Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fNkbfynz2tL11UcsKNOt_qUxwF4.roa
File: fNkbfynz2tL11UcsKNOt_qUxwF4.roa (raw, json)
Hash identifier: eUqPV474xVWqYpJsioPWT2JhZwX+Uc3Qx87Pzck9l5Q=
Subject key identifier: 7C:D9:1B:7F:29:F3:DA:D2:F5:D5:47:2C:28:D3:AD:FE:A5:31:C0:5E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E65F2F7350269B91D60D5421CF4AB4D2A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fNkbfynz2tL11UcsKNOt_qUxwF4.roa
Signing time: Fri 22 Mar 2024 11:36:45 +0000
ROA not before: Fri 22 Mar 2024 11:36:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.253.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 14:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:f2:f7:35:02:69:b9:1d:60:d5:42:1c:f4:ab:4d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 22 11:36:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cd91b7f29f3dad2f5d5472c28d3adfea531c05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:10:d8:20:41:ef:95:ee:06:1a:f5:9f:15:
dc:2b:0b:6e:68:81:ff:d6:c9:dc:30:e4:7c:ba:b7:
f4:7d:3b:10:1a:70:98:70:ec:d9:4e:27:ae:f7:f0:
45:f8:6e:ca:28:b1:75:68:15:2e:5b:4d:34:d7:11:
7e:dc:35:32:47:98:86:92:e4:54:68:7f:e9:d4:0e:
78:3d:66:db:15:2f:d7:99:f7:e8:e1:c0:2e:01:94:
31:6c:d9:2c:13:6b:5c:27:2a:ec:cd:09:3c:2f:a3:
eb:16:49:89:38:8a:44:36:b8:d9:a4:56:64:64:68:
4d:3a:b4:77:6c:cf:f7:9d:1b:ea:a5:9a:ca:2d:c6:
cd:4a:39:55:73:b6:7f:e2:77:6b:ec:c6:cd:87:a4:
5a:39:b1:a2:a4:bc:3e:a0:48:dd:36:7d:4b:63:8e:
47:02:fd:f4:95:0d:3d:d5:ab:89:61:25:27:c0:f4:
e0:6e:4f:f0:e8:60:04:3a:f8:ca:24:83:66:c2:fd:
1c:62:23:56:9e:1b:b7:73:d7:40:de:03:bd:0b:fa:
94:99:da:aa:e9:33:d6:83:78:7a:3f:9e:e4:42:8d:
1b:80:2c:62:2f:a7:fe:c8:8c:4b:94:12:bc:be:1b:
05:6e:26:1b:0f:71:9c:03:45:ba:23:0f:64:78:56:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D9:1B:7F:29:F3:DA:D2:F5:D5:47:2C:28:D3:AD:FE:A5:31:C0:5E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fNkbfynz2tL11UcsKNOt_qUxwF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
83.219.97.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
185.222.160.0-185.222.162.255
193.25.217.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.55.187.0/24
194.55.225.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c0:8e:03:ec:f2:e5:ed:91:94:db:1f:e0:01:6a:92:e0:0f:
0f:40:58:04:9c:ad:0c:2f:be:5c:39:c5:21:88:1d:10:06:77:
c5:3d:c2:3b:df:19:2f:d4:c8:52:9d:31:64:c2:30:a6:e2:8e:
6b:90:fc:e9:42:ff:79:60:e2:cc:7e:54:e5:22:d0:f0:6c:bd:
35:c0:1b:3b:d1:5f:a4:63:ec:02:ad:cd:56:a7:e2:e1:27:e4:
42:0c:7b:09:1f:c8:30:fa:f5:5f:4c:11:5d:00:d7:6c:c2:6e:
86:8d:04:80:fc:71:43:2f:0e:e6:c0:60:62:a8:1f:3b:08:f9:
87:7c:78:63:c6:2e:67:62:95:e1:f0:94:1b:bb:cf:1c:7c:f4:
6c:ad:24:a4:2e:4d:97:84:70:2f:f8:7d:ce:b5:bc:a7:6b:fa:
ea:0c:a9:1a:cf:ed:c8:2f:59:ff:82:73:b7:1a:ff:ad:e0:99:
5c:62:2b:06:d3:1d:4d:12:01:04:d6:8d:4b:c3:df:48:50:53:
ac:98:15:97:89:32:6b:2e:48:a9:c0:a0:7a:7c:f9:dc:c7:44:
f6:b2:d1:35:29:4e:60:7e:ed:08:fb:54:6b:13:c3:42:f0:f6:
c1:96:3e:aa:fd:8b:2c:a1:25:7a:a8:13:1a:b9:bf:da:6e:35:
01:3b:63:67
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAY5l8vc1Amm5HWDVQhz0q00qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMzIyMTEzNjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2Q5MWI3ZjI5ZjNkYWQyZjVkNTQ3MmMyOGQzYWRmZWE1MzFjMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrsQ2CBB75XuBhr1nxXcKwtuaIH/
1sncMOR8urf0fTsQGnCYcOzZTieu9/BF+G7KKLF1aBUuW0001xF+3DUyR5iGkuRU
aH/p1A54PWbbFS/Xmffo4cAuAZQxbNksE2tcJyrszQk8L6PrFkmJOIpENrjZpFZk
ZGhNOrR3bM/3nRvqpZrKLcbNSjlVc7Z/4ndr7MbNh6RaObGipLw+oEjdNn1LY45H
Av30lQ091auJYSUnwPTgbk/w6GAEOvjKJINmwv0cYiNWnhu3c9dA3gO9C/qUmdqq
6TPWg3h6P57kQo0bgCxiL6f+yIxLlBK8vhsFbiYbD3GcA0W6Iw9keFZoUQIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFHzZG38p89rS9dVHLCjTrf6lMcBeMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZk5rYmZ5bnoydEwxMVVjc0tOT3RfcVV4d0Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAAC
O/0DBAAtVFsDBAAtWEADBAAtWFsDBABPbjMDBABT22EDBABcd8YDBABc+TIDBABe
mqIDBABtzu8DBACy1+EDBACy1+MDBACy1+wwDAMEBbneoAMEALneogMEAMEZ2QME
AMElKAMEAMElKgMEAMElLAMEAMHeYQMEAMHeYwMEAMI3uwMEAMI34QMEAMK0JjAN
BgkqhkiG9w0BAQsFAAOCAQEAncCOA+zy5e2RlNsf4AFqkuAPD0BYBJytDC++XDnF
IYgdEAZ3xT3CO98ZL9TIUp0xZMIwpuKOa5D86UL/eWDizH5U5SLQ8Gy9NcAbO9Ff
pGPsAq3NVqfi4SfkQgx7CR/IMPr1X0wRXQDXbMJuho0EgPxxQy8O5sBgYqgfOwj5
h3x4Y8YuZ2KV4fCUG7vPHHz0bK0kpC5Nl4RwL/h9zrW8p2v66gypGs/tyC9Z/4Jz
txr/reCZXGIrBtMdTRIBBNaNS8PfSFBTrJgVl4kyay5IqcCgenz53MdE9rLRNSlO
YH7tCPtUaxPDQvD2wZY+qv2LLKEleqgTGrm/2m41ATtjZw==
-----END CERTIFICATE-----
Generated at Fri Mar 22 18:51:29 2024 by rpki-client on console-ams.rpki-client.org