Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hEdVImwq_KFMwcz_qVAUDPd4rWs.roa
File: hEdVImwq_KFMwcz_qVAUDPd4rWs.roa (raw, json)
Hash identifier: RQfJs8hOCgldMkLF56SEVYiBo71v6xEIrJ70QlllEew=
Subject key identifier: 84:47:55:22:6C:2A:FC:A1:4C:C1:CC:FF:A9:50:14:0C:F7:78:AD:6B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AE007C579182B9032F90E31430AFA7927
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hEdVImwq_KFMwcz_qVAUDPd4rWs.roa
Signing time: Fri 29 Sep 2023 08:22:00 +0000
ROA not before: Fri 29 Sep 2023 08:22:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
91.92.24.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.59.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:07:c5:79:18:2b:90:32:f9:0e:31:43:0a:fa:79:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 29 08:22:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=844755226c2afca14cc1ccffa950140cf778ad6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:85:6c:1a:85:19:16:05:53:b8:95:00:67:
dc:0d:45:2b:c2:e6:b6:50:16:38:f5:b2:2e:29:9b:
43:da:3e:57:58:48:69:44:9f:4d:a6:ae:8e:a3:ba:
9c:be:1a:4e:a4:a6:f0:3f:ce:ef:ac:03:1b:12:60:
b1:0a:25:df:c8:64:4f:4c:ac:d2:b3:ce:ae:be:ac:
a6:18:ce:df:89:d2:f9:8b:28:5a:96:40:d4:ad:e5:
da:75:71:12:c1:08:dc:f9:ce:4d:3c:a2:e3:bf:96:
7d:dc:12:42:27:35:8b:47:49:12:4e:78:f9:82:8e:
3e:73:43:09:07:a4:ae:72:b5:b8:42:40:a0:69:60:
c6:30:35:82:40:aa:3b:9a:ee:3b:5d:89:93:38:3f:
23:7e:f3:c2:36:50:34:56:9c:b0:46:93:49:a9:aa:
0f:a1:30:61:14:35:62:08:f4:2a:1e:19:a9:d9:6a:
1d:51:75:f7:1f:64:23:63:f1:f8:9c:2c:fe:d9:d7:
92:56:6f:68:6b:75:93:98:3a:4d:c5:29:81:2c:98:
c1:71:34:66:25:cd:71:21:d8:91:bc:14:b7:b4:d2:
a8:fe:12:d8:4a:64:12:c2:16:ab:5c:af:78:f6:2f:
22:b2:66:48:d7:a0:e9:b4:51:04:cb:5c:c3:5b:5d:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:47:55:22:6C:2A:FC:A1:4C:C1:CC:FF:A9:50:14:0C:F7:78:AD:6B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hEdVImwq_KFMwcz_qVAUDPd4rWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
87.121.45.0/24
87.121.59.0/24
91.92.24.0/23
92.119.196.0/23
93.123.116.0/24
94.154.161.0-94.154.163.255
94.156.78.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.219.126.0/24
185.252.176.0/24
194.169.174.0/24
194.180.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:47:7c:d1:3c:d8:77:90:c3:92:44:08:f2:88:29:6b:1e:53:
19:9b:48:00:9c:c8:ae:a0:9d:f5:1f:df:f3:23:e0:55:2e:4f:
d9:98:44:7e:5e:93:35:03:f0:4a:d6:15:83:e2:64:e2:fc:e5:
d1:59:d8:e5:af:c7:b3:d2:8d:26:65:df:3b:39:3e:41:a2:c1:
12:62:01:47:c8:c5:c5:08:29:cd:3c:db:ee:7b:56:9b:5c:59:
12:04:02:0e:92:8b:ea:5d:79:18:b2:c4:b4:41:81:fd:5f:ad:
9e:84:be:3a:56:78:7a:21:25:59:a1:c5:9a:be:11:81:5d:32:
a6:64:a2:56:0d:f9:99:55:7b:d6:e2:ca:d8:cf:d0:ec:61:50:
58:8d:74:42:b5:19:83:5c:8e:7f:21:5d:dc:7c:b0:17:9a:23:
4c:40:06:a9:3a:4e:bf:fa:d3:72:1a:62:af:b6:8d:eb:b7:89:
5d:2a:b7:8b:7f:43:19:9c:96:4c:bf:a4:1c:4a:fe:78:38:14:
5c:23:71:ad:51:49:82:96:17:73:32:6a:0a:1a:60:25:95:f2:
95:e0:bd:92:20:2d:b4:b2:0b:94:ff:38:a1:4b:c7:31:65:05:
93:6e:40:8f:49:d3:4f:1a:cf:d2:fa:27:66:2e:c3:c7:9a:e8:
3b:37:63:bf
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAYrgB8V5GCuQMvkOMUMK+nknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwOTI5MDgyMjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDQ3NTUyMjZjMmFmY2ExNGNjMWNjZmZhOTUwMTQwY2Y3NzhhZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLiFbBqFGRYFU7iVAGfcDUUrwua2
UBY49bIuKZtD2j5XWEhpRJ9Npq6Oo7qcvhpOpKbwP87vrAMbEmCxCiXfyGRPTKzS
s86uvqymGM7fidL5iyhalkDUreXadXESwQjc+c5NPKLjv5Z93BJCJzWLR0kSTnj5
go4+c0MJB6SucrW4QkCgaWDGMDWCQKo7mu47XYmTOD8jfvPCNlA0VpywRpNJqaoP
oTBhFDViCPQqHhmp2WodUXX3H2QjY/H4nCz+2deSVm9oa3WTmDpNxSmBLJjBcTRm
Jc1xIdiRvBS3tNKo/hLYSmQSwharXK949i8ismZI16DptFEEy1zDW13AjwIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFIRHVSJsKvyhTMHM/6lQFAz3eK1rMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvaEVkVkltd3FfS0ZNd2N6X3FWQVVEUGQ0cldzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBAAt
l1kDBABXeS0DBABXeTsDBAFbXBgDBAFcd8QDBABde3QwDAMEAF6aoQMEAl6aoAME
AF6cTgMEAF6c7zAMAwQCk05kAwQAk05mAwQCqxZIAwQAstfgAwQAstfsAwQCudhU
AwQCudpUAwQAudt+AwQAufywAwQAwqmuAwQAwrQyMA0GCSqGSIb3DQEBCwUAA4IB
AQCeR3zRPNh3kMOSRAjyiClrHlMZm0gAnMiuoJ31H9/zI+BVLk/ZmER+XpM1A/BK
1hWD4mTi/OXRWdjlr8ez0o0mZd87OT5BosESYgFHyMXFCCnNPNvue1abXFkSBAIO
kovqXXkYssS0QYH9X62ehL46Vnh6ISVZocWavhGBXTKmZKJWDfmZVXvW4srYz9Ds
YVBYjXRCtRmDXI5/IV3cfLAXmiNMQAapOk6/+tNyGmKvto3rt4ldKreLf0MZnJZM
v6QcSv54OBRcI3GtUUmClhdzMmoKGmAllfKV4L2SIC20sguU/zihS8cxZQWTbkCP
SdNPGs/S+idmLsPHmug7N2O/
-----END CERTIFICATE-----
Generated at Tue Oct 3 08:55:26 2023 by rpki-client on console-ams.rpki-client.org