Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hdwNKgkdGyLYN_T4Drdk7WqtqLQ.roa
File: hdwNKgkdGyLYN_T4Drdk7WqtqLQ.roa (raw, json)
Hash identifier: RJ2RKl9YGfpWRT1/tV6K3fPfWeWD2ueVnd/OdmSOHGo=
Subject key identifier: 85:DC:0D:2A:09:1D:1B:22:D8:37:F4:F8:0E:B7:64:ED:6A:AD:A8:B4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018871143F1B0858E70104E6A58C9612BBCE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hdwNKgkdGyLYN_T4Drdk7WqtqLQ.roa
Signing time: Wed 31 May 2023 09:12:12 +0000
ROA not before: Wed 31 May 2023 09:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 87.120.192.0/23 maxlen: 24
185.147.100.0/22 maxlen: 24
87.121.36.0/23 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.60.0/22 maxlen: 24
87.120.219.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
45.9.208.0/22 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.237.0/24 maxlen: 24
193.8.184.0/23 maxlen: 24
193.8.186.0/23 maxlen: 24
194.55.226.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.80.0/24 maxlen: 24
94.156.176.0/22 maxlen: 24
94.156.180.0/23 maxlen: 24
194.48.249.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
93.123.26.0/23 maxlen: 24
93.123.112.0/22 maxlen: 24
93.123.117.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.26.0/23 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
94.156.152.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
91.92.67.0/24 maxlen: 24
45.139.123.0/24 maxlen: 24
37.139.131.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
87.121.146.0/23 maxlen: 24
87.121.163.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.114.0/23 maxlen: 24
45.95.2.0/23 maxlen: 24
45.95.0.0/23 maxlen: 24
5.253.58.0/23 maxlen: 24
5.253.56.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:14:3f:1b:08:58:e7:01:04:e6:a5:8c:96:12:bb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 31 09:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85dc0d2a091d1b22d837f4f80eb764ed6aada8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:b9:61:d5:93:fc:ce:f9:9b:7c:b2:18:66:
b2:56:ac:e2:7d:d3:b5:ed:e4:e1:29:7b:76:b6:be:
25:a2:be:d9:6f:63:42:fc:f4:43:a6:53:8a:de:8c:
cf:d3:c3:24:ca:36:86:e9:57:21:48:59:c6:b3:d2:
32:6f:17:4e:2d:a6:af:83:02:6b:c4:87:3a:6d:c9:
4f:9c:96:69:88:de:6c:80:d3:d0:08:7c:9d:26:8f:
c7:f7:5e:06:f1:0e:2e:c0:51:05:e6:bd:54:6f:66:
14:ea:fa:c9:a5:dc:99:7e:5c:d2:47:3e:02:63:66:
76:2d:8c:ef:c8:43:b5:e9:bb:20:34:71:a3:49:14:
81:18:5a:37:14:32:40:42:de:83:6b:21:b3:77:51:
8a:d7:be:db:fe:02:dc:5f:1e:8e:fc:7e:07:60:ea:
33:32:61:7f:be:1a:72:33:5f:6b:6f:6a:41:81:85:
de:52:e4:ad:47:a4:3f:32:b9:0e:ba:29:8e:58:ef:
b0:e7:98:37:5e:2f:1c:a4:da:2a:3c:16:ad:10:09:
60:6c:2f:cd:7e:fd:9f:17:ad:07:b5:76:cc:7d:fa:
dd:46:63:a4:94:b4:db:08:9b:28:0c:c0:ed:b3:83:
2b:e5:68:be:0d:1b:a7:33:59:8c:d7:c1:5b:8b:93:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DC:0D:2A:09:1D:1B:22:D8:37:F4:F8:0E:B7:64:ED:6A:AD:A8:B4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hdwNKgkdGyLYN_T4Drdk7WqtqLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
37.139.131.0/24
45.8.92.0/24
45.9.208.0/22
45.95.0.0/22
45.139.123.0/24
87.120.192.0/23
