Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j36s2KPjdZcy8of-kYn8tq0zCj0.roa
File: j36s2KPjdZcy8of-kYn8tq0zCj0.roa (raw, json)
Hash identifier: KFOhILxYm56EYvGGxqwWdhUS8xjOoXQr3J/CY94e+Vg=
Subject key identifier: 8F:7E:AC:D8:A3:E3:75:97:32:F2:87:FE:91:89:FC:B6:AD:33:0A:3D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DDD9D486CB4019296B9EE31027B25C548
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j36s2KPjdZcy8of-kYn8tq0zCj0.roa
Signing time: Sun 25 Feb 2024 00:14:48 +0000
ROA not before: Sun 25 Feb 2024 00:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.94.0/24 maxlen: 24
45.14.166.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
91.92.26.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
93.123.80.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
212.87.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 00:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:dd:9d:48:6c:b4:01:92:96:b9:ee:31:02:7b:25:c5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 25 00:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f7eacd8a3e3759732f287fe9189fcb6ad330a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:52:a4:0c:9c:fe:51:7c:5f:b9:fc:75:ce:77:
d4:33:b8:5d:1b:96:ee:df:02:f3:96:3b:ae:a9:6a:
21:ee:09:60:a5:ac:d4:6a:e2:b7:7f:84:14:f7:df:
83:0f:4a:49:7e:4f:7e:88:81:e7:aa:88:25:29:c1:
5c:f1:6d:fe:09:6c:71:33:db:94:05:b3:e6:44:d0:
cf:99:36:36:d8:17:64:7f:5b:94:93:7d:e0:b8:b7:
64:a2:5c:5c:15:40:75:cc:4b:35:73:4e:eb:1c:70:
64:f0:01:64:40:19:13:07:ab:50:f4:80:24:46:e0:
61:f3:3c:5b:47:0d:8a:f1:22:e5:92:23:39:3d:b2:
04:88:ab:18:04:c3:44:03:8f:97:c8:43:fe:ca:1b:
e9:fd:c6:1a:40:e8:61:7d:6a:4c:10:08:73:f3:b9:
75:6c:70:a7:b3:62:01:1c:23:00:6f:ea:b8:06:20:
f2:69:64:21:d5:b9:fd:81:a6:a2:c0:31:f3:6b:94:
62:2a:00:7a:1e:f8:12:2b:95:35:7a:f3:b4:6d:8e:
aa:f2:85:70:5e:15:25:ca:dd:74:8c:8d:4f:fb:0d:
3e:c0:d9:8c:8c:5a:a8:a2:db:47:bd:0f:6c:a3:27:
58:4a:72:0c:ad:bf:83:0c:48:2f:35:3b:c8:0d:24:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7E:AC:D8:A3:E3:75:97:32:F2:87:FE:91:89:FC:B6:AD:33:0A:3D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j36s2KPjdZcy8of-kYn8tq0zCj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
45.14.166.0/24
87.120.68.0/23
87.121.60.0/23
91.92.26.0/24
93.123.74.0/23
93.123.80.0/24
185.252.160.0/23
212.87.204.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:4f:f8:10:93:2f:9b:cd:ab:06:92:31:f1:98:d9:a1:c7:13:
4c:d3:ab:94:1f:1e:9d:3b:90:e0:34:62:a5:4d:17:5f:33:d7:
df:22:f4:78:64:ea:f8:ad:8c:2e:35:94:eb:4c:43:ea:74:24:
8c:d8:c5:60:08:01:b6:e2:9b:ac:04:00:9f:a0:a6:04:58:d2:
56:82:cc:60:1f:c8:69:fb:4a:2e:30:bf:8a:73:f6:e1:f8:24:
c5:54:c1:fc:08:7c:3c:be:8c:5b:a3:80:6c:fa:06:9e:53:e8:
1d:5b:a7:db:4f:7d:91:ec:1b:a7:93:27:4c:78:b0:76:a4:7e:
56:c1:50:3b:a2:35:88:cd:02:14:3b:89:b5:7a:9d:a2:e0:f5:
ea:b1:c8:c7:5d:bd:ed:0b:ff:2f:f8:e7:e0:44:61:e7:2d:10:
67:e5:90:b1:f1:64:7d:69:31:d8:5c:ef:c9:6e:f8:c6:2e:e8:
fe:09:47:74:9d:8a:94:76:8a:74:ee:ac:3a:8e:d9:0a:13:e4:
1c:8f:43:6d:f0:45:0a:57:81:2c:29:9d:13:22:8b:47:eb:56:
40:0e:ab:dd:61:f1:19:6c:30:84:53:b4:d5:93:ab:b8:d1:7e:
22:ae:1c:61:d7:a2:24:b8:53:85:6d:f1:69:c8:ce:c4:1a:69:
a3:9c:a4:a1
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAY3dnUhstAGSlrnuMQJ7JcVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMjI1MDAxNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjdlYWNkOGEzZTM3NTk3MzJmMjg3ZmU5MTg5ZmNiNmFkMzMwYTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1KkDJz+UXxfufx1znfUM7hdG5bu
3wLzljuuqWoh7glgpazUauK3f4QU99+DD0pJfk9+iIHnqoglKcFc8W3+CWxxM9uU
BbPmRNDPmTY22Bdkf1uUk33guLdkolxcFUB1zEs1c07rHHBk8AFkQBkTB6tQ9IAk
RuBh8zxbRw2K8SLlkiM5PbIEiKsYBMNEA4+XyEP+yhvp/cYaQOhhfWpMEAhz87l1
bHCns2IBHCMAb+q4BiDyaWQh1bn9gaaiwDHza5RiKgB6HvgSK5U1evO0bY6q8oVw
XhUlyt10jI1P+w0+wNmMjFqoottHvQ9soydYSnIMrb+DDEgvNTvIDSQI5wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFI9+rNij43WXMvKH/pGJ/LatMwo9MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvajM2czJLUGpkWmN5OG9mLWtZbjh0cTB6Q2owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALQheAwQA
LQ6mAwQBV3hEAwQBV3k8AwQAW1waAwQBXXtKAwQAXXtQAwQBufygAwQB1FfMMA0G
CSqGSIb3DQEBCwUAA4IBAQBLT/gQky+bzasGkjHxmNmhxxNM06uUHx6dO5DgNGKl
TRdfM9ffIvR4ZOr4rYwuNZTrTEPqdCSM2MVgCAG24pusBACfoKYEWNJWgsxgH8hp
+0ouML+Kc/bh+CTFVMH8CHw8voxbo4Bs+gaeU+gdW6fbT32R7BunkydMeLB2pH5W
wVA7ojWIzQIUO4m1ep2i4PXqscjHXb3tC/8v+OfgRGHnLRBn5ZCx8WR9aTHYXO/J
bvjGLuj+CUd0nYqUdop07qw6jtkKE+Qcj0Nt8EUKV4EsKZ0TIotH61ZADqvdYfEZ
bDCEU7TVk6u40X4irhxh16IkuFOFbfFpyM7EGmmjnKSh
-----END CERTIFICATE-----
Generated at Mon Feb 26 02:08:02 2024 by rpki-client on console-ams.rpki-client.org