Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H9VdImVnzsqOY0NDnwd1OovKZq4.roa
File: H9VdImVnzsqOY0NDnwd1OovKZq4.roa (raw, json)
Hash identifier: FiGOGHiwg9Yn2yGksUaIRqRTpaF5zfeaBDmLU7/8CMw=
Subject key identifier: 1F:D5:5D:22:65:67:CE:CA:8E:63:43:43:9F:07:75:3A:8B:CA:66:AE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192B12385B10E5EAFF00A60AA57896A136C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H9VdImVnzsqOY0NDnwd1OovKZq4.roa
Signing time: Mon 21 Oct 2024 22:12:28 +0000
ROA not before: Mon 21 Oct 2024 22:12:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.12.253.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b1:23:85:b1:0e:5e:af:f0:0a:60:aa:57:89:6a:13:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 21 22:12:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fd55d226567ceca8e6343439f07753a8bca66ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:05:b5:48:43:52:9c:53:03:f8:ad:8d:bd:
42:3d:39:94:31:56:44:a0:16:b8:90:f5:fe:04:bd:
21:5d:44:b4:69:db:f6:f1:3b:34:40:73:a8:d6:18:
27:41:9f:f7:15:0b:8d:fa:6a:4c:bf:ec:1d:93:db:
b1:b8:c8:b7:b1:e7:94:96:1f:ad:d1:4d:cd:16:da:
53:73:66:eb:64:f2:b3:81:42:1d:7d:91:3e:2c:da:
46:3d:8d:a5:fa:8c:a8:7e:91:11:f0:28:73:43:9d:
f7:cd:a0:34:39:77:33:c7:9f:96:1f:98:c5:ca:17:
90:d9:3c:7c:30:cb:8c:39:0c:58:c0:7d:52:44:10:
19:53:5e:5c:53:82:ff:c3:1c:7b:7e:b8:a1:b0:c8:
20:de:6e:d3:79:c6:65:45:a4:27:b7:1f:01:6b:fd:
31:68:84:ca:92:3f:57:6f:f2:80:39:d9:63:78:e2:
f3:38:7a:95:dd:aa:ed:1b:60:3c:b0:3f:8e:2f:9c:
7e:43:e9:be:f5:fd:63:02:35:fb:c6:d5:ab:70:58:
4a:d7:f5:82:85:cb:45:c0:93:27:ad:de:9f:f7:72:
81:5c:95:db:80:2a:03:81:c1:67:ba:8c:14:66:2d:
32:8d:9d:ce:87:9b:dd:9a:69:69:63:f3:3b:98:85:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D5:5D:22:65:67:CE:CA:8E:63:43:43:9F:07:75:3A:8B:CA:66:AE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H9VdImVnzsqOY0NDnwd1OovKZq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.253.0/24
87.120.68.0/23
93.123.74.0/23
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
52:33:60:d8:19:b6:14:4a:ca:3a:a8:c1:74:1a:0a:a2:a8:c7:
f9:a1:e0:0d:6a:9b:93:35:94:23:5c:86:81:2c:d8:b6:da:ff:
0d:40:96:0a:6b:90:34:c2:29:86:8d:4b:af:5c:aa:8c:00:62:
b8:bb:77:26:ab:6c:d4:4b:2a:f9:0b:6d:7f:4d:62:bd:a3:2b:
da:ac:5b:61:3e:cb:a7:00:da:23:82:c8:bf:12:e6:ac:95:f5:
c4:03:eb:51:b4:99:33:c1:1f:83:c8:3c:91:e4:6d:a2:fa:6c:
5b:21:06:0e:05:52:48:31:43:f2:2f:c7:15:b0:8c:70:0b:e8:
ca:54:a7:65:85:ff:0a:74:00:ef:c8:2f:c8:11:a5:0d:1f:d0:
dd:a1:99:23:45:b4:c4:d0:df:a3:44:a0:be:71:b8:0d:fb:86:
a6:8a:a1:f3:83:f7:77:3c:d4:bb:99:89:98:b6:83:c7:49:b8:
5f:15:d4:17:d8:ef:dd:9a:8c:fb:ca:e6:9a:4b:5a:5f:d5:4d:
02:52:65:52:e7:3a:c5:b6:4d:1a:f2:cb:1c:5a:d8:9e:4b:5f:
bb:bf:63:22:a6:89:5d:f0:d1:42:ad:5e:f1:5a:4e:90:75:c8:
3f:2f:85:3a:50:d2:48:5a:51:75:15:79:ef:fa:da:5d:33:1c:
13:0c:1b:12
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZKxI4WxDl6v8ApgqleJahNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMDIxMjIxMjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmQ1NWQyMjY1NjdjZWNhOGU2MzQzNDM5ZjA3NzUzYThiY2E2NmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XUFtUhDUpxTA/itjb1CPTmUMVZE
oBa4kPX+BL0hXUS0adv28Ts0QHOo1hgnQZ/3FQuN+mpMv+wdk9uxuMi3seeUlh+t
0U3NFtpTc2brZPKzgUIdfZE+LNpGPY2l+oyofpER8ChzQ533zaA0OXczx5+WH5jF
yheQ2Tx8MMuMOQxYwH1SRBAZU15cU4L/wxx7frihsMgg3m7TecZlRaQntx8Ba/0x
aITKkj9Xb/KAOdljeOLzOHqV3artG2A8sD+OL5x+Q+m+9f1jAjX7xtWrcFhK1/WC
hctFwJMnrd6f93KBXJXbgCoDgcFnuowUZi0yjZ3Oh5vdmmlpY/M7mIUSXQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFB/VXSJlZ87KjmNDQ58HdTqLymauMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSDlWZEltVm56c3FPWTBORG53ZDFPb3ZLWnE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQz9AwQB
V3hEAwQBXXtKAwQBufygMA0GCSqGSIb3DQEBCwUAA4IBAQBSM2DYGbYUSso6qMF0
GgqiqMf5oeANapuTNZQjXIaBLNi22v8NQJYKa5A0wimGjUuvXKqMAGK4u3cmq2zU
Syr5C21/TWK9oyvarFthPsunANojgsi/EuaslfXEA+tRtJkzwR+DyDyR5G2i+mxb
IQYOBVJIMUPyL8cVsIxwC+jKVKdlhf8KdADvyC/IEaUNH9DdoZkjRbTE0N+jRKC+
cbgN+4amiqHzg/d3PNS7mYmYtoPHSbhfFdQX2O/dmoz7yuaaS1pf1U0CUmVS5zrF
tk0a8sscWtieS1+7v2Mipold8NFCrV7xWk6Qdcg/L4U6UNJIWlF1FXnv+tpdMxwT
DBsS
-----END CERTIFICATE-----
Generated at Tue Oct 22 02:19:43 2024 by rpki-client on console-ams.rpki-client.org