Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_HMiiu45eT-o5gMm99TlxEdhxSc.roa
File: _HMiiu45eT-o5gMm99TlxEdhxSc.roa (raw, json)
Hash identifier: gB2ihN6CX90XpNcjLVv2iVtr5XPaQ6bEv1tHvqZFkBo=
Subject key identifier: FC:73:22:8A:EE:39:79:3F:A8:E6:03:26:F7:D4:E5:C4:47:61:C5:27
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D44F6DECBD3BE0A219EBFF224FAB041C2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_HMiiu45eT-o5gMm99TlxEdhxSc.roa
Signing time: Fri 26 Jan 2024 08:50:46 +0000
ROA not before: Fri 26 Jan 2024 08:50:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.253.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
94.156.75.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 09:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:44:f6:de:cb:d3:be:0a:21:9e:bf:f2:24:fa:b0:41:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 26 08:50:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc73228aee39793fa8e60326f7d4e5c44761c527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:da:5b:af:86:22:a8:dd:38:81:5c:9f:1c:
b4:f4:2c:67:21:4c:eb:cb:b6:6b:da:46:2e:e9:77:
ee:8d:44:dc:be:c6:d4:21:d8:28:91:e9:af:62:8c:
7a:1a:a0:ba:84:6b:85:7a:8e:9d:de:b3:c2:11:e1:
e8:a1:bf:16:5a:92:f6:3c:ae:32:63:a2:ec:0b:a4:
5f:71:ce:e1:e4:41:aa:d8:f2:bb:83:b4:94:de:e5:
71:ba:2a:68:2e:85:ad:1c:bd:1c:af:c9:37:68:19:
b3:58:c5:59:30:85:cc:48:c0:87:8f:16:ce:a7:f2:
8a:5e:2e:00:85:1d:0f:38:06:89:8c:b3:0a:5e:05:
d7:79:73:7d:d8:ea:5a:13:45:9d:b9:55:5f:65:98:
be:b8:7f:33:a7:a3:44:10:bf:f6:84:24:18:51:3d:
2e:2d:29:89:50:0f:d6:8d:d6:84:bb:13:ce:42:5e:
f1:dd:6c:1a:6a:70:bd:e6:80:78:fc:68:fd:8e:20:
a3:e4:56:1b:cd:4f:1f:d0:3c:1c:6a:b0:62:8d:b6:
46:5d:19:ee:9b:45:04:f7:6b:dd:dc:4a:c3:c5:2a:
ff:6a:7e:92:de:f4:88:fa:0b:20:f4:74:59:c7:82:
1b:9f:27:3c:fa:db:08:58:7b:c6:1d:50:2e:f0:8f:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:73:22:8A:EE:39:79:3F:A8:E6:03:26:F7:D4:E5:C4:47:61:C5:27
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_HMiiu45eT-o5gMm99TlxEdhxSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.9.156.0/24
45.84.89.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
82.115.208.0/24
83.219.97.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
94.156.75.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
185.222.160.0-185.222.162.255
185.246.223.0/24
193.25.217.0/24
193.35.19.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.31.205.0/24
194.48.248.0/24
194.55.187.0/24
194.55.225.0/24
194.59.31.0/24
194.169.172.0/24
