Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/If0zJ_wMTb5Vwd7YQkKQ3EDgtaE.roa
File: If0zJ_wMTb5Vwd7YQkKQ3EDgtaE.roa (raw, json)
Hash identifier: 7hAw6/V5ft69rgARegcFbyHIjuFpk90e9gLQtpUufHA=
Subject key identifier: 21:FD:33:27:FC:0C:4D:BE:55:C1:DE:D8:42:42:90:DC:40:E0:B5:A1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D5AE78A322FEA75B21A8D4A893DB291E5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/If0zJ_wMTb5Vwd7YQkKQ3EDgtaE.roa
Signing time: Tue 30 Jan 2024 15:05:40 +0000
ROA not before: Tue 30 Jan 2024 15:05:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.66.230.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.172.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
95.214.24.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.173.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:e7:8a:32:2f:ea:75:b2:1a:8d:4a:89:3d:b2:91:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 30 15:05:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21fd3327fc0c4dbe55c1ded8424290dc40e0b5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:5c:70:02:ae:37:8a:3d:4c:75:cb:ae:d9:
03:b4:81:54:d5:20:d1:53:64:8e:ee:0c:56:73:57:
99:b6:8b:3d:a9:54:a8:ad:f1:42:50:83:5e:81:57:
76:1f:56:6a:09:e6:30:6b:f3:9b:35:f7:ff:7a:25:
58:20:a8:0c:9c:0e:f1:d3:62:f7:94:e5:16:a7:6f:
90:33:b6:f0:82:a9:a1:1d:d0:21:c5:70:1e:d8:1f:
0e:09:7b:86:d0:91:11:2b:de:38:27:9e:44:d3:7b:
80:1b:98:79:ab:df:ea:a9:40:11:6d:b9:5c:33:d5:
08:f8:8b:63:fd:20:4c:be:e9:bc:44:7e:2d:3a:ed:
a8:8f:3e:50:62:4d:bb:b3:85:79:26:4c:ee:90:dd:
3b:40:42:b6:bf:1b:73:9d:c0:a3:63:23:29:06:07:
90:e4:3b:70:08:97:99:2c:83:e6:01:46:cd:4f:c9:
e7:a5:71:f9:41:e2:08:df:d0:fe:4c:eb:d1:e6:1b:
3f:45:ec:c7:33:fb:02:1e:60:63:91:c1:b6:bc:c0:
99:bf:39:1b:87:b4:d5:5e:2d:fe:44:9a:e6:62:55:
e9:93:a8:44:0c:9d:ae:5d:4e:2f:d1:43:40:c8:a7:
17:6a:5a:c9:2e:52:b4:8b:65:7a:b7:c1:83:cd:da:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FD:33:27:FC:0C:4D:BE:55:C1:DE:D8:42:42:90:DC:40:E0:B5:A1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/If0zJ_wMTb5Vwd7YQkKQ3EDgtaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.230.0/24
45.84.89.0/24
45.88.90.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.154.172.0/24
94.156.239.0/24
95.214.24.0/24
147.78.101.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.252.176.0/24
194.48.251.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
93:2e:77:85:d0:2d:24:f8:52:cf:53:3b:d2:7f:79:42:06:ad:
76:0f:9b:7f:a5:7a:01:78:38:0b:e3:dc:c5:4c:65:17:a8:66:
4c:19:1d:3f:e4:df:2b:bd:85:d0:6b:7e:71:e1:82:aa:13:26:
e1:2f:f2:b8:58:8b:c6:74:a7:e3:37:8e:65:50:95:0d:27:a2:
98:a0:12:30:1e:f0:4c:1a:5e:fb:04:56:c5:46:78:03:b8:c5:
3b:36:7a:a0:4b:e0:72:9e:11:e5:05:50:20:fc:97:b7:ba:32:
4f:03:fb:96:e9:9a:cb:e8:f2:88:63:dd:e7:5b:5e:30:d8:e3:
2c:10:58:a2:00:b2:e6:69:28:31:35:0e:3f:95:26:71:9f:00:
27:aa:2c:21:11:f9:3e:a8:21:46:5d:dd:05:c9:11:09:e7:b0:
ee:da:de:c2:b8:14:46:e9:2c:fc:f4:e0:e7:4e:7d:9d:de:2d:
66:8b:de:0f:0e:c1:58:ce:e2:3e:14:4d:1f:36:4b:6d:c1:09:
24:ed:6a:5c:0a:ec:40:f4:da:98:7f:7a:ec:5f:5d:18:e7:48:
4c:1c:6e:61:8b:b3:55:5b:d9:f3:3f:fb:d7:ac:69:24:8d:bc:
6a:0e:7a:6f:8f:63:87:c7:f0:bd:45:31:b8:d8:1a:ba:82:44:
b6:22:a4:a3
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISAY1a54oyL+p1shqNSok9spHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTMwMTUwNTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWZkMzMyN2ZjMGM0ZGJlNTVjMWRlZDg0MjQyOTBkYzQwZTBiNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYdccAKuN4o9THXLrtkDtIFU1SDR
U2SO7gxWc1eZtos9qVSorfFCUINegVd2H1ZqCeYwa/ObNff/eiVYIKgMnA7x02L3
lOUWp2+QM7bwgqmhHdAhxXAe2B8OCXuG0JERK944J55E03uAG5h5q9/qqUARbblc
M9UI+Itj/SBMvum8RH4tOu2ojz5QYk27s4V5JkzukN07QEK2vxtzncCjYyMpBgeQ
5DtwCJeZLIPmAUbNT8nnpXH5QeII39D+TOvR5hs/RezHM/sCHmBjkcG2vMCZvzkb
h7TVXi3+RJrmYlXpk6hEDJ2uXU4v0UNAyKcXalrJLlK0i2V6t8GDzdrvPwIDAQAB
o4ICnDCCApgwHQYDVR0OBBYEFCH9Myf8DE2+VcHe2EJCkNxA4LWhMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSWYwekpfd01UYjVWd2Q3WVFrS1EzRURndGFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjCBmwQCAAEwgZQDBAAt
QuYDBAAtVFkDBAAtWFoDBAAtl1kDBABXeFcDBABXeS0DBABXed0DBAFcd8QwDAME
AF6aoQMEAl6aoAMEAF6arAMEAF6c7wMEAF/WGDAMAwQAk05lAwQAk05mAwQCqxZI
AwQAstfgAwQAstfsAwQCudhUAwQCudpUAwQAueKtAwQAufywAwQAwjD7AwQAwjfg
MA0GCSqGSIb3DQEBCwUAA4IBAQCTLneF0C0k+FLPUzvSf3lCBq12D5t/pXoBeDgL
49zFTGUXqGZMGR0/5N8rvYXQa35x4YKqEybhL/K4WIvGdKfjN45lUJUNJ6KYoBIw
HvBMGl77BFbFRngDuMU7NnqgS+BynhHlBVAg/Je3ujJPA/uW6ZrL6PKIY93nW14w
2OMsEFiiALLmaSgxNQ4/lSZxnwAnqiwhEfk+qCFGXd0FyREJ57Du2t7CuBRG6Sz8
9ODnTn2d3i1mi94PDsFYzuI+FE0fNkttwQkk7WpcCuxA9NqYf3rsX10Y50hMHG5h
i7NVW9nzP/vXrGkkjbxqDnpvj2OHx/C9RTG42Bq6gkS2IqSj
-----END CERTIFICATE-----
Generated at Tue Jan 30 21:19:52 2024 by rpki-client on console-ams.rpki-client.org