Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LM9QitfpSnR5jYJl714WtmZvHaQ.roa
File: LM9QitfpSnR5jYJl714WtmZvHaQ.roa (raw, json)
Hash identifier: hXA7ViT1VSKyGRaGnUWhuIIgMwLX0aoyzC/vCgUREpQ=
Subject key identifier: 2C:CF:50:8A:D7:E9:4A:74:79:8D:82:65:EF:5E:16:B6:66:6F:1D:A4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192442BBCDD1FDC36573D61D1F360EC7663
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LM9QitfpSnR5jYJl714WtmZvHaQ.roa
Signing time: Mon 30 Sep 2024 18:22:49 +0000
ROA not before: Mon 30 Sep 2024 18:22:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.66.228.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 05:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:44:2b:bc:dd:1f:dc:36:57:3d:61:d1:f3:60:ec:76:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 30 18:22:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ccf508ad7e94a74798d8265ef5e16b6666f1da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:ef:a7:45:b2:66:86:eb:0c:10:69:e2:68:
33:87:01:cf:67:8c:01:37:a0:28:f8:ca:86:bd:34:
bd:9a:b3:13:4c:eb:f3:ed:77:f8:a4:24:c4:57:e8:
e7:15:58:19:f8:b2:8b:88:64:a5:e5:dc:ae:b1:2d:
e1:a8:bc:ce:01:16:ac:c7:1f:ce:9a:a5:d3:d1:85:
58:31:94:64:4b:7b:81:b2:03:f2:af:86:c4:d1:60:
d0:78:6f:05:d9:f5:3f:57:07:c5:65:71:24:da:a0:
84:41:ce:37:03:6b:6c:cd:3a:ed:b5:08:a4:0b:83:
0a:5c:20:fc:ff:19:ab:d9:0c:f3:5f:49:bd:ad:31:
7a:29:a9:3b:74:d1:5c:4a:69:8f:64:56:57:3a:9e:
e7:1f:59:c7:da:3d:6b:2b:bc:71:53:cf:ad:31:21:
0b:36:c1:24:96:00:56:33:bf:38:4c:7b:f0:5d:4a:
42:7d:ef:98:e8:b3:52:6e:65:1a:d6:b1:ba:a4:a7:
a9:51:90:08:77:a8:f6:cd:aa:bb:38:ae:1c:55:f5:
2b:92:fb:a7:89:87:06:f5:8c:5c:0f:8e:54:f0:f0:
57:73:16:66:5f:03:02:c2:a5:bc:ef:d6:2c:f3:44:
14:cc:b6:b2:f1:f7:89:88:30:b9:06:41:29:8b:9b:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CF:50:8A:D7:E9:4A:74:79:8D:82:65:EF:5E:16:B6:66:6F:1D:A4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LM9QitfpSnR5jYJl714WtmZvHaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.139.106.0/24
45.151.89.0/24
45.151.91.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
141.98.1.0/24
147.78.103.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a1:a3:e5:bd:b5:37:7e:ae:60:47:d3:68:8a:9d:b7:c8:bc:
06:57:3a:b6:81:04:50:49:c8:50:73:d8:3d:f5:ec:d2:94:f7:
5c:d3:6d:13:08:6d:de:04:e6:c0:de:d1:3c:d4:1f:bf:38:a6:
fc:2a:0c:0a:6a:b8:a7:e7:91:fd:b5:ea:8a:ee:bc:da:5a:a6:
01:57:66:19:c2:62:7e:68:8a:9f:41:9f:31:c5:22:1c:30:d9:
9f:4b:34:de:d2:e7:62:32:59:2f:fa:47:ec:ce:0d:5b:1d:a3:
59:a5:88:f1:93:3e:62:75:8b:4b:7b:78:68:e1:18:b9:1f:8e:
89:11:dd:15:fe:7c:d2:a3:46:ae:46:11:2e:59:85:c7:1b:77:
23:84:65:3e:73:c9:64:76:d5:66:a3:01:da:b2:4e:53:a5:b9:
45:78:e6:0e:ac:63:ec:02:67:63:ab:9b:09:62:1d:6d:12:b3:
30:dc:b1:d1:34:96:84:43:fe:55:1c:c6:67:88:e6:be:51:b2:
1a:6e:4e:de:9f:ad:45:82:e3:86:55:9f:9e:eb:3e:de:24:f9:
10:6f:f5:a5:23:ae:f3:91:b2:c5:32:99:49:dc:8e:2c:5d:75:
3e:d4:82:9a:3c:40:f9:56:21:a4:f4:f0:b9:be:ce:27:bd:dd:
2c:11:01:f5
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAZJEK7zdH9w2Vz1h0fNg7HZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwOTMwMTgyMjQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2NmNTA4YWQ3ZTk0YTc0Nzk4ZDgyNjVlZjVlMTZiNjY2NmYxZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGXvp0WyZobrDBBp4mgzhwHPZ4wB
N6Ao+MqGvTS9mrMTTOvz7Xf4pCTEV+jnFVgZ+LKLiGSl5dyusS3hqLzOARasxx/O
mqXT0YVYMZRkS3uBsgPyr4bE0WDQeG8F2fU/VwfFZXEk2qCEQc43A2tszTrttQik
C4MKXCD8/xmr2QzzX0m9rTF6Kak7dNFcSmmPZFZXOp7nH1nH2j1rK7xxU8+tMSEL
NsEklgBWM784THvwXUpCfe+Y6LNSbmUa1rG6pKepUZAId6j2zaq7OK4cVfUrkvun
iYcG9YxcD45U8PBXcxZmXwMCwqW879Ys80QUzLay8feJiDC5BkEpi5sC9QIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFCzPUIrX6Up0eY2CZe9eFrZmbx2kMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTE05UWl0ZnBTblI1allKbDcxNFd0bVp2SGFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAC1C5AME
AC2LagMEAC2XWQMEAC2XWwMEAFPbYQMEAFQ2MAMEAFd4VwMEAFd4XQMEAFd5LQME
AVx3xAMEAl6aoAMEAF6cCwMEAI1iAQMEAJNOZwMEAqsWSAMEArnYVAMEArnaVAME
AMHeYDANBgkqhkiG9w0BAQsFAAOCAQEABaGj5b21N36uYEfTaIqdt8i8Blc6toEE
UEnIUHPYPfXs0pT3XNNtEwht3gTmwN7RPNQfvzim/CoMCmq4p+eR/bXqiu682lqm
AVdmGcJifmiKn0GfMcUiHDDZn0s03tLnYjJZL/pH7M4NWx2jWaWI8ZM+YnWLS3t4
aOEYuR+OiRHdFf580qNGrkYRLlmFxxt3I4RlPnPJZHbVZqMB2rJOU6W5RXjmDqxj
7AJnY6ubCWIdbRKzMNyx0TSWhEP+VRzGZ4jmvlGyGm5O3p+tRYLjhlWfnus+3iT5
EG/1pSOu85GyxTKZSdyOLF11PtSCmjxA+VYhpPTwub7OJ73dLBEB9Q==
-----END CERTIFICATE-----
Generated at Wed Oct 2 08:41:20 2024 by rpki-client on console-ams.rpki-client.org