Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/44JmbNWI_D4TouXPbkus23iGsXQ.roa
File: 44JmbNWI_D4TouXPbkus23iGsXQ.roa (raw, json)
Hash identifier: 8IWAoSqJmTBopYWYNNGc5TSbBj41lCR35jGd6KOfn5U=
Subject key identifier: E3:82:66:6C:D5:88:FC:3E:13:A2:E5:CF:6E:4B:AC:DB:78:86:B1:74
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018A07C54C1592518C19ECA7B56881E1CD3C
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/44JmbNWI_D4TouXPbkus23iGsXQ.roa
Signing time: Fri 18 Aug 2023 08:31:25 +0000
ROA not before: Fri 18 Aug 2023 08:31:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.149.80.0/24 maxlen: 24
45.149.82.0/24 maxlen: 24
45.149.81.0/24 maxlen: 24
195.245.111.0/24 maxlen: 24
185.179.198.0/24 maxlen: 24
45.140.171.0/24 maxlen: 24
45.11.25.0/24 maxlen: 24
45.139.29.0/24 maxlen: 24
45.139.28.0/24 maxlen: 24
45.139.31.0/24 maxlen: 24
213.139.192.0/24 maxlen: 24
213.139.195.0/24 maxlen: 24
213.139.193.0/24 maxlen: 24
45.149.134.0/24 maxlen: 24
45.152.227.0/24 maxlen: 24
45.137.188.0/24 maxlen: 24
45.137.191.0/24 maxlen: 24
194.156.95.0/24 maxlen: 24
45.150.63.0/24 maxlen: 24
45.150.62.0/24 maxlen: 24
45.145.2.0/24 maxlen: 24
45.145.161.0/24 maxlen: 24
45.133.219.0/24 maxlen: 24
45.137.52.0/24 maxlen: 24
45.137.55.0/24 maxlen: 24
77.83.4.0/24 maxlen: 24
77.83.7.0/24 maxlen: 24
77.83.6.0/24 maxlen: 24
77.83.5.0/24 maxlen: 24
45.145.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:c5:4c:15:92:51:8c:19:ec:a7:b5:68:81:e1:cd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Aug 18 08:31:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e382666cd588fc3e13a2e5cf6e4bacdb7886b174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:80:15:2c:f9:9e:72:f1:e8:69:d1:75:85:cc:
43:23:c8:9f:cb:1c:ae:95:e6:9d:70:e7:f0:91:8b:
d8:8d:7b:61:46:3d:12:49:51:92:24:54:cf:92:97:
29:12:d6:ce:61:25:3d:61:f3:3a:39:5f:fe:ec:30:
9c:0c:3f:34:2e:a7:9a:af:51:b1:05:87:64:37:f0:
de:4b:14:26:8e:8d:34:8e:c0:26:46:35:ce:af:b6:
f6:f5:4b:bc:b4:b9:0a:c5:ef:12:f4:af:c1:1e:66:
57:6b:59:65:ee:72:03:40:f8:05:3a:c1:35:86:50:
62:f3:c7:7f:cf:be:65:de:d7:54:98:82:b6:ce:a7:
4d:72:bb:b1:6a:c7:ab:7f:b4:aa:46:7f:b7:1b:ce:
43:3a:06:85:92:d4:c0:db:16:dc:5c:62:2e:8a:6c:
ad:ed:e7:bf:96:cd:b4:5e:cf:a9:86:d8:d3:e5:7b:
47:d5:d1:e1:19:17:9a:eb:56:61:a7:83:f4:c0:ec:
ae:73:ed:c8:4f:1b:8a:28:a7:43:67:18:ed:c9:16:
bd:cc:1e:7b:f7:8c:7b:41:2f:78:9d:73:0b:e8:52:
c7:9b:5d:9d:9f:06:03:26:41:5d:10:41:ec:60:df:
a8:36:6e:14:7e:da:e5:8b:62:73:84:85:18:14:8a:
40:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:66:6C:D5:88:FC:3E:13:A2:E5:CF:6E:4B:AC:DB:78:86:B1:74
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/44JmbNWI_D4TouXPbkus23iGsXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.25.0/24
