Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JCcB44Vk_CTvgUwlhWun9Bt1mMo.roa
File: JCcB44Vk_CTvgUwlhWun9Bt1mMo.roa (raw, json)
Hash identifier: 6+GO3Y5BTozy0gJgdTTiSCdd16ZnRlfGhpJlSGkEkLM=
Subject key identifier: 24:27:01:E3:85:64:FC:24:EF:81:4C:25:85:6B:A7:F4:1B:75:98:CA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FDDC3CF8F2218D388B24A823A1689216F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JCcB44Vk_CTvgUwlhWun9Bt1mMo.roa
Signing time: Mon 03 Jun 2024 11:02:28 +0000
ROA not before: Mon 03 Jun 2024 11:02:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.253.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 05:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dd:c3:cf:8f:22:18:d3:88:b2:4a:82:3a:16:89:21:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 3 11:02:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=242701e38564fc24ef814c25856ba7f41b7598ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:64:7d:91:fc:c2:25:04:9d:fb:1e:aa:bf:
50:d8:d7:90:47:f7:2e:ca:7c:7f:6f:58:b3:6e:04:
85:b8:55:a0:8e:b7:b9:88:0e:31:7f:8c:7b:61:8d:
22:67:6d:d8:1a:23:6d:e4:ac:77:5c:71:bf:e7:3a:
41:4a:79:e4:89:c8:c5:d5:9f:fb:b4:f8:4a:f5:0b:
4a:24:71:d7:1d:e9:5f:4b:e9:82:af:8c:eb:8b:f6:
b6:f1:06:ee:77:bc:d5:40:a4:f5:83:2c:22:de:be:
99:8a:c5:70:fc:9e:0b:b3:a4:d6:ac:17:6f:9b:07:
a9:54:95:57:83:4a:13:e7:36:87:df:8b:e2:43:5b:
28:2c:21:c3:8d:0d:9c:b9:40:4a:e1:f9:80:16:47:
91:73:e3:30:cb:e8:96:77:28:90:dc:ea:dc:42:84:
98:d6:0b:79:48:89:46:d4:db:77:7b:d8:74:e9:1c:
de:08:63:df:58:c1:e3:4d:dc:bb:8b:c6:73:fb:97:
26:a7:4a:65:25:67:76:95:5e:4e:91:ae:70:59:8b:
49:45:92:61:1e:8c:4a:e5:02:07:a1:07:28:71:80:
ed:15:b1:df:92:4c:7f:3d:81:7c:ee:2c:8c:89:3a:
f6:6b:ab:d6:21:99:95:91:ab:33:bc:b5:41:8b:09:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:01:E3:85:64:FC:24:EF:81:4C:25:85:6B:A7:F4:1B:75:98:CA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JCcB44Vk_CTvgUwlhWun9Bt1mMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.88.64.0/24
79.110.51.0/24
87.120.166.0/24
94.154.162.0/24
109.206.239.0/24
178.215.227.0/24
185.222.161.0-185.222.162.255
185.246.223.0/24
193.37.40.0/24
193.37.42.0/24
193.222.97.0/24
194.55.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:03:98:37:3a:1d:56:36:52:36:1d:96:32:82:24:1d:35:96:
8b:43:61:19:9f:b6:a8:b9:de:03:63:7b:d7:4b:c5:f9:68:10:
55:c8:ef:4c:19:f3:90:2d:2d:f5:73:26:38:eb:7f:ea:81:e8:
a7:1b:8e:ee:e4:02:d9:5f:01:ff:e4:54:7d:99:44:5f:c5:0e:
54:1d:f0:23:b1:cf:89:46:fd:12:6a:c3:12:63:7a:03:b8:9c:
7e:84:aa:da:a7:b3:46:74:9f:4f:bd:09:b8:eb:a6:45:06:78:
28:f3:cb:cb:69:1d:d4:3e:25:0f:5e:df:0c:5f:e5:59:e6:57:
0e:53:c4:46:b7:d3:65:7a:ee:5f:da:95:6a:72:2f:c9:87:de:
67:2a:8f:bb:98:ea:a7:70:f1:b2:f8:12:a9:4e:66:77:90:a9:
a6:23:a4:3a:b5:7c:02:56:f5:8d:f7:f2:2d:4c:64:49:66:3f:
12:6a:06:2f:68:c2:82:40:2e:4e:de:cb:d5:94:40:fe:31:23:
c3:64:dd:26:f5:61:33:00:14:f6:1a:d4:39:b9:1f:1f:4e:86:
69:08:88:10:ea:db:25:6a:6c:be:b6:37:e2:c5:09:da:1a:f0:
9e:2d:e2:5d:14:60:9d:d5:cc:76:58:fe:70:b0:e8:25:b6:40:
2b:65:61:fb
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAY/dw8+PIhjTiLJKgjoWiSFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNjAzMTEwMjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDI3MDFlMzg1NjRmYzI0ZWY4MTRjMjU4NTZiYTdmNDFiNzU5OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iVkfZH8wiUEnfseqr9Q2NeQR/cu
ynx/b1izbgSFuFWgjre5iA4xf4x7YY0iZ23YGiNt5Kx3XHG/5zpBSnnkicjF1Z/7
tPhK9QtKJHHXHelfS+mCr4zri/a28Qbud7zVQKT1gywi3r6ZisVw/J4Ls6TWrBdv
mwepVJVXg0oT5zaH34viQ1soLCHDjQ2cuUBK4fmAFkeRc+Mwy+iWdyiQ3OrcQoSY
1gt5SIlG1Nt3e9h06RzeCGPfWMHjTdy7i8Zz+5cmp0plJWd2lV5Oka5wWYtJRZJh
HoxK5QIHoQcocYDtFbHfkkx/PYF87iyMiTr2a6vWIZmVkaszvLVBiwkLYQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFCQnAeOFZPwk74FMJYVrp/QbdZjKMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSkNjQjQ0VmtfQ1R2Z1V3bGhXdW45QnQxbU1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAAjv9AwQA
LVhAAwQAT24zAwQAV3imAwQAXpqiAwQAbc7vAwQAstfjMAwDBAC53qEDBAC53qID
BAC59t8DBADBJSgDBADBJSoDBADB3mEDBADCN+EwDQYJKoZIhvcNAQELBQADggEB
AC4DmDc6HVY2UjYdljKCJB01lotDYRmftqi53gNje9dLxfloEFXI70wZ85AtLfVz
Jjjrf+qB6Kcbju7kAtlfAf/kVH2ZRF/FDlQd8COxz4lG/RJqwxJjegO4nH6Eqtqn
s0Z0n0+9CbjrpkUGeCjzy8tpHdQ+JQ9e3wxf5VnmVw5TxEa302V67l/alWpyL8mH
3mcqj7uY6qdw8bL4EqlOZneQqaYjpDq1fAJW9Y338i1MZElmPxJqBi9owoJALk7e
y9WUQP4xI8Nk3Sb1YTMAFPYa1Dm5Hx9OhmkIiBDq2yVqbL62N+LFCdoa8J4t4l0U
YJ3VzHZY/nCw6CW2QCtlYfs=
-----END CERTIFICATE-----
Generated at Wed Jun 12 05:50:46 2024 by rpki-client on console-fra.rpki-client.org