Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ir2pnybRXt4-SmmuRQfKHCCepQY.roa
File: ir2pnybRXt4-SmmuRQfKHCCepQY.roa (raw, json)
Hash identifier: F8EtcL7QjhjDw8CVZV5iB+ca3VAwI9JFV9lMAfMXUkU=
Subject key identifier: 8A:BD:A9:9F:26:D1:5E:DE:3E:4A:69:AE:45:07:CA:1C:20:9E:A5:06
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E152C31D4AE1C205C7FCB6917F50A82FD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ir2pnybRXt4-SmmuRQfKHCCepQY.roa
Signing time: Wed 06 Mar 2024 19:10:01 +0000
ROA not before: Wed 06 Mar 2024 19:10:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.253.65.0/24 maxlen: 24
45.8.94.0/24 maxlen: 24
45.14.166.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
87.121.61.0/24 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
91.92.26.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
93.123.74.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Mar 2024 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:15:2c:31:d4:ae:1c:20:5c:7f:cb:69:17:f5:0a:82:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 6 19:10:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8abda99f26d15ede3e4a69ae4507ca1c209ea506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b7:5b:2a:05:df:99:0b:84:c3:8b:bf:c4:2c:
30:4c:bf:19:62:67:e2:f8:4f:0c:02:1a:83:6c:d8:
23:ea:87:3a:29:76:ae:55:d4:70:12:7a:2d:48:cf:
92:c3:77:64:62:03:0c:3d:89:d1:99:b9:0f:28:53:
5d:3f:a4:93:37:4c:0c:b4:d3:7e:22:74:40:c7:e2:
c1:d1:94:a6:85:1e:8e:de:a1:bb:4e:3a:4d:f5:ac:
9f:8b:80:ae:3a:21:c1:b7:1a:38:1e:aa:cd:a7:f0:
b8:1b:de:4e:fc:ad:9a:04:34:56:be:88:3e:87:1e:
bb:d9:b6:54:a1:26:44:b8:46:b1:2e:6d:89:9c:1b:
a1:a0:f7:97:24:d0:9f:83:4f:fd:fd:00:9b:bb:c0:
65:37:d7:9c:8d:1b:ee:86:af:dd:36:75:d7:f0:9b:
1d:29:45:a8:bb:b6:b5:3f:19:a3:b0:46:d1:ee:9a:
e9:0b:c6:85:c4:5d:73:c6:7a:28:03:23:5c:c6:47:
8c:ea:77:f3:be:53:e4:e7:35:9a:c5:e4:0a:72:a8:
30:3c:63:c5:e4:0c:1a:a5:58:91:6c:a5:52:4a:14:
08:9f:91:ae:64:52:fa:1d:ed:c6:19:42:d7:76:95:
1f:37:28:01:4b:52:6e:87:3e:78:c3:a4:9c:1a:de:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BD:A9:9F:26:D1:5E:DE:3E:4A:69:AE:45:07:CA:1C:20:9E:A5:06
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ir2pnybRXt4-SmmuRQfKHCCepQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.65.0/24
45.8.94.0/24
45.14.166.0/24
87.120.68.0/23
87.121.61.0-87.121.63.255
87.121.114.0/23
91.92.26.0/24
93.123.74.0/23
93.123.80.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:fe:95:82:44:8d:ae:b0:cb:cc:15:ae:dc:38:66:9c:97:04:
0b:5e:c5:6a:f6:ae:06:50:07:46:a1:dd:f4:07:00:b9:4b:ff:
6a:2e:b2:43:32:c7:b4:b7:25:e0:5d:8c:92:44:d5:39:e9:75:
ee:eb:9a:9e:c2:2c:50:94:03:ed:0f:32:6a:5a:41:2c:dc:52:
9b:1b:c9:ff:99:6e:b5:7c:11:9a:d0:1b:ad:17:51:5f:02:c0:
c5:1f:45:14:9b:d8:89:46:1e:3d:36:47:9d:5c:f3:2a:d4:b9:
9f:22:61:82:b1:e5:f6:98:e1:dc:b2:49:ef:bf:d8:9c:03:a3:
e4:8a:a7:83:dc:56:a7:2c:89:e5:72:aa:57:bc:76:6c:68:72:
be:cc:10:b1:45:c6:bd:2a:fa:66:89:a3:f8:55:01:54:e3:35:
96:10:07:d2:36:a6:fb:1c:08:1a:db:ac:ab:d4:c6:4c:fd:b0:
df:09:a8:af:98:0f:c5:58:1a:07:2c:5d:79:61:22:47:ca:44:
2a:c1:0b:06:6b:72:7c:cb:a5:b2:2c:57:80:37:2f:c0:96:ab:
f3:5c:6d:ea:d0:18:ae:e9:2b:db:93:b5:3a:7a:f2:6d:78:01:
a9:dd:1f:c7:fb:35:0c:47:e0:61:59:32:34:f0:ea:3f:37:b0:
f4:dd:c1:35
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAY4VLDHUrhwgXH/LaRf1CoL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMzA2MTkxMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWJkYTk5ZjI2ZDE1ZWRlM2U0YTY5YWU0NTA3Y2ExYzIwOWVhNTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbdbKgXfmQuEw4u/xCwwTL8ZYmfi
+E8MAhqDbNgj6oc6KXauVdRwEnotSM+Sw3dkYgMMPYnRmbkPKFNdP6STN0wMtNN+
InRAx+LB0ZSmhR6O3qG7TjpN9ayfi4CuOiHBtxo4HqrNp/C4G95O/K2aBDRWvog+
hx672bZUoSZEuEaxLm2JnBuhoPeXJNCfg0/9/QCbu8BlN9ecjRvuhq/dNnXX8Jsd
KUWou7a1PxmjsEbR7prpC8aFxF1zxnooAyNcxkeM6nfzvlPk5zWaxeQKcqgwPGPF
5AwapViRbKVSShQIn5GuZFL6He3GGULXdpUfNygBS1Juhz54w6ScGt6JnwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFIq9qZ8m0V7ePkpprkUHyhwgnqUGMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvaXIycG55YlJYdDQtU21tdVJRZktIQ0NlcFFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQABf1BAwQA
LQheAwQALQ6mAwQBV3hEMAwDBABXeT0DBAZXeQADBAFXeXIDBABbXBoDBAFde0oD
BABde1ADBAG5/KAwDQYJKoZIhvcNAQELBQADggEBAE3+lYJEja6wy8wVrtw4ZpyX
BAtexWr2rgZQB0ah3fQHALlL/2ouskMyx7S3JeBdjJJE1Tnpde7rmp7CLFCUA+0P
MmpaQSzcUpsbyf+ZbrV8EZrQG60XUV8CwMUfRRSb2IlGHj02R51c8yrUuZ8iYYKx
5faY4dyySe+/2JwDo+SKp4PcVqcsieVyqle8dmxocr7MELFFxr0q+maJo/hVAVTj
NZYQB9I2pvscCBrbrKvUxkz9sN8JqK+YD8VYGgcsXXlhIkfKRCrBCwZrcnzLpbIs
V4A3L8CWq/NcberQGK7pK9uTtTp68m14AandH8f7NQxH4GFZMjTw6j83sPTdwTU=
-----END CERTIFICATE-----
Generated at Sat Mar 9 04:34:28 2024 by rpki-client on console-ams.rpki-client.org