Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lD0CwbFkCm4hajGyrOfANtHrMuo.roa
File: lD0CwbFkCm4hajGyrOfANtHrMuo.roa (raw, json)
Hash identifier: f3yReQ30VfEVE7yvn4ZYobz/PkVtfUR+bhXSB0q521k=
Subject key identifier: 94:3D:02:C1:B1:64:0A:6E:21:6A:31:B2:AC:E7:C0:36:D1:EB:32:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01858AEACE3035B03E06D441A168B67D0432
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lD0CwbFkCm4hajGyrOfANtHrMuo.roa
Signing time: Sat 07 Jan 2023 06:28:42 +0000
ROA not before: Sat 07 Jan 2023 06:28:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 45.66.230.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
194.180.48.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8a:ea:ce:30:35:b0:3e:06:d4:41:a1:68:b6:7d:04:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 7 06:28:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=943d02c1b1640a6e216a31b2ace7c036d1eb32ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8a:f1:08:86:e2:0a:ad:fa:f3:48:16:96:9d:
53:54:dd:52:fe:c3:63:d4:74:4a:10:5b:d6:e0:20:
ef:30:32:ee:24:00:5a:af:b4:fe:28:d6:d4:cd:72:
f0:a6:dc:bd:8c:2e:cf:48:8e:dc:42:20:5e:fe:25:
6d:b7:82:c6:2b:4e:7a:6e:5a:2c:f1:bf:19:78:6e:
bd:6a:07:53:04:08:47:7b:5b:e2:9b:95:60:00:6c:
f5:d3:1f:e8:a8:46:d5:ca:77:00:32:fa:38:fb:5f:
14:4c:a8:8d:1c:d1:ca:81:b6:bc:0d:96:78:c4:75:
6c:76:d4:27:be:09:bb:99:54:3f:a6:01:b6:ed:80:
16:d2:ae:10:4c:22:66:aa:dc:0d:84:87:14:5e:07:
59:9d:c3:c3:26:ee:4f:4f:a5:0a:2e:a8:42:7a:76:
4a:32:5a:86:85:b8:23:04:0d:f9:51:a7:00:38:a2:
2b:cc:b3:38:ab:19:78:67:94:ad:69:90:b5:93:35:
f8:be:02:a2:18:fd:54:16:e9:6c:d3:dd:47:06:4c:
28:ae:bf:e0:e2:11:94:fb:c1:da:8f:f4:aa:3c:c5:
2d:09:12:f3:06:16:20:af:7d:ab:ea:40:bb:1f:9a:
2f:8c:f4:e1:0c:6b:d3:99:e7:94:d3:fd:3c:8c:09:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3D:02:C1:B1:64:0A:6E:21:6A:31:B2:AC:E7:C0:36:D1:EB:32:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lD0CwbFkCm4hajGyrOfANtHrMuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/23
45.66.230.0/24
45.81.39.0/24
79.110.62.0/23
80.76.51.0/24
84.21.172.0/24
85.31.44.0/24
85.31.46.0/24
85.217.145.0/24
109.206.240.0/23
109.206.243.0/24
185.216.71.0/24
185.225.73.0-185.225.74.255
185.246.220.0/23
185.252.178.0/24
185.254.37.0/24
193.47.61.0/24
194.55.186.0/24
194.180.48.0/23
Signature Algorithm: sha256WithRSAEncryption
25:86:dc:10:3d:88:49:db:0a:d6:7d:de:a2:02:2f:89:9d:ce:
84:00:4e:81:90:2d:80:43:68:6c:fc:97:42:23:86:51:bf:5a:
2a:91:3e:b7:67:29:7e:ff:e2:cb:e7:be:a6:ef:59:4e:64:25:
74:0e:f9:3c:2b:d5:8b:27:92:5f:1b:37:2b:09:fa:fb:c3:22:
72:bd:5e:9a:9e:bf:2d:8b:a3:dc:9d:6f:41:e0:9f:24:95:b7:
55:de:37:ff:77:c4:2c:33:af:97:a9:5f:ff:94:03:8a:dd:9e:
4e:ef:59:d8:f7:03:4c:57:e7:ee:a4:ff:a3:50:fa:a1:b0:c7:
a4:b2:8d:8e:ee:44:83:66:2a:3a:b9:5a:b8:7f:ad:a5:cd:85:
44:b4:72:2c:f3:6a:01:5c:a3:e4:4a:f2:12:60:22:5f:bd:49:
6f:cd:1a:91:44:81:22:6c:98:20:95:c6:77:58:0e:62:f3:44:
8a:4c:52:f3:6a:23:22:41:f0:3a:17:89:47:1f:b5:29:08:0b:
a0:30:ba:c0:7b:4a:a9:68:10:06:3a:ea:03:d5:4a:60:98:49:
00:e3:f5:2e:b3:30:41:c5:65:d6:66:69:af:dd:a2:73:6e:9a:
9d:e4:5c:7c:16:af:59:b2:f9:1f:8a:78:08:cc:dc:fd:d1:97:
ab:20:0d:92
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISAYWK6s4wNbA+BtRBoWi2fQQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTA3MDYyODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDNkMDJjMWIxNjQwYTZlMjE2YTMxYjJhY2U3YzAzNmQxZWIzMmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4rxCIbiCq3680gWlp1TVN1S/sNj
1HRKEFvW4CDvMDLuJABar7T+KNbUzXLwpty9jC7PSI7cQiBe/iVtt4LGK056blos
8b8ZeG69agdTBAhHe1vim5VgAGz10x/oqEbVyncAMvo4+18UTKiNHNHKgba8DZZ4
xHVsdtQnvgm7mVQ/pgG27YAW0q4QTCJmqtwNhIcUXgdZncPDJu5PT6UKLqhCenZK
MlqGhbgjBA35UacAOKIrzLM4qxl4Z5StaZC1kzX4vgKiGP1UFuls091HBkworr/g
4hGU+8Haj/SqPMUtCRLzBhYgr32r6kC7H5ovjPThDGvTmeeU0/08jAl7LwIDAQAB
o4ICgTCCAn0wHQYDVR0OBBYEFJQ9AsGxZApuIWoxsqznwDbR6zLqMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbEQwQ3diRmtDbTRoYWpHeXJPZkFOdEhyTXVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEASWL
gAMEAC1C5gMEAC1RJwMEAU9uPgMEAFBMMwMEAFQVrAMEAFUfLAMEAFUfLgMEAFXZ
kQMEAW3O8AMEAG3O8wMEALnYRzAMAwQAueFJAwQAueFKAwQBufbcAwQAufyyAwQA
uf4lAwQAwS89AwQAwje6AwQBwrQwMA0GCSqGSIb3DQEBCwUAA4IBAQAlhtwQPYhJ
2wrWfd6iAi+Jnc6EAE6BkC2AQ2hs/JdCI4ZRv1oqkT63Zyl+/+LL576m71lOZCV0
Dvk8K9WLJ5JfGzcrCfr7wyJyvV6anr8ti6PcnW9B4J8klbdV3jf/d8QsM6+XqV//
lAOK3Z5O71nY9wNMV+fupP+jUPqhsMekso2O7kSDZio6uVq4f62lzYVEtHIs82oB
XKPkSvISYCJfvUlvzRqRRIEibJgglcZ3WA5i80SKTFLzaiMiQfA6F4lHH7UpCAug
MLrAe0qpaBAGOuoD1UpgmEkA4/UuszBBxWXWZmmv3aJzbpqd5Fx8Fq9ZsvkfingI
zNz90ZerIA2S
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org