Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rpQnyQpZj6E2EjlwCJdBsOqlS48.roa
File: rpQnyQpZj6E2EjlwCJdBsOqlS48.roa (raw, json)
Hash identifier: l6gSgBTDZRroNEHh5IXfmcyS84fXfTWeeCc/5wvG82U=
Subject key identifier: AE:94:27:C9:0A:59:8F:A1:36:12:39:70:08:97:41:B0:EA:A5:4B:8F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192D6D32FE166D6458D6899A8E02EC4CB44
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rpQnyQpZj6E2EjlwCJdBsOqlS48.roa
Signing time: Tue 29 Oct 2024 05:50:17 +0000
ROA not before: Tue 29 Oct 2024 05:50:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 5.253.59.0/24 maxlen: 24
45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
45.95.0.0/22 maxlen: 24
45.149.235.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.217.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
93.123.31.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
193.8.185.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 07:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d6:d3:2f:e1:66:d6:45:8d:68:99:a8:e0:2e:c4:cb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 29 05:50:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae9427c90a598fa136123970089741b0eaa54b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:2f:f5:4f:ae:ff:da:29:34:57:e4:13:1c:
d4:90:ed:b3:36:96:1b:93:8c:e7:14:40:f4:e5:00:
db:14:1e:96:52:f3:98:f3:30:e9:3b:23:e1:66:b0:
03:5d:d3:e7:7e:7f:bb:fd:21:cb:91:4e:df:a5:8e:
34:92:ac:99:3f:17:94:50:13:cb:4b:4d:66:f2:f8:
2c:ac:3b:ce:ca:ba:d4:f4:44:41:ad:a8:c7:4b:8b:
1b:ab:a8:48:e2:eb:78:8e:0c:0b:92:ee:4e:c7:47:
c0:82:c3:b7:ef:91:59:d3:64:cb:a3:ec:53:4b:ec:
37:01:09:18:dc:13:f0:0e:44:08:24:ea:18:d4:3c:
33:3b:29:48:be:0d:bc:ea:4b:1a:43:72:95:60:5f:
20:1f:32:39:9a:17:bc:5c:6c:25:40:c3:fa:6f:d1:
8c:cd:3f:77:a4:58:40:d5:aa:81:d1:29:c6:18:58:
0a:72:a4:b5:3d:cc:e8:ad:26:68:cf:fd:4f:16:09:
37:cd:5a:b4:3f:4d:7b:a4:ff:54:43:8c:7f:fb:b6:
ef:c4:68:ca:16:93:23:0f:96:1b:c2:b7:16:0e:8c:
00:ca:53:a8:25:73:85:0f:78:07:64:b6:85:78:c7:
4c:6b:d0:ad:26:9d:61:f7:30:f9:c6:f7:c0:1b:99:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:27:C9:0A:59:8F:A1:36:12:39:70:08:97:41:B0:EA:A5:4B:8F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rpQnyQpZj6E2EjlwCJdBsOqlS48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.59.0/24
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
45.95.0.0/22
45.149.235.0/24
83.143.113.0/24
85.208.139.0/24
87.120.36.0/24
87.120.88.0/24
87.121.98.0/24
87.121.217.0-87.121.218.255
