Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lp0ac1012JPGE1uKEZu2YG-OBCk.roa
File: lp0ac1012JPGE1uKEZu2YG-OBCk.roa (raw, json)
Hash identifier: EfXhyQCY+DqBAH0UXxdvg1XQeqEwucm0+SzVdIzyiL4=
Subject key identifier: 96:9D:1A:73:5D:35:D8:93:C6:13:5B:8A:11:9B:B6:60:6F:8E:04:29
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01888C17722D82CDD279FD3930AA83AA3D2A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lp0ac1012JPGE1uKEZu2YG-OBCk.roa
Signing time: Mon 05 Jun 2023 15:05:26 +0000
ROA not before: Mon 05 Jun 2023 15:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
94.103.126.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:17:72:2d:82:cd:d2:79:fd:39:30:aa:83:aa:3d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 5 15:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=969d1a735d35d893c6135b8a119bb6606f8e0429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:19:91:0b:53:b7:de:d7:56:0a:f8:2e:f9:bb:
32:d3:d6:5e:f7:27:3c:bf:a5:f5:1f:08:ef:22:ab:
0c:76:26:11:b3:49:47:95:3e:9f:4e:b2:e4:f5:ee:
82:a9:5e:c6:e1:fd:48:49:d8:9d:9f:dd:39:5d:fd:
02:f2:88:5c:79:06:fb:d8:25:5f:84:4f:7a:7b:86:
18:4b:26:08:b0:04:40:cd:61:d9:5b:d6:11:44:48:
3f:9a:44:4d:16:b5:3e:79:ed:6d:51:1c:e3:bf:3e:
6f:33:36:dd:6e:75:fe:b2:d8:f2:c7:c3:cb:94:eb:
43:b5:74:ac:68:8e:90:58:dd:e3:66:e1:fe:a9:c7:
d8:06:34:d5:05:9a:a8:45:6b:67:b2:64:9b:f9:e7:
05:86:96:d2:fe:a8:fd:a8:55:af:12:82:c5:c8:2e:
bd:ab:66:ad:13:c9:81:dc:20:71:23:86:ac:49:3a:
d1:94:24:90:35:86:c6:a7:ea:80:97:34:7a:46:6f:
2e:da:c5:26:50:be:48:9f:26:06:1d:f5:6f:00:ae:
c9:42:48:ef:c9:d0:d4:f9:d4:e8:7f:47:c5:9b:5d:
fb:7e:50:8e:20:69:33:c8:63:38:21:a9:24:98:4f:
41:92:d5:f3:a8:45:45:7c:2d:d4:21:5d:95:2d:d1:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9D:1A:73:5D:35:D8:93:C6:13:5B:8A:11:9B:B6:60:6F:8E:04:29
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lp0ac1012JPGE1uKEZu2YG-OBCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.89.0/24
92.119.196.0/23
94.103.126.0/24
94.154.161.0-94.154.163.255
94.156.239.0/24
147.78.100.0/23
171.22.72.0/22
178.215.236.0/24
185.216.70.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8f:b6:db:89:bd:c0:fb:dd:d0:fe:9c:61:d1:6d:a0:c7:6f:
63:c3:0e:20:3e:d6:91:b0:b5:d1:9f:5e:16:63:41:37:aa:f0:
89:4e:bc:37:58:ae:a8:29:6b:d7:eb:a2:8a:a5:92:59:3c:11:
2c:72:68:92:ee:dc:ac:7e:8b:ef:4e:03:22:1c:6c:08:60:a0:
19:0f:6a:48:7f:ff:c7:2a:e2:82:49:3d:3b:79:ef:fd:c5:e7:
02:5e:18:6f:98:34:10:f2:b1:d2:be:44:bf:a1:e9:45:29:d4:
df:c5:b4:8e:70:05:0a:e9:87:26:12:72:6c:d6:07:8d:0b:fc:
fe:44:3c:2c:a8:17:18:1e:09:db:41:f0:54:58:cc:2a:e5:38:
bb:ba:3a:22:c3:78:e4:7d:56:e9:ed:27:87:19:94:04:eb:bd:
5a:5d:d1:f2:12:b5:62:36:52:a1:e6:e8:5a:62:c6:0f:68:d3:
88:88:86:47:de:9e:d0:94:01:04:97:4c:22:c4:88:6d:9f:f9:
65:08:cc:ed:48:b7:80:40:3c:55:08:f1:56:53:1d:da:0d:a3:
1e:35:af:03:cc:4a:c1:87:52:6e:ab:04:82:8c:f1:ce:f7:39:
3c:c9:29:90:62:15:bd:f1:40:06:7d:e6:f2:89:fc:aa:a3:44:
38:e5:25:9e
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYiMF3Itgs3Sef05MKqDqj0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNjA1MTUwNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjlkMWE3MzVkMzVkODkzYzYxMzViOGExMTliYjY2MDZmOGUwNDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhmRC1O33tdWCvgu+bsy09Ze9yc8
v6X1HwjvIqsMdiYRs0lHlT6fTrLk9e6CqV7G4f1ISdidn905Xf0C8ohceQb72CVf
hE96e4YYSyYIsARAzWHZW9YRREg/mkRNFrU+ee1tURzjvz5vMzbdbnX+stjyx8PL
lOtDtXSsaI6QWN3jZuH+qcfYBjTVBZqoRWtnsmSb+ecFhpbS/qj9qFWvEoLFyC69
q2atE8mB3CBxI4asSTrRlCSQNYbGp+qAlzR6Rm8u2sUmUL5InyYGHfVvAK7JQkjv
ydDU+dTof0fFm137flCOIGkzyGM4IakkmE9BktXzqEVFfC3UIV2VLdH/mwIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFJadGnNdNdiTxhNbihGbtmBvjgQpMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbHAwYWMxMDEySlBHRTF1S0VadTJZRy1PQkNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQALZdZAwQB
XHfEAwQAXmd+MAwDBABemqEDBAJemqADBABenO8DBAGTTmQDBAKrFkgDBACy1+wD
BAC52EYDBAK52FQDBAK52lQDBAC52okDBAC5234wDQYJKoZIhvcNAQELBQADggEB
AB6PttuJvcD73dD+nGHRbaDHb2PDDiA+1pGwtdGfXhZjQTeq8IlOvDdYrqgpa9fr
ooqlklk8ESxyaJLu3Kx+i+9OAyIcbAhgoBkPakh//8cq4oJJPTt57/3F5wJeGG+Y
NBDysdK+RL+h6UUp1N/FtI5wBQrphyYScmzWB40L/P5EPCyoFxgeCdtB8FRYzCrl
OLu6OiLDeOR9VuntJ4cZlATrvVpd0fIStWI2UqHm6Fpixg9o04iIhkfentCUAQSX
TCLEiG2f+WUIzO1It4BAPFUI8VZTHdoNox41rwPMSsGHUm6rBIKM8c73OTzJKZBi
Fb3xQAZ95vKJ/KqjRDjlJZ4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org