Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/g-c-CmCMmN3jfe3wGiYHDmCPro4.roa
File: g-c-CmCMmN3jfe3wGiYHDmCPro4.roa (raw, json)
Hash identifier: EPlNw400EkzrsTp3J17T677VuVYGmMRgRqgVp3Ydpmo=
Subject key identifier: 83:E7:3E:0A:60:8C:98:DD:E3:7D:ED:F0:1A:26:07:0E:60:8F:AE:8E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CAFF772470D182CB877CBEB4B716E9F2F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/g-c-CmCMmN3jfe3wGiYHDmCPro4.roa
Signing time: Thu 28 Dec 2023 10:27:58 +0000
ROA not before: Thu 28 Dec 2023 10:27:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
185.226.172.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
45.88.90.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 13:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:f7:72:47:0d:18:2c:b8:77:cb:eb:4b:71:6e:9f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 28 10:27:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83e73e0a608c98dde37dedf01a26070e608fae8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:9c:36:10:b1:ac:3b:25:f9:3e:db:37:8b:
08:71:ee:b0:e1:7a:a5:b7:0e:d6:d9:54:78:5a:94:
36:86:e2:1d:01:20:c0:cc:ff:56:8f:0d:29:07:f2:
3e:68:8f:d3:f1:fb:19:c8:27:8f:f8:18:d7:ff:5b:
fa:bb:39:e2:4a:2e:c3:b1:fc:19:70:2e:53:53:28:
f8:ec:d4:a2:17:05:97:0b:6f:a5:48:a8:f9:6c:54:
a7:81:16:db:31:0d:33:42:15:14:bf:61:b4:b6:4a:
27:8e:90:b9:23:e7:5b:e5:c4:6c:f1:aa:4b:06:47:
b0:9c:25:75:7f:79:c5:43:d8:da:22:2f:91:5c:66:
30:1a:dc:42:52:25:04:15:08:90:f0:58:ee:2a:8f:
4e:84:d3:7e:ee:e2:7c:33:e8:e8:72:ec:fd:2c:a8:
63:7e:5c:dc:e5:83:ef:bb:47:ac:32:69:d2:76:bc:
b2:30:21:4a:d0:44:b8:cb:90:83:c2:f0:93:1b:7b:
80:5f:9b:54:39:d5:af:fc:95:40:03:1e:7e:15:8d:
56:17:71:af:06:c8:c1:35:51:85:17:f8:ab:a6:7b:
54:c7:00:b8:e0:97:14:57:63:32:55:e6:f4:57:d6:
53:7f:aa:45:70:21:a9:45:0c:da:76:d7:8f:5d:27:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E7:3E:0A:60:8C:98:DD:E3:7D:ED:F0:1A:26:07:0E:60:8F:AE:8E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/g-c-CmCMmN3jfe3wGiYHDmCPro4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
45.151.89.0/24
83.219.97.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.172.0/24
185.226.175.0/24
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1c:07:53:7b:d2:4f:56:fd:c2:cb:90:57:c0:83:53:98:62:
49:e4:fd:0a:f9:88:cd:51:b6:5a:6d:07:d1:67:a3:c8:ce:43:
f3:29:99:f2:44:63:82:8c:42:5e:fa:da:4b:f3:43:15:2f:1e:
81:3a:88:99:7d:8f:0e:b3:13:64:2d:f9:7a:72:11:eb:4b:09:
3c:3d:cd:c4:32:d3:4b:7f:b6:ad:75:f1:03:c2:f3:3a:fe:69:
76:bd:0d:2d:98:73:ee:89:66:8a:f8:5c:fa:70:8a:c4:cf:05:
18:34:bf:b7:4b:7a:3b:3c:2d:93:2e:4b:b5:73:06:d6:7d:8b:
fb:3e:97:31:c4:f9:7e:b5:1c:8b:21:4d:ba:5d:6f:f1:be:9e:
45:28:c2:2e:bd:58:f9:45:42:11:b7:42:28:70:06:89:d5:d0:
b6:64:af:4e:9e:96:3e:d2:67:56:36:e5:f0:56:07:34:1c:4a:
78:4f:6c:ca:dc:3f:c0:05:db:ba:41:28:cd:a7:ef:69:4a:5b:
ba:2c:af:d4:17:bc:9b:ee:1f:f7:15:e6:32:32:9a:83:8b:e9:
13:b8:c4:34:90:6a:5a:1e:f3:05:46:21:ef:05:40:49:89:6d:
75:12:52:57:6a:b8:f9:32:9d:f4:c8:44:39:05:3c:42:75:9f:
20:6f:68:c1
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYyv93JHDRgsuHfL60txbp8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMjI4MTAyNzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2U3M2UwYTYwOGM5OGRkZTM3ZGVkZjAxYTI2MDcwZTYwOGZhZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogScNhCxrDsl+T7bN4sIce6w4Xql
tw7W2VR4WpQ2huIdASDAzP9Wjw0pB/I+aI/T8fsZyCeP+BjX/1v6uzniSi7DsfwZ
cC5TUyj47NSiFwWXC2+lSKj5bFSngRbbMQ0zQhUUv2G0tkonjpC5I+db5cRs8apL
BkewnCV1f3nFQ9jaIi+RXGYwGtxCUiUEFQiQ8FjuKo9OhNN+7uJ8M+jocuz9LKhj
flzc5YPvu0esMmnSdryyMCFK0ES4y5CDwvCTG3uAX5tUOdWv/JVAAx5+FY1WF3Gv
BsjBNVGFF/irpntUxwC44JcUV2MyVeb0V9ZTf6pFcCGpRQzadtePXSeagQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFIPnPgpgjJjd433t8BomBw5gj66OMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZy1jLUNtQ01tTjNqZmUzd0dpWUhEbUNQcm80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAMEAC1Y
WgMEAC2XWQMEAFPbYQMEAFd4VwMEAFd5LQMEAFd53QMEAVx3xDAMAwQAXpqhAwQC
XpqgAwQAXpzvMAwDBAKTTmQDBACTTmYDBAKrFkgDBACy1+ADBACy1+wDBAK52FQD
BAK52lQDBAC54qwDBAC54q8DBAC5/LAwDQYJKoZIhvcNAQELBQADggEBAGwcB1N7
0k9W/cLLkFfAg1OYYknk/Qr5iM1RtlptB9Fno8jOQ/MpmfJEY4KMQl762kvzQxUv
HoE6iJl9jw6zE2Qt+XpyEetLCTw9zcQy00t/tq118QPC8zr+aXa9DS2Yc+6JZor4
XPpwisTPBRg0v7dLejs8LZMuS7VzBtZ9i/s+lzHE+X61HIshTbpdb/G+nkUowi69
WPlFQhG3QihwBonV0LZkr06elj7SZ1Y25fBWBzQcSnhPbMrcP8AF27pBKM2n72lK
W7osr9QXvJvuH/cV5jIymoOL6RO4xDSQaloe8wVGIe8FQEmJbXUSUldquPkynfTI
RDkFPEJ1nyBvaME=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:39 2024 by rpki-client on console-ams.rpki-client.org