ECA85F5865BF7D3B4CFF7877D1616
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EG1S3sXT4KOTBRaX_zrYwtHHOn8.roa
Signing time: Mon 22 Jan 2024 09:27:12 +0000
ROA not before: Mon 22 Jan 2024 09:27:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 5.252.132.0/22 maxlen: 24
45.90.88.0/23 maxlen: 24
45.149.241.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
193.58.120.0/24 maxlen: 24
194.31.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 13:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:7e:ca:85:f5:86:5b:f7:d3:b4:cf:f7:87:7d:16:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 22 09:27:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=106d52dec5d3e0a393051697ff3ad8c2d1c73a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:ec:0f:a5:b0:a7:3e:af:aa:2e:f4:10:36:
03:31:89:75:d7:03:37:ed:bd:cf:af:e6:cb:63:a4:
2e:95:57:2a:6e:5c:55:88:8e:7b:76:f6:3d:e0:e9:
bc:93:e1:4e:3b:c7:a0:76:85:39:b1:04:7c:6f:66:
68:82:4b:f8:ff:ea:67:44:63:21:c1:d0:88:94:97:
0a:9d:65:a8:fa:4e:fe:b6:49:32:4c:7d:1c:35:ad:
cf:b9:ce:40:9a:ba:7a:57:64:e3:35:3d:95:2d:f4:
ce:47:e1:e6:4d:7b:b0:c9:e4:5d:d4:db:69:17:65:
7b:3b:a5:44:ff:66:26:ce:67:22:c6:d7:f3:69:cd:
e1:f4:cb:7d:15:bc:10:eb:32:fc:c8:db:c8:3b:ba:
7e:29:4d:e7:48:b0:7c:ba:28:d4:51:8b:09:51:f9:
56:6d:d3:7b:2f:d5:1f:8d:6a:93:2f:f8:36:69:ca:
d7:83:ef:7f:34:09:7a:cc:c0:fb:2f:dd:0f:82:97:
b2:c9:68:8c:42:64:ab:d3:b1:24:2b:0d:ca:d9:2d:
df:08:17:6b:5f:80:ef:01:17:60:83:3e:20:2a:64:
ee:a6:1f:0d:63:a9:7d:15:39:04:ff:9b:01:b6:78:
9b:d6:71:e5:39:54:19:eb:b2:e4:06:df:c6:12:9c:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6D:52:DE:C5:D3:E0:A3:93:05:16:97:FF:3A:D8:C2:D1:C7:3A:7F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EG1S3sXT4KOTBRaX_zrYwtHHOn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.90.88.0/23
45.149.241.0/24
193.25.218.0/24
193.58.120.0/24
194.31.204.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f8:d1:9a:82:3d:be:5e:fe:2a:62:e8:28:40:b5:34:08:81:
76:32:1a:ff:a3:ac:9e:c5:69:09:f1:58:ce:fb:ac:aa:36:0e:
f5:c1:b8:3e:c2:62:89:e5:dd:03:fe:c3:6c:c4:58:11:0f:f3:
62:22:d2:db:94:fb:4b:b8:a1:bb:3f:f3:e5:cd:36:e8:88:fd:
87:cb:7f:9e:0d:ce:a3:a3:c6:14:af:58:04:eb:97:cc:5e:cf:
81:3f:6e:a5:1d:d9:98:62:29:bb:ce:a1:8d:12:fc:50:f6:a7:
5d:3f:52:04:a0:de:df:a4:83:9a:e8:4e:3a:e0:a9:50:0c:76:
f1:cd:24:a9:23:c9:62:f4:ec:d8:aa:84:60:c7:71:8a:e3:c9:
52:eb:18:a3:44:b6:ee:3a:f9:d1:84:16:c9:a6:da:bb:fc:df:
84:b4:a8:2a:35:30:82:48:49:14:d6:24:27:ac:26:5e:33:ca:
ce:c0:2a:d1:66:99:a3:2d:26:fe:dd:e9:4d:ff:f0:96:98:3c:
e7:35:2e:af:26:8a:69:53:3b:94:16:73:2d:18:5c:78:25:01:
24:e9:68:37:25:7d:0a:32:3a:06:51:77:2a:02:5e:2a:d0:89:
50:a5:32:95:2b:19:7d:7f:fa:88:a9:20:48:0b:d5:f4:6e:4e:
c0:6d:28:41
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAY0wfsqF9YZb99O0z/eHfRYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTIyMDkyNzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDZkNTJkZWM1ZDNlMGEzOTMwNTE2OTdmZjNhZDhjMmQxYzczYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv23sD6Wwpz6vqi70EDYDMYl11wM3
7b3Pr+bLY6QulVcqblxViI57dvY94Om8k+FOO8egdoU5sQR8b2Zogkv4/+pnRGMh
wdCIlJcKnWWo+k7+tkkyTH0cNa3Puc5Amrp6V2TjNT2VLfTOR+HmTXuwyeRd1Ntp
F2V7O6VE/2Ymzmcixtfzac3h9Mt9FbwQ6zL8yNvIO7p+KU3nSLB8uijUUYsJUflW
bdN7L9UfjWqTL/g2acrXg+9/NAl6zMD7L90PgpeyyWiMQmSr07EkKw3K2S3fCBdr
X4DvARdggz4gKmTuph8NY6l9FTkE/5sBtnib1nHlOVQZ67LkBt/GEpwLsQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBBtUt7F0+CjkwUWl/862MLRxzp/MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRUcxUzNzWFQ0S09UQlJhWF96cll3dEhIT244LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCBfyEAwQB
LVpYAwQALZXxAwQAwRnaAwQAwTp4AwQAwh/MMA0GCSqGSIb3DQEBCwUAA4IBAQCI
+NGagj2+Xv4qYugoQLU0CIF2Mhr/o6yexWkJ8VjO+6yqNg71wbg+wmKJ5d0D/sNs
xFgRD/NiItLblPtLuKG7P/PlzTboiP2Hy3+eDc6jo8YUr1gE65fMXs+BP26lHdmY
Yim7zqGNEvxQ9qddP1IEoN7fpIOa6E464KlQDHbxzSSpI8li9OzYqoRgx3GK48lS
6xijRLbuOvnRhBbJptq7/N+EtKgqNTCCSEkU1iQnrCZeM8rOwCrRZpmjLSb+3elN
//CWmDznNS6vJoppUzuUFnMtGFx4JQEk6Wg3JX0KMjoGUXcqAl4q0IlQpTKVKxl9
f/qIqSBIC9X0bk7AbShB
-----END CERTIFICATE-----
Generated at Tue Mar 26 17:17:04 2024 by rpki-client on console-ams.rpki-client.org