Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RYt39ZB5dh3-VoZG6bOH9SyiLI0.roa
File: RYt39ZB5dh3-VoZG6bOH9SyiLI0.roa (raw, json)
Hash identifier: e1P9M5TWXt+E9X+JYIaLnc+h0fMNfk7XEf1g3IKVxDc=
Subject key identifier: 45:8B:77:F5:90:79:76:1D:FE:56:86:46:E9:B3:87:F5:2C:A2:2C:8D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192B4A493164B7E55FA67532258096CEA18
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RYt39ZB5dh3-VoZG6bOH9SyiLI0.roa
Signing time: Tue 22 Oct 2024 14:32:17 +0000
ROA not before: Tue 22 Oct 2024 14:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43548
IP address blocks: 85.217.164.0/22 maxlen: 32
85.217.176.0/21 maxlen: 32
87.120.99.0/24 maxlen: 24
87.120.246.0/24 maxlen: 32
87.121.108.0/23 maxlen: 23
91.92.168.0/22 maxlen: 22
93.123.65.0/24 maxlen: 24
94.156.4.0/23 maxlen: 23
94.156.80.0/21 maxlen: 21
94.156.97.0/24 maxlen: 24
2a00:1728:2d::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Oct 2024 09:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:a4:93:16:4b:7e:55:fa:67:53:22:58:09:6c:ea:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 22 14:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=458b77f59079761dfe568646e9b387f52ca22c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:3c:b7:40:9d:25:39:8d:48:ea:10:8d:4a:
cc:e7:e5:c4:f4:18:8d:89:be:1a:3b:a1:03:de:f1:
87:8e:84:7c:75:84:f5:8b:7e:a2:ea:f6:dd:59:8b:
56:f2:cd:29:3c:f9:f2:58:89:68:40:82:3a:31:c3:
a8:36:00:96:a2:10:a4:42:e4:ef:d9:4d:0f:c4:5e:
dd:a9:4f:75:cd:25:d2:72:5a:a9:bf:af:49:e0:82:
d6:43:9a:09:e2:f0:3c:b3:2a:9a:de:85:08:e9:44:
12:e1:49:61:bb:7b:50:4f:7b:e9:d7:47:ee:d4:ab:
ad:d4:72:6c:e2:4e:e8:1d:b0:31:c4:4c:12:da:53:
93:b2:03:bd:3a:d0:60:a5:65:c1:b5:df:1e:c3:04:
c3:6e:60:e6:dd:1f:ac:d0:1c:7f:6e:f3:5a:ec:65:
87:16:25:ec:3e:70:43:54:ea:c1:64:c6:f0:98:8b:
3f:63:85:73:2c:2a:ee:a4:3e:9c:a8:0d:45:17:ba:
40:9c:63:6b:91:e7:ca:58:6c:94:47:74:d5:7c:cd:
4e:ec:53:ff:af:c0:1a:4b:48:41:aa:3b:d9:a2:90:
84:62:d6:4e:f9:3e:56:65:82:72:87:2a:1d:53:24:
5b:31:38:0e:35:0d:f8:18:95:13:9d:e9:5c:9a:7b:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8B:77:F5:90:79:76:1D:FE:56:86:46:E9:B3:87:F5:2C:A2:2C:8D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RYt39ZB5dh3-VoZG6bOH9SyiLI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.164.0/22
85.217.176.0/21
87.120.99.0/24
87.120.246.0/24
87.121.108.0/23
91.92.168.0/22
93.123.65.0/24
