Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/JEgmp22R-7JMDm-5yBNSszBLu1E.roa
File: JEgmp22R-7JMDm-5yBNSszBLu1E.roa (raw, json)
Hash identifier: EtKHcA+XlxfmVLDmWMhTP5MPUWuW4Ug7bLVVobBVxPQ=
Subject key identifier: 24:48:26:A7:6D:91:FB:B2:4C:0E:6F:B9:C8:13:52:B3:30:4B:BB:51
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 01857BF610D1CB43A97C5C3F73FC11BC25B7
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/JEgmp22R-7JMDm-5yBNSszBLu1E.roa
Signing time: Wed 04 Jan 2023 08:46:41 +0000
ROA not before: Wed 04 Jan 2023 08:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60757
IP address blocks: 85.92.123.0/24 maxlen: 24
85.92.120.0/24 maxlen: 24
85.92.122.0/24 maxlen: 24
85.92.121.0/24 maxlen: 24
185.217.189.0/24 maxlen: 24
185.217.188.0/24 maxlen: 24
185.217.191.0/24 maxlen: 24
185.217.190.0/24 maxlen: 24
45.132.84.0/24 maxlen: 24
45.143.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7b:f6:10:d1:cb:43:a9:7c:5c:3f:73:fc:11:bc:25:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Jan 4 08:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=244826a76d91fbb24c0e6fb9c81352b3304bbb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:de:db:ec:d8:48:18:70:c1:2a:89:10:d4:
c6:f1:46:7f:94:53:89:bd:32:a4:f1:1b:ab:91:78:
67:d1:31:d5:c2:56:12:86:74:dc:d6:f2:da:be:d9:
db:f3:d0:55:46:31:72:e9:67:d9:32:20:7d:8f:1a:
72:cb:a5:05:5a:7a:92:05:4d:ae:8f:22:b1:1c:a3:
2a:26:7a:e0:19:4d:e7:e7:d9:10:ba:d2:41:d8:a0:
e1:f5:da:57:5e:77:50:16:d5:83:38:27:ee:a5:a6:
75:45:5a:f2:26:d5:90:37:27:5b:d2:a3:13:80:89:
7b:e2:ed:56:53:48:5c:4c:84:31:bf:cd:a9:fb:02:
94:30:27:74:aa:4b:f6:28:ab:2f:62:79:e9:97:c4:
1e:bf:4c:d3:9e:e5:77:2d:bd:8f:8e:84:8b:94:b7:
e9:7b:b2:b6:60:ba:36:02:ad:e2:40:fb:0d:0a:23:
ae:7a:0e:f9:8c:76:8e:c5:09:6c:53:22:22:16:2c:
f9:ac:bf:09:f0:06:66:10:b0:81:77:09:ba:7d:25:
29:67:26:31:e5:98:e3:63:bd:6f:05:f5:a9:c8:77:
1f:0f:07:0a:58:30:20:7a:30:55:b8:47:c2:c6:c6:
06:1c:b2:d2:d5:bf:54:dd:fb:65:09:87:17:95:db:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:48:26:A7:6D:91:FB:B2:4C:0E:6F:B9:C8:13:52:B3:30:4B:BB:51
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/JEgmp22R-7JMDm-5yBNSszBLu1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.84.0/24
45.143.89.0/24
85.92.120.0/22
185.217.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:b5:3e:43:32:41:dd:cc:3a:7f:53:df:0f:87:19:4b:22:0b:
40:9e:23:58:3e:17:23:c1:c6:37:b9:9f:58:93:3c:bb:33:eb:
4d:af:30:3e:80:cc:17:1f:92:03:05:9d:d4:28:83:7a:2c:dd:
d7:c0:f1:ac:20:37:91:9e:a6:2b:d9:4a:9f:2e:ef:e8:71:f9:
79:69:9d:f8:56:75:ce:29:80:8e:00:09:56:f8:c9:2e:05:d6:
50:e1:f4:db:d5:53:b0:03:99:11:24:ea:5f:b6:c9:af:0f:b3:
b1:ed:1a:b7:1b:40:de:16:29:25:13:4a:21:06:14:06:f7:59:
26:a0:71:da:5a:66:6b:2d:c9:b9:cf:33:bb:5d:0b:8e:df:0f:
e5:72:89:0b:10:6d:d7:2f:2a:92:01:c5:b3:62:cc:50:d3:2e:
14:de:e9:b6:93:40:56:61:6e:f7:bb:31:a8:41:21:2d:5c:6b:
4e:08:84:99:7e:77:81:08:c9:86:55:9e:31:fe:88:c3:fd:59:
73:31:d2:2e:69:52:18:00:33:53:c8:48:07:e4:ab:ab:aa:0d:
4e:b4:fd:63:67:94:55:1a:4f:8c:5a:c5:e7:5f:5d:4a:6d:11:
1e:ac:05:e7:81:78:b5:57:5f:33:59:83:dc:17:2c:06:ff:96:
6b:cd:bb:a9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYV79hDRy0OpfFw/c/wRvCW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOWRjNzkyYWRmY2ZlODhjNzllNzk1OGZiZmVjNTI1NjMw
YjYyZjkwHhcNMjMwMTA0MDg0NjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDQ4MjZhNzZkOTFmYmIyNGMwZTZmYjljODEzNTJiMzMwNGJiYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrTe2+zYSBhwwSqJENTG8UZ/lFOJ
vTKk8RurkXhn0THVwlYShnTc1vLavtnb89BVRjFy6WfZMiB9jxpyy6UFWnqSBU2u
jyKxHKMqJnrgGU3n59kQutJB2KDh9dpXXndQFtWDOCfupaZ1RVryJtWQNydb0qMT
gIl74u1WU0hcTIQxv82p+wKUMCd0qkv2KKsvYnnpl8Qev0zTnuV3Lb2PjoSLlLfp
e7K2YLo2Aq3iQPsNCiOueg75jHaOxQlsUyIiFiz5rL8J8AZmELCBdwm6fSUpZyYx
5ZjjY71vBfWpyHcfDwcKWDAgejBVuEfCxsYGHLLS1b9U3ftlCYcXldsH0wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCRIJqdtkfuyTA5vucgTUrMwS7tRMB8GA1UdIwQY
MBaAFNKdx5Kt/P6Ix555WPv+xSVjC2L5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEt
NDFlN2ZiYTZkNmUxLzEvSkVnbXAyMlItN0pNRG0tNXlCTlNzekJMdTFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEtNDFlN2ZiYTZkNmUx
LzEvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYRUAwQA
LY9ZAwQCVVx4AwQCudm8MA0GCSqGSIb3DQEBCwUAA4IBAQCktT5DMkHdzDp/U98P
hxlLIgtAniNYPhcjwcY3uZ9Ykzy7M+tNrzA+gMwXH5IDBZ3UKIN6LN3XwPGsIDeR
nqYr2UqfLu/ocfl5aZ34VnXOKYCOAAlW+MkuBdZQ4fTb1VOwA5kRJOpftsmvD7Ox
7Rq3G0DeFiklE0ohBhQG91kmoHHaWmZrLcm5zzO7XQuO3w/lcokLEG3XLyqSAcWz
YsxQ0y4U3um2k0BWYW73uzGoQSEtXGtOCISZfneBCMmGVZ4x/ojD/VlzMdIuaVIY
ADNTyEgH5Kurqg1OtP1jZ5RVGk+MWsXnX11KbREerAXngXi1V18zWYPcFywG/5Zr
zbup
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org