93.123.31.0/24
94.125.100.0/23
109.206.236.0/24
109.206.242.0/24
185.218.137.0/24
185.246.222.0/24
193.8.185.0/24
193.168.196.0/23
193.168.199.0/24
Signature Algorithm: sha256WithRSAEncryption
77:3f:04:e5:e8:59:cf:9f:fc:b9:6f:1d:b7:61:c9:94:ac:0f:
7f:07:83:86:fc:e8:19:be:bc:68:e5:ea:43:6a:e9:7f:38:df:
0e:b9:39:86:f4:f6:a3:6b:16:81:20:a5:af:90:06:a2:12:7d:
5e:3c:ac:46:bd:5d:e1:2d:9e:cf:c8:54:77:f0:94:40:20:f4:
de:ee:1b:e9:79:7b:13:d6:61:cf:26:69:47:b7:e0:a7:6f:b7:
b9:51:00:4f:d9:dc:2d:09:b2:a1:5b:c5:f8:99:7b:0c:07:48:
cb:9d:e3:ff:1b:f1:63:e1:b4:f0:79:b4:bd:e2:dd:7e:af:ca:
5f:14:75:8e:ab:fd:31:bd:73:91:d4:81:61:80:f4:31:0e:10:
69:d9:ae:6b:c9:14:7b:32:70:09:f1:74:76:5c:6a:4c:4a:a0:
15:f2:e8:3e:b2:81:55:20:b4:04:a9:f7:96:f1:f9:1f:7d:e6:
7a:83:b7:fe:b4:ce:6a:aa:3c:40:9f:d4:e7:6b:1c:c5:6a:79:
70:fe:67:d3:52:8a:21:e4:af:95:66:0c:47:b1:43:ba:87:34:
dc:dc:9e:2d:7d:de:d4:2e:86:87:1c:1a:8d:85:bd:f4:2c:4c:
b3:9c:d3:90:d6:f6:96:51:21:85:4a:44:d6:78:d9:62:d6:ae:
05:f3:9c:c6
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAZLW0y/hZtZFjWiZqOAuxMtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMDI5MDU1MDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTk0MjdjOTBhNTk4ZmExMzYxMjM5NzAwODk3NDFiMGVhYTU0YjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHkv9U+u/9opNFfkExzUkO2zNpYb
k4znFED05QDbFB6WUvOY8zDpOyPhZrADXdPnfn+7/SHLkU7fpY40kqyZPxeUUBPL
S01m8vgsrDvOyrrU9ERBrajHS4sbq6hI4ut4jgwLku5Ox0fAgsO375FZ02TLo+xT
S+w3AQkY3BPwDkQIJOoY1DwzOylIvg286ksaQ3KVYF8gHzI5mhe8XGwlQMP6b9GM
zT93pFhA1aqB0SnGGFgKcqS1PczorSZoz/1PFgk3zVq0P017pP9UQ4x/+7bvxGjK
FpMjD5YbwrcWDowAylOoJXOFD3gHZLaFeMdMa9CtJp1h9zD5xvfAG5ko8wIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFK6UJ8kKWY+hNhI5cAiXQbDqpUuPMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcnBRbnlRcFpqNkUyRWpsd0NKZEJzT3FsUzQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAAF
/TsDBAAtVFgDBAAtWfQDBAAtW8EDBAItXwADBAAtlesDBABTj3EDBABV0IsDBABX
eCQDBABXeFgDBABXeWIwDAMEAFd52QMEAFd52gMEAF17HwMEAV59ZAMEAG3O7AME
AG3O8gMEALnaiQMEALn23gMEAMEIuQMEAcGoxAMEAMGoxzANBgkqhkiG9w0BAQsF
AAOCAQEAdz8E5ehZz5/8uW8dt2HJlKwPfweDhvzoGb68aOXqQ2rpfzjfDrk5hvT2
o2sWgSClr5AGohJ9XjysRr1d4S2ez8hUd/CUQCD03u4b6Xl7E9ZhzyZpR7fgp2+3
uVEAT9ncLQmyoVvF+Jl7DAdIy53j/xvxY+G08Hm0veLdfq/KXxR1jqv9Mb1zkdSB
YYD0MQ4Qadmua8kUezJwCfF0dlxqTEqgFfLoPrKBVSC0BKn3lvH5H33meoO3/rTO
aqo8QJ/U52scxWp5cP5n01KKIeSvlWYMR7FDuoc03NyeLX3e1C6GhxwajYW99CxM
s5zTkNb2llEhhUpE1njZYtauBfOcxg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:40:26 2025 by rpki-client