87.120.219.0/24
87.121.36.0-87.121.38.255
87.121.60.0/22
87.121.103.0-87.121.104.255
87.121.114.0/23
87.121.146.0/23
87.121.163.0/24
91.92.16.0/24
91.92.26.0/23
91.92.67.0/24
93.123.24.0/24
93.123.26.0/23
93.123.30.0/23
93.123.76.0-93.123.80.255
93.123.112.0/22
93.123.117.0/24
93.123.119.0/24
94.154.160.0/23
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.176.0-94.156.181.255
94.156.237.0-94.156.238.255
185.147.100.0/22
185.207.14.0/23
185.252.177.0/24
193.8.184.0/22
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
194.48.249.0/24
194.55.226.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:00:48:b4:05:b0:e0:b4:fc:59:c6:f8:ec:cc:1d:2b:48:43:
c5:09:66:56:c6:3c:9f:9b:ae:ff:89:ef:17:66:77:18:09:ac:
83:3d:9b:fa:81:10:e6:04:3f:d2:ab:6d:d9:9c:05:1d:07:ba:
cd:59:c3:75:ee:93:38:7f:f6:9b:06:02:24:b5:92:85:65:d5:
92:5a:93:b4:b8:a0:91:11:01:e3:63:4d:74:36:3c:52:9f:6e:
f3:58:ff:79:09:0d:ee:f7:2d:84:7b:dd:1c:a2:92:93:fa:df:
d3:7e:41:1e:ff:85:e5:d9:09:92:1a:41:d4:51:41:69:d0:48:
bf:c7:46:1f:ba:dd:e2:50:ec:09:cc:c3:94:4a:81:49:df:d7:
7f:90:69:0b:9e:59:96:b6:0f:c8:8e:77:b0:17:54:fa:5f:36:
61:ba:4f:b3:6f:87:e8:bf:30:bd:d0:93:1c:03:e7:d1:04:66:
20:3c:5b:fa:c9:c6:09:c4:84:81:a7:43:b6:b8:b2:98:53:b2:
7b:cb:29:9b:4b:b0:d6:bc:ab:b3:78:c0:6d:43:6f:41:eb:12:
5d:be:48:15:c4:c6:50:0d:e3:c8:f4:a9:33:ae:60:86:64:64:
ea:b8:ae:64:77:74:98:95:9c:27:40:20:05:af:02:bc:c3:a2:
a4:16:db:a4
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgISAYhxFD8bCFjnAQTmpYyWErvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNTMxMDkxMjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWRjMGQyYTA5MWQxYjIyZDgzN2Y0ZjgwZWI3NjRlZDZhYWRhOGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoti5YdWT/M75m3yyGGayVqzifdO1
7eThKXt2tr4lor7Zb2NC/PRDplOK3ozP08MkyjaG6VchSFnGs9IybxdOLaavgwJr
xIc6bclPnJZpiN5sgNPQCHydJo/H914G8Q4uwFEF5r1Ub2YU6vrJpdyZflzSRz4C
Y2Z2LYzvyEO16bsgNHGjSRSBGFo3FDJAQt6DayGzd1GK177b/gLcXx6O/H4HYOoz
MmF/vhpyM19rb2pBgYXeUuStR6Q/MrkOuimOWO+w55g3Xi8cpNoqPBatEAlgbC/N
fv2fF60HtXbMffrdRmOklLTbCJsoDMDts4Mr5Wi+DRunM1mM18Fbi5OIVwIDAQAB
o4IDMTCCAy0wHQYDVR0OBBYEFIXcDSoJHRsi2Df0+A63ZO1qrai0MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvaGR3Tktna2RHeUxZTl9UNERyZGs3V3F0cUxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRQYIKwYBBQUHAQcBAf8EggE0MIIBMDCCASwEAgABMIIB
JAMEAgX9OAMEACWLgwMEAC0IXAMEAi0J0AMEAi1fAAMEAC2LewMEAVd4wAMEAFd4
2zAMAwQCV3kkAwQAV3kmAwQCV3k8MAwDBABXeWcDBABXeWgDBAFXeXIDBAFXeZID
BABXeaMDBABbXBADBAFbXBoDBABbXEMDBABdexgDBAFdexoDBAFdex4wDAMEAl17
TAMEAF17UAMEAl17cAMEAF17dQMEAF17dwMEAV6aoAMEAF6arQMEAF6cAgMEAF6c
mAMEAV6cmjAMAwQEXpywAwQBXpy0MAwDBABenO0DBABenO4DBAK5k2QDBAG5zw4D
BAC5/LEDBALBCLgDBADBGdsDBADBLz4DBADBOnkDBADBOnsDBADCMPkDBADCN+ID
BADUV80wDQYJKoZIhvcNAQELBQADggEBAKoASLQFsOC0/FnG+OzMHStIQ8UJZlbG
PJ+brv+J7xdmdxgJrIM9m/qBEOYEP9KrbdmcBR0Hus1Zw3Xukzh/9psGAiS1koVl
1ZJak7S4oJERAeNjTXQ2PFKfbvNY/3kJDe73LYR73RyikpP639N+QR7/heXZCZIa
QdRRQWnQSL/HRh+63eJQ7AnMw5RKgUnf13+QaQueWZa2D8iOd7AXVPpfNmG6T7Nv
h+i/ML3QkxwD59EEZiA8W/rJxgnEhIGnQ7a4sphTsnvLKZtLsNa8q7N4wG1Db0Hr
El2+SBXExlAN48j0qTOuYIZkZOq4rmR3dJiVnCdAIAWvArzDoqQW26Q=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org