194.180.38.0/23
Signature Algorithm: sha256WithRSAEncryption
01:cb:bb:c0:f4:61:40:8e:82:e7:46:06:87:2f:12:3c:81:e1:
6a:d3:b8:10:ab:e2:ed:f5:ba:9a:68:7f:a1:80:d1:7b:94:31:
39:80:d4:63:a7:66:b9:67:c0:00:05:9c:ca:6d:ad:41:b2:0c:
1e:2d:d4:f0:29:f4:ea:f4:0c:74:7e:be:92:1a:1c:4c:1d:64:
9e:9f:34:e8:3b:e7:85:57:49:b5:89:af:87:91:31:2d:c3:c8:
72:a9:7d:73:4a:2f:61:e9:14:bc:fd:fc:ba:6a:f5:de:f0:51:
fd:0f:e1:ef:1d:bd:b0:9d:39:ac:d0:34:3e:be:e6:22:3e:f9:
f2:3c:7f:df:8d:38:8b:f7:3c:7f:93:81:a2:28:93:3a:d0:40:
a7:ba:b7:1f:43:64:a6:4a:92:d8:74:b7:a2:52:10:02:34:3f:
55:39:55:2b:79:2d:1d:f8:36:9a:8f:02:63:39:c3:d5:e9:dc:
b1:e4:78:b3:a2:1a:e9:5a:3f:d1:f0:22:01:c8:19:cb:06:e0:
e9:a6:c3:ad:54:b3:17:07:ee:30:f7:eb:75:ce:34:8b:7f:ef:
a8:53:a4:aa:54:08:69:f2:bf:fe:26:64:68:9d:19:16:dd:b3:
c6:ef:71:c3:c5:ae:c6:dd:ca:4a:5c:9e:ec:52:50:59:60:1b:
78:0f:28:83
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgISAY1E9t7L074KIZ6/8iT6sEHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTI2MDg1MDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzczMjI4YWVlMzk3OTNmYThlNjAzMjZmN2Q0ZTVjNDQ3NjFjNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLfaW6+GIqjdOIFcnxy09CxnIUzr
y7Zr2kYu6XfujUTcvsbUIdgokemvYox6GqC6hGuFeo6d3rPCEeHoob8WWpL2PK4y
Y6LsC6Rfcc7h5EGq2PK7g7SU3uVxuipoLoWtHL0cr8k3aBmzWMVZMIXMSMCHjxbO
p/KKXi4AhR0POAaJjLMKXgXXeXN92OpaE0WduVVfZZi+uH8zp6NEEL/2hCQYUT0u
LSmJUA/WjdaEuxPOQl7x3WwaanC95oB4/Gj9jiCj5FYbzU8f0DwcarBijbZGXRnu
m0UE92vd3ErDxSr/an6S3vSI+gsg9HRZx4Ibnyc8+tsIWHvGHVAu8I9GdQIDAQAB
o4IC1jCCAtIwHQYDVR0OBBYEFPxzIoruOXk/qOYDJvfU5cRHYcUnMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvX0hNaWl1NDVlVC1vNWdNbTk5VGx4RWRoeFNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHrBggrBgEFBQcBBwEB/wSB2zCB2DCB1QQCAAEwgc4DBAAC
O/0DBAAtCZwDBAAtVFkDBAAtVFsDBAAtWEADBAAtWFsDBABPbjMDBABSc9ADBABT
22EDBABcd8YDBABc+TIDBABemqIDBABenEsDBABtzu8DBACy1+EDBACy1+MDBACy
1+wwDAMEBbneoAMEALneogMEALn23wMEAMEZ2QMEAMEjEwMEAMElKAMEAMElKgME
AMElLAMEAMHeYQMEAMHeYwMEAMIfzQMEAMIw+AMEAMI3uwMEAMI34QMEAMI7HwME
AMKprAMEAcK0JjANBgkqhkiG9w0BAQsFAAOCAQEAAcu7wPRhQI6C50YGhy8SPIHh
atO4EKvi7fW6mmh/oYDRe5QxOYDUY6dmuWfAAAWcym2tQbIMHi3U8Cn06vQMdH6+
khocTB1knp806DvnhVdJtYmvh5ExLcPIcql9c0ovYekUvP38umr13vBR/Q/h7x29
sJ05rNA0Pr7mIj758jx/3404i/c8f5OBoiiTOtBAp7q3H0NkpkqS2HS3olIQAjQ/
VTlVK3ktHfg2mo8CYznD1encseR4s6Ia6Vo/0fAiAcgZywbg6abDrVSzFwfuMPfr
dc40i3/vqFOkqlQIafK//iZkaJ0ZFt2zxu9xw8Wuxt3KSlye7FJQWWAbeA8ogw==
-----END CERTIFICATE-----
Generated at Mon Feb 5 11:36:18 2024 by rpki-client on console-ams.rpki-client.org