Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YmdOz80VQYUCdMQtGzrnQXvp3M8.roa
File: YmdOz80VQYUCdMQtGzrnQXvp3M8.roa (raw, json)
Hash identifier: kOmvPBxMD7Gks/L2si99HA4S9vzrv7NZEdY8W0WcNeo=
Subject key identifier: 62:67:4E:CF:CD:15:41:85:02:74:C4:2D:1B:3A:E7:41:7B:E9:DC:CF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E73672DD51BD98C99BAE4C8B985687189
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YmdOz80VQYUCdMQtGzrnQXvp3M8.roa
Signing time: Mon 25 Mar 2024 02:18:45 +0000
ROA not before: Mon 25 Mar 2024 02:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.94.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 23
93.123.75.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
185.252.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 11:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:73:67:2d:d5:1b:d9:8c:99:ba:e4:c8:b9:85:68:71:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 25 02:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62674ecfcd1541850274c42d1b3ae7417be9dccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:b3:33:e2:7b:9b:8a:99:e6:70:42:46:b3:
e0:ab:0c:2b:ff:4d:a3:0e:39:4d:f3:73:89:ed:8d:
72:fd:02:d0:69:91:c2:2c:d7:ae:e7:58:6c:cc:44:
af:81:65:7a:90:a3:56:37:6e:f9:05:6c:56:0a:f5:
59:97:e7:9d:2e:00:e1:f1:ac:c4:9e:59:a4:88:66:
18:fd:7b:77:70:4d:f2:97:5a:40:44:49:66:ad:a6:
c6:ed:6e:83:c2:a0:b0:f3:4f:49:a4:fc:01:fc:1d:
1c:d4:8c:da:1d:3c:28:1d:d1:68:34:04:0d:54:0c:
68:27:4f:f0:d0:93:d5:e2:7d:bf:04:13:31:23:c9:
dd:8f:38:f1:cc:f6:ad:08:9e:31:25:91:8d:96:be:
a6:5f:50:ed:3b:85:64:bc:54:9f:85:8d:01:43:b9:
39:77:09:30:8b:27:20:f5:b1:7a:fa:c9:6d:6a:9f:
41:0c:2e:d3:3f:71:17:8a:a1:15:1d:23:87:52:5d:
cc:d6:6f:05:9f:b9:67:53:39:c9:96:73:51:90:1f:
b2:49:61:1a:76:b0:f4:88:1e:09:29:16:3d:79:8f:
6f:dd:66:64:be:8e:37:94:4e:1c:78:fe:69:4e:bb:
53:75:6f:fb:3a:13:3a:14:00:ac:94:d8:75:3a:1f:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:67:4E:CF:CD:15:41:85:02:74:C4:2D:1B:3A:E7:41:7B:E9:DC:CF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YmdOz80VQYUCdMQtGzrnQXvp3M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
87.120.68.0/23
93.123.74.0/23
185.252.160.0/23
185.252.163.0/24
Signature Algorithm: sha256WithRSAEncryption
07:31:d8:be:52:3c:77:5c:85:f8:64:77:41:3f:a3:46:45:1f:
0f:57:ef:cc:1d:5e:9a:4a:9a:c3:d4:64:99:6c:1a:2d:7c:2c:
27:e2:87:6a:b1:7f:27:dd:f0:74:b7:fd:9f:a5:e6:ca:f7:ef:
2d:6c:08:64:07:82:be:ea:7d:40:e6:43:d0:41:c2:e8:3a:15:
2b:cc:e4:68:90:29:72:fa:81:d5:8d:f6:5c:68:f1:f5:79:df:
83:17:0e:ce:2f:a7:9d:01:65:b4:ae:35:f3:e1:c7:09:e9:0a:
9b:f2:a8:d4:48:16:93:a0:3e:5e:6c:8c:49:57:6e:cd:4c:53:
5b:39:40:b5:c0:2e:dd:c5:81:f8:a4:4e:f1:7c:71:61:81:57:
9c:39:2f:34:12:91:f5:6c:6f:59:ff:b9:f3:d6:a3:23:0e:19:
ac:10:b6:3a:17:c3:8e:23:93:eb:53:99:6d:ef:d9:04:ca:7e:
0f:94:45:2a:f5:2d:45:26:89:8e:38:ab:a4:0c:f5:ca:68:3d:
ae:69:9e:5a:36:42:ad:2c:1c:11:1b:48:cc:2f:bc:d5:a2:01:
64:09:24:46:7d:9a:6d:ca:a3:25:94:67:b5:8b:53:9c:a9:d2:
59:ef:01:72:87:0f:24:ed:7f:ff:08:11:fa:c2:bd:bb:97:89:
95:29:a8:dc
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY5zZy3VG9mMmbrkyLmFaHGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMzI1MDIxODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjY3NGVjZmNkMTU0MTg1MDI3NGM0MmQxYjNhZTc0MTdiZTlkY2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSyzM+J7m4qZ5nBCRrPgqwwr/02j
DjlN83OJ7Y1y/QLQaZHCLNeu51hszESvgWV6kKNWN275BWxWCvVZl+edLgDh8azE
nlmkiGYY/Xt3cE3yl1pARElmrabG7W6DwqCw809JpPwB/B0c1IzaHTwoHdFoNAQN
VAxoJ0/w0JPV4n2/BBMxI8ndjzjxzPatCJ4xJZGNlr6mX1DtO4VkvFSfhY0BQ7k5
dwkwiycg9bF6+sltap9BDC7TP3EXiqEVHSOHUl3M1m8Fn7lnUznJlnNRkB+ySWEa
drD0iB4JKRY9eY9v3WZkvo43lE4ceP5pTrtTdW/7OhM6FACslNh1Oh+eUwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGJnTs/NFUGFAnTELRs650F76dzPMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWW1kT3o4MFZRWVVDZE1RdEd6cm5RWHZwM004LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALQheAwQB
V3hEAwQBXXtKAwQBufygAwQAufyjMA0GCSqGSIb3DQEBCwUAA4IBAQAHMdi+Ujx3
XIX4ZHdBP6NGRR8PV+/MHV6aSprD1GSZbBotfCwn4odqsX8n3fB0t/2fpebK9+8t
bAhkB4K+6n1A5kPQQcLoOhUrzORokCly+oHVjfZcaPH1ed+DFw7OL6edAWW0rjXz
4ccJ6Qqb8qjUSBaToD5ebIxJV27NTFNbOUC1wC7dxYH4pE7xfHFhgVecOS80EpH1
bG9Z/7nz1qMjDhmsELY6F8OOI5PrU5lt79kEyn4PlEUq9S1FJomOOKukDPXKaD2u
aZ5aNkKtLBwRG0jML7zVogFkCSRGfZptyqMllGe1i1OcqdJZ7wFyhw8k7X//CBH6
wr27l4mVKajc
-----END CERTIFICATE-----
Generated at Mon Mar 25 15:18:05 2024 by rpki-client on console-ams.rpki-client.org