45.133.219.0/24
45.137.52.0/24
45.137.55.0/24
45.137.188.0/24
45.137.191.0/24
45.139.28.0/23
45.139.31.0/24
45.140.171.0/24
45.145.2.0/24
45.145.90.0/24
45.145.161.0/24
45.149.80.0-45.149.82.255
45.149.134.0/24
45.150.62.0/23
45.152.227.0/24
77.83.4.0/22
185.179.198.0/24
194.156.95.0/24
195.245.111.0/24
213.139.192.0/23
213.139.195.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b4:39:20:21:78:32:30:7c:c2:ba:f5:4d:c1:6a:9a:19:33:
75:88:d6:53:c6:35:4d:d5:59:96:f4:bf:18:0f:88:4a:aa:0d:
d2:79:9c:82:65:7d:a3:8e:2c:ef:87:af:80:07:e3:ec:01:f8:
4a:85:bc:06:7d:ac:bf:ef:a0:33:1e:4a:8d:d7:f3:b9:e6:b7:
e1:22:a8:07:db:43:a3:2d:d9:d7:b6:9e:eb:68:9f:97:d0:f1:
26:96:43:c3:95:99:eb:48:9a:64:c0:1b:c7:33:f0:16:f8:ee:
b5:7e:68:4b:77:66:44:f0:68:3e:a8:e7:6e:c4:be:01:72:30:
45:42:e8:15:80:49:86:87:55:0c:ef:70:5e:61:08:97:8b:fd:
5d:67:d0:f5:b4:2c:e0:0d:2e:22:65:27:01:71:e4:a2:07:ad:
20:d9:73:61:13:ba:40:f8:c5:5f:a9:d3:99:1b:30:ab:93:69:
d4:c6:1f:b4:5d:cf:35:2b:ea:b9:a5:32:70:62:9f:4a:d3:43:
de:d9:2c:25:f6:ea:3e:05:2a:aa:fb:53:af:ee:56:4d:97:de:
50:57:19:15:4b:f3:e5:4b:01:f0:70:62:c6:4f:e1:6a:dc:8d:
4b:bc:25:37:13:3c:11:78:05:54:9f:b0:ed:b4:2e:1e:54:86:
f0:7d:07:cf
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAYoHxUwVklGMGeyntWiB4c08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjMwODE4MDgzMTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzgyNjY2Y2Q1ODhmYzNlMTNhMmU1Y2Y2ZTRiYWNkYjc4ODZiMTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4AVLPmecvHoadF1hcxDI8ifyxyu
leadcOfwkYvYjXthRj0SSVGSJFTPkpcpEtbOYSU9YfM6OV/+7DCcDD80Lqear1Gx
BYdkN/DeSxQmjo00jsAmRjXOr7b29Uu8tLkKxe8S9K/BHmZXa1ll7nIDQPgFOsE1
hlBi88d/z75l3tdUmIK2zqdNcruxaserf7SqRn+3G85DOgaFktTA2xbcXGIuimyt
7ee/ls20Xs+phtjT5XtH1dHhGRea61Zhp4P0wOyuc+3ITxuKKKdDZxjtyRa9zB57
94x7QS94nXML6FLHm12dnwYDJkFdEEHsYN+oNm4Uftrli2JzhIUYFIpAAQIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFOOCZmzViPw+E6Llz25LrNt4hrF0MB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvNDRKbWJOV0lfRDRUb3VYUGJrdXMyM2lHc1hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAAt
CxkDBAAthdsDBAAtiTQDBAAtiTcDBAAtibwDBAAtib8DBAEtixwDBAAtix8DBAAt
jKsDBAAtkQIDBAAtkVoDBAAtkaEwDAMEBC2VUAMEAC2VUgMEAC2VhgMEAS2WPgME
AC2Y4wMEAk1TBAMEALmzxgMEAMKcXwMEAMP1bwMEAdWLwAMEANWLwzANBgkqhkiG
9w0BAQsFAAOCAQEAfbQ5ICF4MjB8wrr1TcFqmhkzdYjWU8Y1TdVZlvS/GA+ISqoN
0nmcgmV9o44s74evgAfj7AH4SoW8Bn2sv++gMx5Kjdfzuea34SKoB9tDoy3Z17ae
62ifl9DxJpZDw5WZ60iaZMAbxzPwFvjutX5oS3dmRPBoPqjnbsS+AXIwRULoFYBJ
hodVDO9wXmEIl4v9XWfQ9bQs4A0uImUnAXHkogetINlzYRO6QPjFX6nTmRswq5Np
1MYftF3PNSvquaUycGKfStND3tksJfbqPgUqqvtTr+5WTZfeUFcZFUvz5UsB8HBi
xk/hatyNS7wlNxM8EXgFVJ+w7bQuHlSG8H0Hzw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org