Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Yot45th6_oji4bNFd01pIoHXGGw.roa
File: Yot45th6_oji4bNFd01pIoHXGGw.roa (raw, json)
Hash identifier: V9E2SxRIz0rNVSUO2OgMtL4UmdbxySZyvyeD4RLyCgc=
Subject key identifier: 62:8B:78:E6:D8:7A:FE:88:E2:E1:B3:45:77:4D:69:22:81:D7:18:6C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01905401132E6F87A7E19286BE74070E36C7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Yot45th6_oji4bNFd01pIoHXGGw.roa
Signing time: Wed 26 Jun 2024 10:04:34 +0000
ROA not before: Wed 26 Jun 2024 10:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 06:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:01:13:2e:6f:87:a7:e1:92:86:be:74:07:0e:36:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 26 10:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=628b78e6d87afe88e2e1b345774d692281d7186c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:6e:fa:cc:8b:a2:78:10:82:63:1c:6f:34:
2b:6a:4a:81:fe:54:e8:2d:f2:9b:65:fc:c1:59:38:
62:31:7e:9b:7d:61:89:75:b4:ba:ff:4a:cb:75:30:
bf:9a:89:3b:60:86:62:06:af:9a:e8:3c:45:a6:7b:
6c:26:35:db:f2:da:3d:1c:23:b5:14:51:53:59:93:
ed:6a:42:b0:a6:fc:11:05:a0:30:44:54:53:89:02:
93:34:71:da:7b:7a:52:c2:e9:d1:f3:94:3d:df:52:
eb:95:0e:7a:16:41:7c:5c:3c:93:0c:9c:11:10:43:
8e:a3:d9:88:df:f3:37:7c:37:f9:fc:9b:4c:14:51:
fa:6d:63:31:61:33:95:3d:73:7f:3e:c1:29:f4:77:
b9:c5:f2:0f:61:7a:ed:fb:47:74:67:eb:bb:1f:42:
ae:9f:49:2d:a7:47:ff:68:56:b5:77:e1:5f:da:bc:
47:ba:4e:d7:b3:f5:92:5e:f6:27:c3:51:74:30:06:
61:57:03:eb:2c:7e:37:df:b6:a4:ce:1f:27:1b:87:
2b:58:8c:9e:15:ef:79:99:27:31:ca:e8:37:01:96:
1f:e4:41:f0:9e:c1:56:ed:f1:75:e0:29:38:06:be:
58:6b:e8:01:1b:ce:23:5e:7b:43:f6:50:3b:67:57:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8B:78:E6:D8:7A:FE:88:E2:E1:B3:45:77:4D:69:22:81:D7:18:6C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Yot45th6_oji4bNFd01pIoHXGGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.88.64.0/24
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.149.243.0/24
45.151.88.0/23
82.115.211.0/24
83.219.97.0/24
84.21.174.0/23
87.120.33.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.31.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:6a:5e:87:47:a5:5f:07:33:af:d1:f1:b2:20:19:ac:83:fa:
ef:a8:10:a8:32:da:a5:2f:f7:8c:ac:5e:b3:21:52:fa:b1:e8:
e8:43:24:26:3b:e2:06:57:da:d1:e5:2b:59:4d:3c:4e:d8:d3:
3b:85:84:d7:ec:4e:4a:69:ed:33:4d:99:da:f5:54:01:90:77:
8f:18:62:6a:20:a3:b1:0c:47:02:84:64:d4:a2:fe:df:00:f5:
47:ca:ec:ad:d6:4d:33:45:a4:d4:da:a8:31:65:2d:41:30:f0:
ca:76:2f:ef:34:57:23:85:38:d0:94:98:80:8c:8f:52:04:f2:
e4:90:38:82:0b:08:e5:82:f6:03:09:71:72:c3:b4:08:8a:b8:
ec:60:70:f5:a1:54:db:d4:20:c4:0b:e4:57:31:a0:e9:df:1c:
93:95:fd:07:03:12:59:9d:83:6b:fe:5c:3b:8b:e5:f3:d8:97:
91:88:cf:de:bd:be:3e:d2:05:60:e9:02:d6:98:4f:d4:4b:e2:
40:6a:b3:33:32:95:d2:2e:02:f3:42:1f:1e:b8:2c:25:f0:88:
6e:4b:a1:21:74:bf:73:15:da:65:2f:30:2d:fa:86:e2:ad:88:
4f:a0:80:c4:df:0b:c9:88:15:8d:17:34:c3:63:16:89:8d:45:
f2:b3:fc:07
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgISAZBUARMub4en4ZKGvnQHDjbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNjI2MTAwNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjhiNzhlNmQ4N2FmZTg4ZTJlMWIzNDU3NzRkNjkyMjgxZDcxODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraRu+syLongQgmMcbzQrakqB/lTo
LfKbZfzBWThiMX6bfWGJdbS6/0rLdTC/mok7YIZiBq+a6DxFpntsJjXb8to9HCO1
FFFTWZPtakKwpvwRBaAwRFRTiQKTNHHae3pSwunR85Q931LrlQ56FkF8XDyTDJwR
EEOOo9mI3/M3fDf5/JtMFFH6bWMxYTOVPXN/PsEp9He5xfIPYXrt+0d0Z+u7H0Ku
n0ktp0f/aFa1d+Ff2rxHuk7Xs/WSXvYnw1F0MAZhVwPrLH4337akzh8nG4crWIye
Fe95mScxyug3AZYf5EHwnsFW7fF14Ck4Br5Ya+gBG84jXntD9lA7Z1ejEwIDAQAB
o4IC5jCCAuIwHQYDVR0OBBYEFGKLeObYev6I4uGzRXdNaSKB1xhsMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWW90NDV0aDZfb2ppNGJORmQwMXBJb0hYR0d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH7BggrBgEFBQcBBwEB/wSB6zCB6DCB5QQCAAEwgd4DBAIl
3XgDBAAtQuUwDAMEAC1R8QMEAC1R8gMEAC1YQAMEAC1YWDAMAwQDLZCYAwQALZCa
AwQALZXpAwQALZXzAwQBLZdYAwQAUnPTAwQAU9thAwQBVBWuAwQAV3ghAwQAV3hX
AwQAV3ktAwQAV3ndAwQBXHfEAwQCXpqgAwQAXpwLAwQAXpxOMAwDBABf1hkDBABf
1hoDBACNYgEDBACTTmYDBACrFhEDBACrFh8DBAKrFkgDBACy1+ADBAK52FQDBAK5
2lQDBAHBKiADBAHBlQIDBADCMPgDBADCN+AwDQYJKoZIhvcNAQELBQADggEBAG1q
XodHpV8HM6/R8bIgGayD+u+oEKgy2qUv94ysXrMhUvqx6OhDJCY74gZX2tHlK1lN
PE7Y0zuFhNfsTkpp7TNNmdr1VAGQd48YYmogo7EMRwKEZNSi/t8A9UfK7K3WTTNF
pNTaqDFlLUEw8Mp2L+80VyOFONCUmICMj1IE8uSQOIILCOWC9gMJcXLDtAiKuOxg
cPWhVNvUIMQL5FcxoOnfHJOV/QcDElmdg2v+XDuL5fPYl5GIz969vj7SBWDpAtaY
T9RL4kBqszMyldIuAvNCHx64LCXwiG5LoSF0v3MV2mUvMC36huKtiE+ggMTfC8mI
FY0XNMNjFomNRfKz/Ac=
-----END CERTIFICATE-----
Generated at Fri Jun 28 11:23:03 2024 by rpki-client on console-fra.rpki-client.org