94.156.4.0/23
94.156.80.0/21
94.156.97.0/24
IPv6:
2a00:1728:2d::/48
Signature Algorithm: sha256WithRSAEncryption
98:c8:d6:13:1f:ae:cc:47:b5:53:f5:1c:16:af:65:41:d3:0d:
ab:5a:cf:38:18:8f:e5:22:0a:2b:55:e4:d9:cc:39:ce:8b:54:
25:77:21:33:79:cd:8c:c0:55:11:14:54:31:de:b0:8a:6c:5b:
84:9f:5b:35:08:ee:29:25:d7:80:5e:40:1c:b4:39:5c:9c:24:
05:a2:ee:a9:6b:76:8c:c9:f0:a3:be:94:76:23:02:54:e0:2c:
79:fa:36:ea:aa:d8:ea:41:94:74:6f:6d:30:1c:b8:18:d3:b8:
0d:90:0e:1c:5c:c9:98:cb:dd:19:b6:e6:4f:16:34:6a:70:9c:
ed:79:ae:72:c6:8a:0e:6a:38:98:ca:f2:56:c8:f1:c5:fc:2b:
1a:38:57:02:1d:53:7d:83:5a:cf:eb:5f:90:8e:dc:50:45:3d:
bf:5e:bb:8c:bc:ac:18:72:b2:96:71:10:ec:07:ad:8d:4d:db:
6e:47:ea:06:3a:d0:d5:9b:dc:09:63:cc:f7:a2:30:cb:e5:2a:
42:c5:6c:2b:dd:cf:dd:3e:e2:ca:47:e6:34:fa:69:39:17:94:
a6:67:e9:33:e1:49:a3:e9:69:81:be:32:6f:ca:fb:15:13:dd:
80:c6:60:e8:7d:d6:14:98:1c:c8:9f:05:bc:44:ef:95:37:f6:
dd:7d:ab:a3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAZK0pJMWS35V+mdTIlgJbOoYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMDIyMTQzMjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NThiNzdmNTkwNzk3NjFkZmU1Njg2NDZlOWIzODdmNTJjYTIyYzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgg8t0CdJTmNSOoQjUrM5+XE9BiN
ib4aO6ED3vGHjoR8dYT1i36i6vbdWYtW8s0pPPnyWIloQII6McOoNgCWohCkQuTv
2U0PxF7dqU91zSXSclqpv69J4ILWQ5oJ4vA8syqa3oUI6UQS4Ulhu3tQT3vp10fu
1Kut1HJs4k7oHbAxxEwS2lOTsgO9OtBgpWXBtd8ewwTDbmDm3R+s0Bx/bvNa7GWH
FiXsPnBDVOrBZMbwmIs/Y4VzLCrupD6cqA1FF7pAnGNrkefKWGyUR3TVfM1O7FP/
r8AaS0hBqjvZopCEYtZO+T5WZYJyhyodUyRbMTgONQ34GJUTnelcmnvymQIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFEWLd/WQeXYd/laGRumzh/UsoiyNMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUll0MzlaQjVkaDMtVm9aRzZiT0g5U3lpTEkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBCBAIAATA8AwQCVdmkAwQD
VdmwAwQAV3hjAwQAV3j2AwQBV3lsAwQCW1yoAwQAXXtBAwQBXpwEAwQDXpxQAwQA
XpxhMA8EAgACMAkDBwAqABcoAC0wDQYJKoZIhvcNAQELBQADggEBAJjI1hMfrsxH
tVP1HBavZUHTDatazzgYj+UiCitV5NnMOc6LVCV3ITN5zYzAVREUVDHesIpsW4Sf
WzUI7ikl14BeQBy0OVycJAWi7qlrdozJ8KO+lHYjAlTgLHn6Nuqq2OpBlHRvbTAc
uBjTuA2QDhxcyZjL3Rm25k8WNGpwnO15rnLGig5qOJjK8lbI8cX8Kxo4VwIdU32D
Ws/rX5CO3FBFPb9eu4y8rBhyspZxEOwHrY1N225H6gY60NWb3AljzPeiMMvlKkLF
bCvdz90+4spH5jT6aTkXlKZn6TPhSaPpaYG+Mm/K+xUT3YDGYOh91hSYHMifBbxE
75U39t19q6M=
-----END CERTIFICATE-----
Generated at Thu Oct 24 12:49:05 2024 by rpki-client on console-ams.rpki-client.org