Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r3zWHdWrye2BJgvLlIDIivA-eeE.roa
File: r3zWHdWrye2BJgvLlIDIivA-eeE.roa (raw, json)
Hash identifier: TUZNVLrDGsFeVFJzoOcZ8tnvqP1Tg3UKYjzzeaXLtvk=
Subject key identifier: AF:7C:D6:1D:D5:AB:C9:ED:81:26:0B:CB:94:80:C8:8A:F0:3E:79:E1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DB087BD1CCDE767C3818BA216170C66AF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r3zWHdWrye2BJgvLlIDIivA-eeE.roa
Signing time: Fri 16 Feb 2024 06:08:22 +0000
ROA not before: Fri 16 Feb 2024 06:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.253.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
94.156.75.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 07:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b0:87:bd:1c:cd:e7:67:c3:81:8b:a2:16:17:0c:66:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 16 06:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af7cd61dd5abc9ed81260bcb9480c88af03e79e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:fd:70:01:c3:18:5b:85:2f:85:ca:77:d1:
5b:e2:e3:32:a9:b3:54:2b:6c:05:46:53:cf:54:47:
40:c3:2b:2c:a4:1b:46:21:95:a6:45:ff:cd:1d:38:
cd:1f:41:41:8c:2f:8e:a3:cf:14:6f:04:3d:74:e1:
7c:5c:25:c8:38:f2:7b:82:1f:3b:1a:17:c2:e9:6d:
35:b6:0a:1d:f3:96:dd:99:86:92:9d:4a:1c:83:93:
3b:b0:9b:6c:d4:95:fe:5d:e4:35:c8:21:aa:69:1f:
45:d3:48:ac:c4:b4:09:e1:a2:12:62:cc:e0:e9:0b:
f7:9d:39:0b:83:ba:ab:0c:06:b0:00:58:65:52:14:
cb:20:4c:a9:f3:c9:99:4d:83:b4:10:29:52:e9:f5:
16:a9:ba:9a:24:26:7d:ac:4c:42:d0:bd:c6:47:f8:
45:50:76:1d:86:bd:84:65:bb:23:af:dc:56:78:3a:
ca:78:b9:e0:11:aa:c9:59:83:55:44:03:3c:4c:30:
7d:f7:5c:85:f3:23:1b:70:a0:21:89:c7:9f:26:c2:
5f:71:83:7c:77:4e:af:b5:9a:f9:89:0f:0e:9c:f7:
b8:78:0c:3b:c8:f3:54:32:fd:5b:7f:2b:f8:8e:1a:
e5:2e:ce:69:9a:16:84:1c:c8:bd:06:7e:b9:a5:d3:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7C:D6:1D:D5:AB:C9:ED:81:26:0B:CB:94:80:C8:8A:F0:3E:79:E1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r3zWHdWrye2BJgvLlIDIivA-eeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.9.156.0/24
45.84.89.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
83.219.97.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
94.156.75.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
185.222.160.0-185.222.162.255
185.246.223.0/24
193.25.217.0/24
193.35.19.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.55.187.0/24
194.55.225.0/24
194.59.31.0/24
194.169.172.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:36:5b:a9:ba:03:0a:01:63:1a:5f:6c:a5:57:b8:ea:6c:18:
f3:11:c6:50:02:5e:74:4a:52:22:50:7e:a3:63:33:9b:31:86:
84:70:2c:37:48:bd:39:b6:e7:08:2e:a8:ab:91:66:24:a2:42:
37:f0:51:49:d0:64:09:e0:de:0c:17:3e:d4:93:50:aa:a1:26:
c2:66:2f:0b:3c:42:1b:6e:51:33:ef:31:2d:b3:d3:aa:d2:e3:
0e:7d:dc:48:65:08:8b:71:1f:b9:01:70:22:be:c7:56:a1:b1:
92:10:40:c7:e4:eb:17:ec:c3:7e:a4:10:44:7b:60:c4:6b:20:
18:93:57:95:78:18:4c:66:68:9d:ec:42:c5:74:57:99:96:af:
ef:47:42:8e:e0:53:81:4c:4d:7d:c2:05:ff:06:43:00:78:56:
15:82:0e:f1:91:0a:e5:dc:26:1d:62:0f:b0:53:c0:1e:af:68:
c8:2d:e3:3a:88:c8:2f:68:2d:93:80:f3:50:9e:1b:37:08:f5:
c1:6a:4b:d4:f0:92:2b:be:fe:d7:d2:54:c5:4f:80:f1:30:52:
60:a1:13:dd:97:00:5b:3f:bc:9c:6c:d0:d2:62:2d:ce:19:2f:
cd:7d:69:e3:ef:d3:fb:91:f7:4d:e1:8c:45:b4:a3:84:6a:60:
42:d6:d8:a6
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAY2wh70czednw4GLohYXDGavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMjE2MDYwODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjdjZDYxZGQ1YWJjOWVkODEyNjBiY2I5NDgwYzg4YWYwM2U3OWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEP9cAHDGFuFL4XKd9Fb4uMyqbNU
K2wFRlPPVEdAwysspBtGIZWmRf/NHTjNH0FBjC+Oo88UbwQ9dOF8XCXIOPJ7gh87
GhfC6W01tgod85bdmYaSnUocg5M7sJts1JX+XeQ1yCGqaR9F00isxLQJ4aISYszg
6Qv3nTkLg7qrDAawAFhlUhTLIEyp88mZTYO0EClS6fUWqbqaJCZ9rExC0L3GR/hF
UHYdhr2EZbsjr9xWeDrKeLngEarJWYNVRAM8TDB991yF8yMbcKAhicefJsJfcYN8
d06vtZr5iQ8OnPe4eAw7yPNUMv1bfyv4jhrlLs5pmhaEHMi9Bn65pdN2swIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFK981h3Vq8ntgSYLy5SAyIrwPnnhMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcjN6V0hkV3J5ZTJCSmd2TGxJRElpdkEtZWVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHZBggrBgEFBQcBBwEB/wSByTCBxjCBwwQCAAEwgbwDBAAC
O/0DBAAtCZwDBAAtVFkDBAAtVFsDBAAtWEADBAAtWFsDBABPbjMDBABT22EDBABc
d8YDBABc+TIDBABemqIDBABenEsDBABtzu8DBACy1+EDBACy1+MDBACy1+wwDAME
BbneoAMEALneogMEALn23wMEAMEZ2QMEAMEjEwMEAMElKAMEAMElKgMEAMElLAME
AMHeYQMEAMHeYwMEAMI3uwMEAMI34QMEAMI7HwMEAMKprAMEAMK0JjANBgkqhkiG
9w0BAQsFAAOCAQEAXjZbqboDCgFjGl9spVe46mwY8xHGUAJedEpSIlB+o2MzmzGG
hHAsN0i9ObbnCC6oq5FmJKJCN/BRSdBkCeDeDBc+1JNQqqEmwmYvCzxCG25RM+8x
LbPTqtLjDn3cSGUIi3EfuQFwIr7HVqGxkhBAx+TrF+zDfqQQRHtgxGsgGJNXlXgY
TGZonexCxXRXmZav70dCjuBTgUxNfcIF/wZDAHhWFYIO8ZEK5dwmHWIPsFPAHq9o
yC3jOojIL2gtk4DzUJ4bNwj1wWpL1PCSK77+19JUxU+A8TBSYKET3ZcAWz+8nGzQ
0mItzhkvzX1p4+/T+5H3TeGMRbSjhGpgQtbYpg==
-----END CERTIFICATE-----
Generated at Fri Feb 16 09:57:33 2024 by rpki-client on console-ams.rpki-client.org