Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IqM9zQg-_mAUKyeyCYGtztMZa04.roa
File: IqM9zQg-_mAUKyeyCYGtztMZa04.roa (raw, json)
Hash identifier: oeX7Nbtv9ok2ZfwEmkQkm176QJKxTJX9k6SuV6OV31Y=
Subject key identifier: 22:A3:3D:CD:08:3E:FE:60:14:2B:27:B2:09:81:AD:CE:D3:19:6B:4E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D593768FB464BCCB028865F4C0F9DFFC9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IqM9zQg-_mAUKyeyCYGtztMZa04.roa
Signing time: Tue 30 Jan 2024 07:13:39 +0000
ROA not before: Tue 30 Jan 2024 07:13:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.84.89.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.172.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
95.214.24.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.225.75.0/24 maxlen: 24
185.226.173.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 09:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:37:68:fb:46:4b:cc:b0:28:86:5f:4c:0f:9d:ff:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 30 07:13:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22a33dcd083efe60142b27b20981adced3196b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:97:e6:06:39:25:86:73:44:40:fc:0f:26:76:
e0:9f:ca:a5:8c:68:9e:f5:cd:18:a7:63:4c:a4:24:
20:58:6c:df:f7:2b:36:2c:31:c5:af:3b:c0:52:1f:
f5:d1:66:13:e8:63:22:f2:c2:15:b6:f1:1b:22:9e:
08:df:91:1c:07:e8:32:67:aa:0e:5c:23:88:d0:52:
98:dc:10:29:59:f5:9c:55:75:fb:89:27:e5:91:4d:
01:21:dc:53:f9:1e:7d:32:2f:69:58:e9:fc:9f:5e:
a2:95:ce:f0:f0:9f:4e:d1:0a:ca:96:c4:b4:93:c0:
37:f0:82:96:be:23:97:b4:2a:f8:ba:dd:80:7a:56:
6a:35:72:bf:36:16:f9:a9:18:ae:93:59:4e:a4:3b:
9e:6a:90:ba:d4:81:28:94:06:0c:1e:85:e4:9b:ac:
8a:20:de:fe:93:aa:26:54:e0:ab:74:68:f5:bf:40:
1d:3c:63:b5:cf:4e:90:95:cc:81:d6:62:37:fb:26:
1f:88:ef:16:48:be:64:a9:15:17:4a:71:4a:ad:8e:
a9:98:8f:54:d8:bb:03:5e:01:97:61:7d:f8:2f:99:
6b:7b:eb:e1:8d:38:58:82:e2:2b:53:89:e7:cb:47:
4c:a0:ec:f1:b0:67:93:9c:44:e6:6e:6e:d9:cf:a3:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A3:3D:CD:08:3E:FE:60:14:2B:27:B2:09:81:AD:CE:D3:19:6B:4E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IqM9zQg-_mAUKyeyCYGtztMZa04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.88.90.0/24
45.129.86.0/24
45.151.89.0/24
81.161.230.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.154.172.0/24
94.156.8.0/24
94.156.239.0/24
95.214.24.0/24
147.78.101.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.225.75.0/24
185.226.173.0/24
185.252.176.0/24
194.48.251.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d3:84:db:98:53:1a:91:8a:44:10:ee:0a:94:12:d3:aa:0b:
95:2a:fb:0f:03:db:f5:f1:7a:ad:6b:c5:8d:22:2e:28:12:d1:
ad:3e:74:91:ca:53:af:1f:67:d6:cb:a5:87:b0:ca:53:1b:e9:
88:cc:13:54:a2:f4:fd:d9:89:3c:6f:30:4b:ed:c7:c9:30:ed:
d4:b2:6f:3e:6f:8b:6f:e5:67:60:ec:5c:5c:ef:d6:00:3d:c8:
01:d1:09:8c:78:a3:c9:93:2b:0c:9d:82:f0:b9:f0:b1:27:fb:
9e:05:25:b4:08:00:62:a3:6b:69:b7:c3:f2:ef:ed:a4:7e:a0:
48:64:04:f9:2a:c6:b5:71:06:5d:8b:77:bb:e6:61:65:90:c6:
23:91:76:6c:00:23:90:0e:da:3e:e4:7d:33:00:8a:ce:f1:f4:
25:2b:9b:dd:8f:4e:96:44:1d:ff:e6:3c:52:50:9e:f8:c4:fb:
97:15:44:31:cd:b7:6d:e9:43:d0:13:52:7b:d4:a4:a5:2f:b1:
9b:6c:18:07:7c:2a:11:78:f7:2d:af:8b:1a:e2:41:8a:82:fb:
8c:ab:79:7f:9f:7e:07:6d:8f:7c:a0:20:1d:67:97:8d:aa:e5:
e2:a1:4e:65:49:2d:0c:1b:f7:22:f4:c2:f0:c9:03:41:8c:f9:
22:05:28:f8
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAY1ZN2j7RkvMsCiGX0wPnf/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTMwMDcxMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmEzM2RjZDA4M2VmZTYwMTQyYjI3YjIwOTgxYWRjZWQzMTk2YjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJfmBjklhnNEQPwPJnbgn8qljGie
9c0Yp2NMpCQgWGzf9ys2LDHFrzvAUh/10WYT6GMi8sIVtvEbIp4I35EcB+gyZ6oO
XCOI0FKY3BApWfWcVXX7iSflkU0BIdxT+R59Mi9pWOn8n16ilc7w8J9O0QrKlsS0
k8A38IKWviOXtCr4ut2AelZqNXK/Nhb5qRiuk1lOpDueapC61IEolAYMHoXkm6yK
IN7+k6omVOCrdGj1v0AdPGO1z06QlcyB1mI3+yYfiO8WSL5kqRUXSnFKrY6pmI9U
2LsDXgGXYX34L5lre+vhjThYguIrU4nny0dMoOzxsGeTnETmbm7Zz6OBrQIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFCKjPc0IPv5gFCsnsgmBrc7TGWtOMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSXFNOXpRZy1fbUFVS3lleUNZR3R6dE1aYTA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBrQQCAAEwgaYDBAAt
VFkDBAAtWFoDBAAtgVYDBAAtl1kDBABRoeYDBABXeFcDBABXeS0DBABXed0DBAFc
d8QwDAMEAF6aoQMEAl6aoAMEAF6arAMEAF6cCAMEAF6c7wMEAF/WGDAMAwQAk05l
AwQAk05mAwQCqxZIAwQAstfgAwQAstfsAwQCudhUAwQCudpUAwQAueFLAwQAueKt
AwQAufywAwQAwjD7AwQAwjfgMA0GCSqGSIb3DQEBCwUAA4IBAQA804TbmFMakYpE
EO4KlBLTqguVKvsPA9v18Xqta8WNIi4oEtGtPnSRylOvH2fWy6WHsMpTG+mIzBNU
ovT92Yk8bzBL7cfJMO3Usm8+b4tv5Wdg7Fxc79YAPcgB0QmMeKPJkysMnYLwufCx
J/ueBSW0CABio2tpt8Py7+2kfqBIZAT5Ksa1cQZdi3e75mFlkMYjkXZsACOQDto+
5H0zAIrO8fQlK5vdj06WRB3/5jxSUJ74xPuXFUQxzbdt6UPQE1J71KSlL7GbbBgH
fCoRePctr4sa4kGKgvuMq3l/n34HbY98oCAdZ5eNquXioU5lSS0MG/ci9MLwyQNB
jPkiBSj4
-----END CERTIFICATE-----
Generated at Tue Jan 30 14:12:49 2024 by rpki-client on console-ams.rpki-client.org