Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Pkoz_jDzSzZAjwlNauhBWW381H0.roa
File: Pkoz_jDzSzZAjwlNauhBWW381H0.roa (raw, json)
Hash identifier: GOJ85gK58IrvazmMR2X0WNjF5W5Ul/Y7+ZTWtjjfBGU=
Subject key identifier: 3E:4A:33:FE:30:F3:4B:36:40:8F:09:4D:6A:E8:41:59:6D:FC:D4:7D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCE983383EF3C2FEA67C8882DBC47E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Pkoz_jDzSzZAjwlNauhBWW381H0.roa
Signing time: Tue 02 Jan 2024 06:29:30 +0000
ROA not before: Tue 02 Jan 2024 06:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 94.156.11.0/24 maxlen: 24
37.221.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 16:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e9:83:38:3e:f3:c2:fe:a6:7c:88:82:db:c4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e4a33fe30f34b36408f094d6ae841596dfcd47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:68:96:f9:3d:da:c2:dd:5b:f8:8b:ba:23:
b3:51:8a:54:d3:91:34:51:3f:7e:98:95:45:36:0d:
ec:67:e5:29:f4:5c:6b:58:c0:9b:9f:e7:ae:c9:b0:
13:00:a0:f7:c4:db:8d:2d:cd:77:47:c2:86:e6:f3:
a4:14:2d:c4:0e:9b:24:e4:c8:db:c5:9b:74:f6:82:
27:be:ff:42:0f:2a:fd:f0:b4:a1:fb:a3:b8:dd:9a:
54:a4:f0:1c:70:16:19:7d:db:38:ea:89:de:3a:be:
60:64:9d:a9:85:71:6b:02:5a:e6:e2:ec:c7:ae:c8:
cb:f3:45:a7:77:39:8f:3d:6c:0d:0b:2e:e8:33:6f:
49:6c:b2:9c:d3:5d:2d:c4:0b:47:97:b3:70:f9:40:
00:d9:d4:6d:be:68:6b:79:f2:f9:31:9b:32:1e:b7:
c4:49:f8:13:e7:6b:b6:1a:8a:28:3a:a0:df:e0:89:
88:4c:69:4b:7f:9e:6b:21:d6:07:95:14:8e:9f:3d:
92:b7:2e:0f:65:87:47:40:fd:72:3f:91:5a:d7:00:
51:77:8c:73:32:02:e9:8b:78:0b:fc:dd:89:ca:e6:
d0:e6:b6:22:ea:1d:0c:fa:6b:8c:60:2b:58:dc:ac:
37:a2:26:1d:e8:64:0b:3c:94:8f:34:cb:fe:19:55:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4A:33:FE:30:F3:4B:36:40:8F:09:4D:6A:E8:41:59:6D:FC:D4:7D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Pkoz_jDzSzZAjwlNauhBWW381H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
94.156.11.0/24
Signature Algorithm: sha256WithRSAEncryption
76:66:c7:5c:a8:03:56:8a:a4:15:91:86:b6:12:a4:70:c9:0d:
ad:41:53:c6:8b:e8:45:68:cd:1b:b6:d7:9d:5d:33:f8:bd:fa:
d0:b4:66:6a:29:a4:ae:e9:5a:83:98:0d:9f:32:8b:6d:fe:50:
de:fe:b7:40:4b:2d:2a:ff:d8:30:0d:54:a3:ba:db:2b:8b:c3:
79:d9:75:9b:91:32:94:fb:5d:a0:c6:c9:f3:0a:0e:c9:55:7d:
d3:82:a1:ba:07:6a:88:73:cd:7b:9b:51:f1:cf:5f:21:a8:b6:
f8:0b:9c:88:72:f3:49:33:f3:83:6c:ce:75:1e:94:3e:0c:a3:
b9:3b:36:e4:f8:36:1d:d6:ce:89:06:65:a1:24:8d:1d:5d:56:
05:25:c4:0d:4c:8d:d9:40:03:1f:d5:3a:f4:3a:9d:84:79:74:
53:e0:59:3f:85:60:67:23:f6:38:8c:4f:76:ef:ce:a2:ec:d9:
fa:72:53:b2:41:9f:f9:da:10:4a:81:75:46:f2:2d:b2:10:ca:
98:1b:c9:3d:31:4d:91:02:94:3b:64:c7:ee:98:b9:4e:35:78:
46:66:b3:c6:90:af:4f:4c:b4:21:86:e9:ae:cf:e8:81:97:07:
32:c3:8b:88:1b:3d:35:b3:d3:e6:cf:83:a8:c7:b0:ba:97:66:
f1:e1:78:31
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzI3OmDOD7zwv6mfIiC28R+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTRhMzNmZTMwZjM0YjM2NDA4ZjA5NGQ2YWU4NDE1OTZkZmNkNDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNVolvk92sLdW/iLuiOzUYpU05E0
UT9+mJVFNg3sZ+Up9FxrWMCbn+euybATAKD3xNuNLc13R8KG5vOkFC3EDpsk5Mjb
xZt09oInvv9CDyr98LSh+6O43ZpUpPAccBYZfds46oneOr5gZJ2phXFrAlrm4uzH
rsjL80WndzmPPWwNCy7oM29JbLKc010txAtHl7Nw+UAA2dRtvmhrefL5MZsyHrfE
SfgT52u2GoooOqDf4ImITGlLf55rIdYHlRSOnz2Sty4PZYdHQP1yP5Fa1wBRd4xz
MgLpi3gL/N2JyubQ5rYi6h0M+muMYCtY3Kw3oiYd6GQLPJSPNMv+GVUHzQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD5KM/4w80s2QI8JTWroQVlt/NR9MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUGtvel9qRHpTelpBandsTmF1aEJXVzM4MUgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJd14AwQA
XpwLMA0GCSqGSIb3DQEBCwUAA4IBAQB2ZsdcqANWiqQVkYa2EqRwyQ2tQVPGi+hF
aM0bttedXTP4vfrQtGZqKaSu6VqDmA2fMott/lDe/rdASy0q/9gwDVSjutsri8N5
2XWbkTKU+12gxsnzCg7JVX3TgqG6B2qIc817m1Hxz18hqLb4C5yIcvNJM/ODbM51
HpQ+DKO5Ozbk+DYd1s6JBmWhJI0dXVYFJcQNTI3ZQAMf1Tr0Op2EeXRT4Fk/hWBn
I/Y4jE92786i7Nn6clOyQZ/52hBKgXVG8i2yEMqYG8k9MU2RApQ7ZMfumLlONXhG
ZrPGkK9PTLQhhumuz+iBlwcyw4uIGz01s9Pmz4Oox7C6l2bx4Xgx
-----END CERTIFICATE-----
Generated at Wed Feb 21 21:59:55 2024 by rpki-client on console-ams.rpki-client.org