Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uvDXmK6dWXrfbBeOz0z4hWrrwgM.roa
File: uvDXmK6dWXrfbBeOz0z4hWrrwgM.roa (raw, json)
Hash identifier: 3HPYVlUSyAyLhT3DHpG9Z5dg/FV39j7wIFcQsH5PDG8=
Subject key identifier: BA:F0:D7:98:AE:9D:59:7A:DF:6C:17:8E:CF:4C:F8:85:6A:EB:C2:03
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189B4D4932F3BD9E66EB89F0E3842030AC3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uvDXmK6dWXrfbBeOz0z4hWrrwgM.roa
Signing time: Wed 02 Aug 2023 05:59:37 +0000
ROA not before: Wed 02 Aug 2023 05:59:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
194.113.36.0/22 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
45.149.235.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
45.95.0.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
87.121.45.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b4:d4:93:2f:3b:d9:e6:6e:b8:9f:0e:38:42:03:0a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 2 05:59:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baf0d798ae9d597adf6c178ecf4cf8856aebc203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:56:ac:bb:83:9d:68:ed:81:d1:2e:bf:6f:52:
71:13:ac:1c:43:10:d9:e5:1f:76:f8:cc:ab:07:7d:
bb:ac:3b:fb:82:6c:8f:88:16:b0:4b:96:cb:6c:44:
ba:ba:04:27:0d:62:f6:36:8c:83:ca:86:e4:1a:06:
ab:eb:4a:a1:6d:a8:09:64:f1:72:73:7a:40:cd:09:
46:e0:34:bf:db:9b:c7:e4:ec:52:55:bd:ff:13:d7:
59:2f:03:4c:54:d7:92:ea:2c:ff:da:7d:ce:96:59:
73:53:c0:bb:ad:38:6c:1f:26:7f:2b:c7:0a:66:18:
a6:ae:a2:6d:27:6b:d8:c6:cd:c4:e6:32:35:d1:6d:
1c:2e:4c:05:02:18:34:4a:55:3d:39:55:83:af:9c:
2c:03:be:c3:b9:47:82:ec:f4:92:c3:d1:50:9b:6b:
91:4e:c6:68:a8:eb:ff:93:1a:0e:77:a6:55:a9:5e:
c2:9d:5d:01:93:77:f6:fb:4d:8f:29:3d:dd:30:3d:
e9:4f:2f:91:ab:25:f1:05:db:75:4b:d0:ec:b4:16:
46:c2:cb:7c:94:32:2f:47:3f:5f:97:3a:64:5d:4d:
9c:bd:32:5e:5a:66:2a:98:0b:31:99:73:cc:71:ac:
4e:3a:c7:c6:36:e0:2d:ed:ed:b7:58:8c:ac:d4:62:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F0:D7:98:AE:9D:59:7A:DF:6C:17:8E:CF:4C:F8:85:6A:EB:C2:03
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uvDXmK6dWXrfbBeOz0z4hWrrwgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.0.0/22
45.149.235.0/24
45.151.89.0/24
87.121.45.0/24
91.92.21.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.156.78.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
185.252.176.0/24
194.113.36.0/22
194.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f5:e1:1e:f9:2e:29:92:9d:9c:f9:c9:70:d9:a8:8d:60:61:
cc:54:5c:92:fb:9c:8d:9a:ad:ec:1a:b0:ac:9a:37:23:7f:73:
6a:c6:c1:92:7b:96:6c:b9:e7:f4:f2:3b:36:cd:6e:4a:fd:03:
4e:cd:b2:f8:53:c6:8a:15:19:e8:2d:54:78:db:1e:73:16:4a:
75:40:af:bc:1d:b9:ba:1e:dd:23:e5:b0:44:ed:1e:20:e9:43:
9b:5b:01:bc:97:17:67:f3:91:dc:a5:ac:4a:ea:6f:8d:1d:2e:
88:9f:23:ab:5e:99:68:b9:97:f9:f8:ae:69:83:3e:d7:8e:4b:
d8:12:70:ba:92:29:8b:25:89:73:a3:83:1d:a8:57:b2:a1:ce:
8a:33:87:50:70:14:3f:f4:6d:78:83:b3:61:8c:6a:bd:9a:63:
ff:29:3a:25:e3:43:2e:c0:9c:81:6a:72:f0:a1:f0:87:ed:77:
c9:5c:03:dc:b2:a4:73:0a:d8:d3:e9:39:94:0a:32:3a:56:0a:
96:c4:70:f6:69:21:8c:94:d0:d2:49:98:01:e1:f0:ba:f9:64:
e6:b9:48:79:ee:18:ec:5b:8f:26:08:7e:bd:54:13:36:84:99:
17:58:2e:48:14:92:26:12:76:3e:0c:b8:c4:ee:f8:53:c2:22:
fc:89:06:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgISAYm01JMvO9nmbrifDjhCAwrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwODAyMDU1OTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWYwZDc5OGFlOWQ1OTdhZGY2YzE3OGVjZjRjZjg4NTZhZWJjMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFasu4OdaO2B0S6/b1JxE6wcQxDZ
5R92+MyrB327rDv7gmyPiBawS5bLbES6ugQnDWL2NoyDyobkGgar60qhbagJZPFy
c3pAzQlG4DS/25vH5OxSVb3/E9dZLwNMVNeS6iz/2n3OlllzU8C7rThsHyZ/K8cK
ZhimrqJtJ2vYxs3E5jI10W0cLkwFAhg0SlU9OVWDr5wsA77DuUeC7PSSw9FQm2uR
TsZoqOv/kxoOd6ZVqV7CnV0Bk3f2+02PKT3dMD3pTy+RqyXxBdt1S9DstBZGwst8
lDIvRz9flzpkXU2cvTJeWmYqmAsxmXPMcaxOOsfGNuAt7e23WIys1GI0uwIDAQAB
o4ICkDCCAowwHQYDVR0OBBYEFLrw15iunVl632wXjs9M+IVq68IDMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdXZEWG1LNmRXWHJmYkJlT3owejRoV3Jyd2dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgDBAIt
XwADBAAtlesDBAAtl1kDBABXeS0DBABbXBUDBAFcd8QwDAMEAF6aoQMEAl6aoAME
AF6cTgMEAF6c7zAMAwQCk05kAwQAk05mAwQCqxZIAwQAstfgAwQAstfsAwQCudhU
AwQCudpUAwQAudqJAwQAudt+AwQAufywAwQCwnEkAwQAwqmuMA0GCSqGSIb3DQEB
CwUAA4IBAQAC9eEe+S4pkp2c+clw2aiNYGHMVFyS+5yNmq3sGrCsmjcjf3NqxsGS
e5Zsuef08js2zW5K/QNOzbL4U8aKFRnoLVR42x5zFkp1QK+8Hbm6Ht0j5bBE7R4g
6UObWwG8lxdn85HcpaxK6m+NHS6InyOrXplouZf5+K5pgz7XjkvYEnC6kimLJYlz
o4MdqFeyoc6KM4dQcBQ/9G14g7NhjGq9mmP/KTol40MuwJyBanLwofCH7XfJXAPc
sqRzCtjT6TmUCjI6VgqWxHD2aSGMlNDSSZgB4fC6+WTmuUh57hjsW48mCH69VBM2
hJkXWC5IFJImEnY+DLjE7vhTwiL8iQaP
-----END CERTIFICATE-----
Generated at Thu Aug 17 14:36:53 2023 by rpki-client on console-ams.rpki-client.org