Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MZHkEXhpJ6c-b1ntaIVCrqnBiy4.roa
File: MZHkEXhpJ6c-b1ntaIVCrqnBiy4.roa (raw, json)
Hash identifier: eSEdobIdEbbPFIRLzcawr894n3K6WBepPUQW+Us5fZw=
Subject key identifier: 31:91:E4:11:78:69:27:A7:3E:6F:59:ED:68:85:42:AE:A9:C1:8B:2E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D0C582A8EDC40154A805CA68ED7DD311A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MZHkEXhpJ6c-b1ntaIVCrqnBiy4.roa
Signing time: Mon 15 Jan 2024 08:58:41 +0000
ROA not before: Mon 15 Jan 2024 08:58:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 212.87.207.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
193.149.31.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 15:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:58:2a:8e:dc:40:15:4a:80:5c:a6:8e:d7:dd:31:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 15 08:58:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3191e411786927a73e6f59ed688542aea9c18b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:c5:ee:cb:5f:82:0c:b3:0b:4e:e5:36:aa:
31:b4:69:b4:77:a9:10:1c:04:7a:53:5c:e7:31:5b:
a6:ce:0e:d6:c4:a4:ce:61:d8:1d:1d:7e:b9:22:83:
2b:f9:29:91:1a:03:cd:f6:48:65:60:74:57:d6:d6:
30:cb:de:16:ca:99:db:04:96:68:ee:82:f7:b1:32:
f6:1e:8a:c6:8f:08:29:7e:c7:ed:80:7a:ba:c2:15:
d4:37:76:6b:0c:57:86:e9:23:f5:f2:57:0e:58:8b:
c3:b6:61:f1:37:44:0d:80:68:65:b6:37:ce:30:0d:
38:9e:e7:b5:5d:fb:a8:02:99:6d:73:aa:0a:5b:28:
2f:23:48:38:69:08:e9:07:3c:a9:14:9d:c9:90:e6:
92:13:ff:6d:3d:51:78:9c:b1:25:53:cc:e1:c1:30:
5e:48:85:36:3a:6b:8f:f1:62:ef:28:dc:44:e0:43:
9c:1c:93:5e:8f:c8:dd:8f:d3:47:d7:b3:3e:05:f7:
77:2a:3c:f2:d9:06:f1:52:5b:60:e7:94:46:6b:82:
70:2a:63:56:5c:a7:84:31:97:67:8d:98:93:51:ea:
8f:43:b6:7e:a2:4c:5f:20:34:ef:81:f0:12:8f:70:
a0:9d:5f:8a:df:3a:0d:51:a7:f9:f4:f6:97:52:44:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:E4:11:78:69:27:A7:3E:6F:59:ED:68:85:42:AE:A9:C1:8B:2E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MZHkEXhpJ6c-b1ntaIVCrqnBiy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
45.66.228.0/24
45.151.90.0/24
79.110.50.0/24
82.115.211.0/24
87.121.105.0/24
94.156.176.0/24
178.215.238.0/24
193.37.47.0/24
193.149.28.0/22
194.180.36.0/24
212.87.207.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b3:1b:3d:85:1d:17:22:a9:72:b6:6d:62:18:69:61:ed:56:
53:a6:cf:77:b6:41:ae:ce:9f:a4:04:7d:db:fd:34:c8:ee:90:
49:25:e1:8b:37:9c:f9:78:de:ad:de:0a:91:ce:d7:0e:4f:15:
4d:16:60:68:98:c0:cd:b7:c2:5a:a0:57:02:ad:fb:82:d3:0d:
11:57:1f:fb:1b:85:86:2b:98:e1:02:b6:5d:8d:ca:45:df:10:
e6:2d:5e:27:83:4c:d6:d1:41:87:fa:fc:67:b7:c2:28:ff:90:
08:bc:f3:a8:7e:64:1a:dc:95:cc:b3:37:62:20:ce:c5:ea:5a:
b9:a3:ce:e7:a2:69:9f:a9:3e:5d:2b:51:05:bc:ec:bd:d6:5d:
df:ae:9d:80:f2:fb:e5:96:93:c6:94:04:32:e4:ef:d5:f6:19:
55:1e:2e:6a:c1:b6:f3:d5:35:97:4c:aa:6a:3c:f1:5c:2f:10:
94:de:44:2e:dc:62:4d:b5:60:c5:4e:52:27:f0:f9:72:bf:14:
8e:61:1f:c3:8d:98:65:73:7f:10:d1:fc:86:de:74:a6:f7:76:
20:06:cc:e0:33:bf:c4:ac:7e:15:56:fc:03:e4:6e:d6:e6:4d:
7d:f3:38:cc:eb:70:dc:10:2e:3f:60:c0:f1:01:6d:8a:11:df:
e7:38:7f:6d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAY0MWCqO3EAVSoBcpo7X3TEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTE1MDg1ODQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTkxZTQxMTc4NjkyN2E3M2U2ZjU5ZWQ2ODg1NDJhZWE5YzE4YjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMnF7stfggyzC07lNqoxtGm0d6kQ
HAR6U1znMVumzg7WxKTOYdgdHX65IoMr+SmRGgPN9khlYHRX1tYwy94WypnbBJZo
7oL3sTL2HorGjwgpfsftgHq6whXUN3ZrDFeG6SP18lcOWIvDtmHxN0QNgGhltjfO
MA04nue1XfuoApltc6oKWygvI0g4aQjpBzypFJ3JkOaSE/9tPVF4nLElU8zhwTBe
SIU2OmuP8WLvKNxE4EOcHJNej8jdj9NH17M+Bfd3Kjzy2QbxUltg55RGa4JwKmNW
XKeEMZdnjZiTUeqPQ7Z+okxfIDTvgfASj3CgnV+K3zoNUaf59PaXUkSotwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFDGR5BF4aSenPm9Z7WiFQq6pwYsuMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTVpIa0VYaHBKNmMtYjFudGFJVkNycW5CaXk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQALQhdAwQA
LULkAwQALZdaAwQAT24yAwQAUnPTAwQAV3lpAwQAXpywAwQAstfuAwQAwSUvAwQC
wZUcAwQAwrQkAwQA1FfPAwQA1HMpMA0GCSqGSIb3DQEBCwUAA4IBAQBJsxs9hR0X
Iqlytm1iGGlh7VZTps93tkGuzp+kBH3b/TTI7pBJJeGLN5z5eN6t3gqRztcOTxVN
FmBomMDNt8JaoFcCrfuC0w0RVx/7G4WGK5jhArZdjcpF3xDmLV4ng0zW0UGH+vxn
t8Io/5AIvPOofmQa3JXMszdiIM7F6lq5o87nommfqT5dK1EFvOy91l3frp2A8vvl
lpPGlAQy5O/V9hlVHi5qwbbz1TWXTKpqPPFcLxCU3kQu3GJNtWDFTlIn8PlyvxSO
YR/DjZhlc38Q0fyG3nSm93YgBszgM7/ErH4VVvwD5G7W5k198zjM63DcEC4/YMDx
AW2KEd/nOH9t
-----END CERTIFICATE-----
Generated at Mon Jan 15 20:13:14 2024 by rpki-client on console-ams.rpki-client.org