Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1dKjq-UnU11D_zTHG6QgM5pfg6A.roa
File: 1dKjq-UnU11D_zTHG6QgM5pfg6A.roa (raw, json)
Hash identifier: FYnplBS45nVWFEF1gLgsPSD0TXcWnmANBiEX8EugLyk=
Subject key identifier: D5:D2:A3:AB:E5:27:53:5D:43:FF:34:C7:1B:A4:20:33:9A:5F:83:A0
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018964895BECC208C80E64B7A551004AA219
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1dKjq-UnU11D_zTHG6QgM5pfg6A.roa
Signing time: Mon 17 Jul 2023 15:47:50 +0000
ROA not before: Mon 17 Jul 2023 15:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.149.80.0/24 maxlen: 24
45.149.82.0/24 maxlen: 24
45.149.81.0/24 maxlen: 24
45.150.63.0/24 maxlen: 24
45.150.62.0/24 maxlen: 24
195.245.111.0/24 maxlen: 24
185.179.198.0/24 maxlen: 24
45.145.2.0/24 maxlen: 24
213.139.192.0/24 maxlen: 24
45.145.161.0/24 maxlen: 24
45.133.219.0/24 maxlen: 24
213.139.195.0/24 maxlen: 24
213.139.193.0/24 maxlen: 24
77.83.4.0/24 maxlen: 24
77.83.7.0/24 maxlen: 24
77.83.6.0/24 maxlen: 24
77.83.5.0/24 maxlen: 24
45.145.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 16:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:89:5b:ec:c2:08:c8:0e:64:b7:a5:51:00:4a:a2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 17 15:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5d2a3abe527535d43ff34c71ba420339a5f83a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:86:95:29:0d:38:3c:6b:e0:2b:18:5f:ba:
28:a1:82:a7:b7:63:13:f9:cb:bd:2c:b3:99:a9:60:
a9:31:8e:e3:eb:7a:d4:3f:36:d1:f1:d4:66:22:11:
da:d4:01:25:60:d0:12:dc:a3:73:16:ba:36:41:a0:
6e:fb:76:da:4c:3b:68:e8:89:fe:18:5a:9d:5e:6d:
2d:87:fe:7e:b3:a3:56:aa:7d:a8:27:2c:49:03:ff:
14:7c:86:da:f1:6c:30:ff:cf:96:48:66:48:50:08:
c1:b9:f2:7d:cb:a6:76:7b:b6:98:80:90:09:3c:35:
c4:7c:40:73:b1:40:e1:d2:bf:59:51:8c:85:3a:3d:
62:9e:0d:b6:61:f0:1a:75:38:f1:8c:91:02:0a:94:
86:96:91:25:db:61:db:da:7f:e9:17:4e:ad:e6:97:
04:32:bf:5c:ba:bb:07:e7:03:dd:bb:bb:bd:e0:cb:
d1:9f:94:dd:c7:e3:1c:c3:49:95:57:b9:58:60:f8:
70:64:e3:35:bd:2f:bf:c8:d9:79:d1:c1:5e:d0:94:
85:e9:ee:b1:31:85:f8:6a:8c:4c:c1:4b:27:b1:f4:
85:f0:17:05:86:fe:43:4b:e5:c5:81:de:b9:8d:39:
01:78:a4:df:af:94:c0:8d:b5:a5:af:3f:43:f1:dc:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:A3:AB:E5:27:53:5D:43:FF:34:C7:1B:A4:20:33:9A:5F:83:A0
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1dKjq-UnU11D_zTHG6QgM5pfg6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.219.0/24
