Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jJHfFZeT7zlq1YviBIuxuSeKliU.roa
File: jJHfFZeT7zlq1YviBIuxuSeKliU.roa (raw, json)
Hash identifier: lc7stBsFynp3RYoac2r8V4xQAQmybkBHSB+czavAPlA=
Subject key identifier: 8C:91:DF:15:97:93:EF:39:6A:D5:8B:E2:04:8B:B1:B9:27:8A:96:25
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DEEEE43AEA579736CA823B7EFD8B938F2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jJHfFZeT7zlq1YviBIuxuSeKliU.roa
Signing time: Wed 28 Feb 2024 08:56:48 +0000
ROA not before: Wed 28 Feb 2024 08:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 45.8.93.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.31.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
212.87.207.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 13:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ee:ee:43:ae:a5:79:73:6c:a8:23:b7:ef:d8:b9:38:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 28 08:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c91df159793ef396ad58be2048bb1b9278a9625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:22:2f:c9:97:09:83:0b:b8:4d:63:5b:9a:
75:8c:53:53:f3:6b:72:91:80:84:9a:67:3a:25:12:
29:d7:30:ad:01:51:5a:a9:3c:ed:d3:53:51:a3:a6:
ff:14:85:8c:08:75:f9:f6:2a:cf:ab:ca:03:47:4a:
99:61:cd:6d:cf:70:a5:69:86:6a:f0:5c:9c:02:5e:
00:4a:39:cb:bd:7a:74:e1:f7:65:19:d4:23:cf:00:
29:5e:72:27:7a:2d:9f:b5:af:26:7f:c2:c4:1c:72:
9a:db:72:42:9a:11:dd:b8:a6:e8:c5:c9:d0:b7:3c:
fa:d3:3c:02:d0:9c:f6:79:47:31:14:a2:4c:71:9c:
56:49:91:d3:a6:d0:aa:86:5b:c5:ee:f0:9d:75:ec:
5e:91:4b:53:95:af:af:84:52:ae:f3:d3:a3:05:90:
97:a9:e6:42:58:f4:7a:80:bf:dc:7b:70:06:9f:63:
6b:c3:12:48:51:dc:c4:00:fc:af:61:8f:36:b4:fd:
63:00:44:ee:b9:62:6d:85:4c:42:09:54:32:7f:b4:
29:a3:4c:34:4b:ab:03:ff:d7:1e:37:54:a4:90:9a:
8c:fe:6b:a1:5c:e1:8c:79:b2:44:3d:38:40:2e:79:
3b:cd:bb:05:0d:54:8f:c4:c2:68:14:52:46:f6:e5:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:91:DF:15:97:93:EF:39:6A:D5:8B:E2:04:8B:B1:B9:27:8A:96:25
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jJHfFZeT7zlq1YviBIuxuSeKliU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
45.12.255.0/24
45.66.228.0/24
79.110.50.0/24
82.115.211.0/24
87.121.105.0/24
94.156.176.0/24
178.215.238.0/24
193.37.47.0/24
193.149.28.0/22
194.180.36.0/24
212.87.207.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ec:2b:4e:d5:23:6d:37:9e:93:bc:80:55:4a:e9:8d:35:c4:
9b:45:66:70:d0:69:31:85:41:34:9a:7a:2d:e2:51:7b:6c:f8:
97:21:49:ba:cb:46:69:01:c7:db:b0:c1:db:3e:cb:15:61:ff:
f9:a1:d1:f5:2a:de:a4:e8:b0:ca:e9:02:5b:58:23:59:43:10:
c5:4c:80:f6:98:6f:bc:13:40:97:f2:f8:75:48:fb:21:59:5d:
b4:e0:87:e5:ea:19:de:c9:b0:38:5d:be:64:73:e4:17:04:f4:
20:d0:31:1b:b9:c7:8e:0a:5e:c6:16:8d:99:0b:d7:bc:e9:39:
7d:32:ce:13:44:4b:11:8a:4d:c0:e7:93:07:67:ab:6c:6b:3f:
5e:71:09:a7:c4:15:8b:4e:90:09:0e:b2:7f:31:74:56:2b:cf:
af:fc:e6:a7:b3:cf:2a:f4:9e:04:38:fc:a0:f9:9a:fb:c4:0b:
24:b3:2a:d8:07:cb:25:bd:6d:65:ee:4e:1d:fd:a4:18:6b:38:
2f:fe:45:1d:c5:35:92:d5:b9:07:36:cf:29:7d:cc:27:a7:d3:
46:83:9d:43:41:7d:8c:5a:59:71:f6:c2:45:0b:47:38:3b:fd:
dc:96:db:43:78:e5:53:21:61:56:e3:22:a3:cc:bb:69:71:89:
91:b1:56:a3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAY3u7kOupXlzbKgjt+/YuTjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMjI4MDg1NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzkxZGYxNTk3OTNlZjM5NmFkNThiZTIwNDhiYjFiOTI3OGE5NjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWgiL8mXCYMLuE1jW5p1jFNT82ty
kYCEmmc6JRIp1zCtAVFaqTzt01NRo6b/FIWMCHX59irPq8oDR0qZYc1tz3ClaYZq
8FycAl4ASjnLvXp04fdlGdQjzwApXnInei2fta8mf8LEHHKa23JCmhHduKboxcnQ
tzz60zwC0Jz2eUcxFKJMcZxWSZHTptCqhlvF7vCddexekUtTla+vhFKu89OjBZCX
qeZCWPR6gL/ce3AGn2NrwxJIUdzEAPyvYY82tP1jAETuuWJthUxCCVQyf7Qpo0w0
S6sD/9ceN1SkkJqM/muhXOGMebJEPThALnk7zbsFDVSPxMJoFFJG9uWt9QIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFIyR3xWXk+85atWL4gSLsbknipYlMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvakpIZkZaZVQ3emxxMVl2aUJJdXh1U2VLbGlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQALQhdAwQA
LQz/AwQALULkAwQAT24yAwQAUnPTAwQAV3lpAwQAXpywAwQAstfuAwQAwSUvAwQC
wZUcAwQAwrQkAwQA1FfPAwQA1HMpMA0GCSqGSIb3DQEBCwUAA4IBAQAA7CtO1SNt
N56TvIBVSumNNcSbRWZw0GkxhUE0mnot4lF7bPiXIUm6y0ZpAcfbsMHbPssVYf/5
odH1Kt6k6LDK6QJbWCNZQxDFTID2mG+8E0CX8vh1SPshWV204Ifl6hneybA4Xb5k
c+QXBPQg0DEbuceOCl7GFo2ZC9e86Tl9Ms4TREsRik3A55MHZ6tsaz9ecQmnxBWL
TpAJDrJ/MXRWK8+v/Oans88q9J4EOPyg+Zr7xAsksyrYB8slvW1l7k4d/aQYazgv
/kUdxTWS1bkHNs8pfcwnp9NGg51DQX2MWllx9sJFC0c4O/3clttDeOVTIWFW4yKj
zLtpcYmRsVaj
-----END CERTIFICATE-----
Generated at Thu Mar 7 17:08:10 2024 by rpki-client on console-ams.rpki-client.org