Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nTVzxRMbIgIspTQ1MVmp6fTT7eo.roa
File: nTVzxRMbIgIspTQ1MVmp6fTT7eo.roa (raw, json)
Hash identifier: 6kGeB3E5T/UrFNe/D9cb1ajMQzvbv95QJnwHjlytkro=
Subject key identifier: 9D:35:73:C5:13:1B:22:02:2C:A5:34:35:31:59:A9:E9:F4:D3:ED:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187560ECA73E35ED86C72E044D12EB101D2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nTVzxRMbIgIspTQ1MVmp6fTT7eo.roa
Signing time: Thu 06 Apr 2023 10:13:42 +0000
ROA not before: Thu 06 Apr 2023 10:13:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 84.54.51.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
93.123.118.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:0e:ca:73:e3:5e:d8:6c:72:e0:44:d1:2e:b1:01:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 6 10:13:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d3573c5131b22022ca534353159a9e9f4d3edea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:35:b2:2e:04:6f:f2:bc:f5:2b:66:f3:43:
a9:18:6e:a6:5b:78:2f:fe:1f:c3:f1:ab:62:fa:88:
a4:55:ea:2a:25:e5:f3:c8:2a:46:21:e5:19:00:db:
92:7e:df:b1:da:b7:f4:ad:4f:f2:d4:f0:30:bc:1e:
4a:8e:17:cd:c0:45:2e:b8:9e:0d:ba:10:50:31:4c:
f4:98:dd:9d:f3:32:5c:53:53:b9:6e:13:8d:f4:2e:
f7:cd:9f:62:b6:4d:42:92:f5:8b:b4:ac:53:43:49:
9f:32:7b:4f:c5:54:9d:4e:b7:3a:4e:90:6b:89:cb:
5b:51:42:14:2a:dd:20:0e:a8:80:8d:1f:02:af:e4:
5b:61:1b:2b:4b:7f:7d:8f:54:2d:64:ed:6f:3c:e3:
7a:8a:8e:af:98:b5:7e:40:3c:96:04:30:be:5b:a3:
75:fb:c8:f4:df:54:ae:f7:37:52:39:4b:79:85:59:
21:23:0f:bc:86:b8:9b:1a:cb:a7:23:15:84:da:ad:
2c:8a:10:09:e9:ec:fd:6b:19:b3:84:b6:7a:52:82:
9f:d1:ac:05:cf:ad:f9:b1:7d:62:49:9d:69:df:dd:
3a:fc:18:f8:0d:9a:60:d4:c2:a5:fe:eb:0d:b5:78:
6b:f9:3a:b2:f5:6f:9a:0b:33:c7:4f:8c:05:b1:3e:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:35:73:C5:13:1B:22:02:2C:A5:34:35:31:59:A9:E9:F4:D3:ED:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nTVzxRMbIgIspTQ1MVmp6fTT7eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.51.0/24
87.120.84.0/24
93.123.118.0/24
94.156.102.0/24
147.78.103.0/24
185.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:91:78:81:c9:7a:f0:81:43:cc:77:ed:34:91:a0:01:2a:b4:
d6:09:7b:c1:63:27:28:a9:03:2a:85:ae:e8:d7:78:07:9c:8b:
10:b4:8b:f2:a3:02:9f:42:39:e8:c2:4c:c7:d1:75:e5:69:b4:
36:bc:96:42:ea:9b:7f:25:c7:89:8c:b9:56:16:c1:2b:3f:92:
98:ea:1a:e6:2c:ee:20:c8:a6:cc:d7:2b:1e:bd:b4:6d:98:3a:
53:18:d3:b6:de:dd:2a:bb:0d:f8:bd:d8:37:97:06:f9:03:0e:
23:83:5c:fd:19:99:d0:6e:41:56:46:ce:0a:cf:b6:f0:8a:af:
f4:f3:9b:31:b2:87:7b:44:36:97:cb:cb:f9:3e:d0:cf:e7:07:
6f:b7:74:a3:fd:fb:ef:73:8b:5a:cd:0c:72:63:e2:8e:0e:1c:
87:7d:a6:f8:d4:82:4c:4e:89:c0:0a:54:97:ae:00:06:27:4e:
8a:9e:dd:ca:f3:9f:0c:e3:8b:b8:39:d9:18:95:09:09:be:05:
f3:97:8f:92:0f:cc:e5:3e:e8:eb:17:01:39:aa:ef:31:03:4c:
0a:a2:99:73:22:c4:d5:e3:d9:93:69:eb:49:b9:6e:58:ad:3d:
12:2f:61:df:fc:e8:c4:be:43:7f:d8:e5:a4:52:71:c4:fb:6a:
ad:a8:58:f5
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYdWDspz417YbHLgRNEusQHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNDA2MTAxMzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDM1NzNjNTEzMWIyMjAyMmNhNTM0MzUzMTU5YTllOWY0ZDNlZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i41si4Eb/K89Stm80OpGG6mW3gv
/h/D8ati+oikVeoqJeXzyCpGIeUZANuSft+x2rf0rU/y1PAwvB5KjhfNwEUuuJ4N
uhBQMUz0mN2d8zJcU1O5bhON9C73zZ9itk1CkvWLtKxTQ0mfMntPxVSdTrc6TpBr
ictbUUIUKt0gDqiAjR8Cr+RbYRsrS399j1QtZO1vPON6io6vmLV+QDyWBDC+W6N1
+8j031Su9zdSOUt5hVkhIw+8hribGsunIxWE2q0sihAJ6ez9axmzhLZ6UoKf0awF
z635sX1iSZ1p3906/Bj4DZpg1MKl/usNtXhr+Tqy9W+aCzPHT4wFsT5OrQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJ01c8UTGyICLKU0NTFZqen00+3qMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvblRWenhSTWJJZ0lzcFRRMU1WbXA2ZlRUN2VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVDYzAwQA
V3hUAwQAXXt2AwQAXpxmAwQAk05nAwQAufbcMA0GCSqGSIb3DQEBCwUAA4IBAQAu
kXiByXrwgUPMd+00kaABKrTWCXvBYycoqQMqha7o13gHnIsQtIvyowKfQjnowkzH
0XXlabQ2vJZC6pt/JceJjLlWFsErP5KY6hrmLO4gyKbM1ysevbRtmDpTGNO23t0q
uw34vdg3lwb5Aw4jg1z9GZnQbkFWRs4Kz7bwiq/085sxsod7RDaXy8v5PtDP5wdv
t3Sj/fvvc4tazQxyY+KODhyHfab41IJMTonAClSXrgAGJ06Knt3K858M44u4OdkY
lQkJvgXzl4+SD8zlPujrFwE5qu8xA0wKoplzIsTV49mTaetJuW5YrT0SL2Hf/OjE
vkN/2OWkUnHE+2qtqFj1
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org