45.145.2.0/24
45.145.90.0/24
45.145.161.0/24
45.149.80.0-45.149.82.255
45.150.62.0/23
77.83.4.0/22
185.179.198.0/24
195.245.111.0/24
213.139.192.0/23
213.139.195.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d6:61:bf:e4:c8:2b:9c:87:d6:67:e7:38:bb:08:fd:7e:c8:
30:9d:15:46:9e:8e:4c:d3:ce:1b:5a:6b:7f:7a:01:ce:40:00:
13:28:20:3a:e3:62:30:01:8e:36:9b:80:67:5f:1d:cf:dc:2c:
ec:38:57:23:7a:fb:cb:eb:74:fc:64:03:58:ec:6d:d2:81:f6:
0f:ff:4d:77:4e:82:c4:ed:fc:0a:74:ae:b6:76:6f:bb:a4:ae:
23:0e:39:54:0e:dd:9d:52:e8:66:67:49:c2:9d:c5:4d:27:af:
65:12:ed:05:91:94:7e:41:ff:dc:32:2f:ed:76:2c:dd:de:27:
0f:0a:a5:7d:dd:03:10:5d:48:5d:97:5e:07:53:ff:0d:e6:40:
75:dd:42:58:3f:cd:bd:b7:bc:9d:32:68:97:40:ed:78:91:46:
cc:07:d4:9e:53:37:99:3e:65:44:6c:20:7c:74:61:a9:2a:57:
2c:cc:4f:23:71:78:f7:35:83:d1:42:d5:d4:70:24:f9:c2:30:
91:91:42:53:7e:b9:39:f0:bc:99:86:48:26:77:10:86:37:bc:
8f:67:33:1c:54:3d:8a:3c:cf:91:a4:31:c9:c9:80:00:fa:d7:
6c:dc:3e:dd:9d:6b:44:08:f7:65:5c:c9:5c:18:f2:10:95:44:
25:0a:d2:8e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAYlkiVvswgjIDmS3pVEASqIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjMwNzE3MTU0NzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWQyYTNhYmU1Mjc1MzVkNDNmZjM0YzcxYmE0MjAzMzlhNWY4M2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw2GlSkNODxr4CsYX7oooYKnt2MT
+cu9LLOZqWCpMY7j63rUPzbR8dRmIhHa1AElYNAS3KNzFro2QaBu+3baTDto6In+
GFqdXm0th/5+s6NWqn2oJyxJA/8UfIba8Www/8+WSGZIUAjBufJ9y6Z2e7aYgJAJ
PDXEfEBzsUDh0r9ZUYyFOj1ing22YfAadTjxjJECCpSGlpEl22Hb2n/pF06t5pcE
Mr9cursH5wPdu7u94MvRn5Tdx+Mcw0mVV7lYYPhwZOM1vS+/yNl50cFe0JSF6e6x
MYX4aoxMwUsnsfSF8BcFhv5DS+XFgd65jTkBeKTfr5TAjbWlrz9D8dzc2QIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFNXSo6vlJ1NdQ/80xxukIDOaX4OgMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvMWRLanEtVW5VMTFEX3pUSEc2UWdNNXBmZzZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQALYXbAwQA
LZECAwQALZFaAwQALZGhMAwDBAQtlVADBAAtlVIDBAEtlj4DBAJNUwQDBAC5s8YD
BADD9W8DBAHVi8ADBADVi8MwDQYJKoZIhvcNAQELBQADggEBAG7WYb/kyCuch9Zn
5zi7CP1+yDCdFUaejkzTzhtaa396Ac5AABMoIDrjYjABjjabgGdfHc/cLOw4VyN6
+8vrdPxkA1jsbdKB9g//TXdOgsTt/Ap0rrZ2b7ukriMOOVQO3Z1S6GZnScKdxU0n
r2US7QWRlH5B/9wyL+12LN3eJw8KpX3dAxBdSF2XXgdT/w3mQHXdQlg/zb23vJ0y
aJdA7XiRRswH1J5TN5k+ZURsIHx0YakqVyzMTyNxePc1g9FC1dRwJPnCMJGRQlN+
uTnwvJmGSCZ3EIY3vI9nMxxUPYo8z5GkMcnJgAD612zcPt2da0QI92VcyVwY8hCV
RCUK0o4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org