Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/152dkVtDmlK-KWJIedvWgFiBSM8.roa
File: 152dkVtDmlK-KWJIedvWgFiBSM8.roa (raw, json)
Hash identifier: RGvUXdNniSyjZJp5IKFjfOVFpjSv2PzaqFZqcup2Q00=
Subject key identifier: D7:9D:9D:91:5B:43:9A:52:BE:29:62:48:79:DB:D6:80:58:81:48:CF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C3F8820F7C4942BE17A4F733E70A4E968
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/152dkVtDmlK-KWJIedvWgFiBSM8.roa
Signing time: Wed 06 Dec 2023 14:28:55 +0000
ROA not before: Wed 06 Dec 2023 14:28:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 94.156.8.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
185.226.172.0/24 maxlen: 24
2.59.253.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:88:20:f7:c4:94:2b:e1:7a:4f:73:3e:70:a4:e9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 6 14:28:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d79d9d915b439a52be29624879dbd680588148cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:00:a6:5d:81:09:ae:a1:f1:e5:03:b4:72:
18:e7:e0:ce:e4:d2:09:d3:b3:f4:4e:c2:b4:88:8d:
77:24:e3:06:08:7b:69:a1:d4:9c:a3:44:c5:a7:6f:
61:72:71:8a:1e:04:ac:85:70:0c:aa:f2:da:71:8f:
dd:b4:5e:d6:47:25:fa:7b:b9:de:88:c6:ed:6d:0d:
14:75:e5:23:ad:37:2c:bc:d1:7a:19:25:2d:1c:d8:
4b:bc:0b:dd:19:16:5d:a3:9b:80:1e:0c:c5:73:bd:
eb:6d:7d:32:fc:28:13:cd:0a:5a:20:73:db:d8:1c:
2a:fb:19:19:f7:1b:db:7a:2e:b4:d5:a7:8a:e3:3c:
26:1b:e6:6b:95:6c:9e:2a:07:82:7b:ee:d0:33:d6:
53:08:a2:12:cb:10:3f:1d:18:26:47:15:af:20:c5:
0d:00:05:7e:81:1b:c2:df:8a:1a:d0:a4:25:ae:51:
4b:4c:fb:3e:4e:cd:c8:c0:29:a9:ed:70:47:74:f7:
60:45:5f:42:36:10:74:b1:00:7a:59:6b:d3:08:f0:
c2:46:0b:9a:d7:e9:7d:00:ad:b7:e6:ec:16:f5:a1:
c1:55:75:a1:0f:10:0a:2c:76:80:ed:14:ea:90:b8:
77:17:2c:4f:42:90:cf:a9:3f:2b:2d:76:b6:42:c8:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9D:9D:91:5B:43:9A:52:BE:29:62:48:79:DB:D6:80:58:81:48:CF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/152dkVtDmlK-KWJIedvWgFiBSM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
94.156.8.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
178.215.238.0/24
185.222.160.0-185.222.162.255
185.225.73.0/24
185.226.172.0/24
185.246.223.0/24
193.25.217.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.31.205.0/24
194.48.248.0/24
194.55.186.0/23
194.55.225.0/24
194.169.172.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a4:c3:71:92:f7:92:7f:65:ca:d9:64:0f:7c:0d:d4:7d:8b:
97:7a:14:4f:3c:77:be:29:24:02:72:12:c7:6d:c4:0e:d5:7d:
93:ab:9a:a3:96:6d:8d:f6:17:f2:96:e3:3d:21:25:c1:12:41:
29:54:e5:89:35:5e:c0:4f:bb:33:31:15:6d:63:9d:d4:f9:b9:
31:94:76:2a:f2:3d:aa:a9:c6:ae:ac:9f:3f:66:f8:8c:a6:c2:
e7:3c:4a:23:cf:44:83:59:ba:b7:df:82:a3:27:19:eb:c2:9e:
d3:e4:2a:6c:6f:9e:a8:06:ee:04:7d:a2:7c:c2:05:8d:bc:5a:
b4:4a:53:26:b9:31:59:cf:da:1b:98:9a:7e:d7:28:e7:80:dc:
38:bb:a7:cd:ef:ef:4c:69:00:1c:05:30:23:19:30:2a:83:36:
f8:5d:2e:f0:96:18:53:68:41:89:5f:a0:9b:3c:47:e7:40:5e:
3e:55:8d:46:92:55:05:4c:58:1f:ad:eb:88:38:f6:0e:98:ff:
3e:f4:f8:bf:2c:92:2e:c1:ee:75:52:20:b1:fa:ea:bb:5d:65:
46:94:24:33:95:f4:e1:54:3a:87:9f:15:1f:5b:a2:0d:22:b5:
66:fb:48:7e:1b:a6:6a:96:0a:2b:da:b1:cf:e0:63:36:a4:d4:
83:83:29:72
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAYw/iCD3xJQr4XpPcz5wpOloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMjA2MTQyODU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzlkOWQ5MTViNDM5YTUyYmUyOTYyNDg3OWRiZDY4MDU4ODE0OGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKIApl2BCa6h8eUDtHIY5+DO5NIJ
07P0TsK0iI13JOMGCHtpodSco0TFp29hcnGKHgSshXAMqvLacY/dtF7WRyX6e7ne
iMbtbQ0UdeUjrTcsvNF6GSUtHNhLvAvdGRZdo5uAHgzFc73rbX0y/CgTzQpaIHPb
2Bwq+xkZ9xvbei601aeK4zwmG+ZrlWyeKgeCe+7QM9ZTCKISyxA/HRgmRxWvIMUN
AAV+gRvC34oa0KQlrlFLTPs+Ts3IwCmp7XBHdPdgRV9CNhB0sQB6WWvTCPDCRgua
1+l9AK235uwW9aHBVXWhDxAKLHaA7RTqkLh3FyxPQpDPqT8rLXa2QsiixQIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFNednZFbQ5pSviliSHnb1oBYgUjPMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMTUyZGtWdERtbEstS1dKSWVkdldnRmlCU004LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHZBggrBgEFBQcBBwEB/wSByTCBxjCBwwQCAAEwgbwDBAAC
O/0DBAAtVFsDBAAtWEADBAAtWFsDBABPbjMDBABcd8YDBABc+TIDBABemqIDBABe
nAgDBABtzu8DBACy1+EDBACy1+MDBACy1+wDBACy1+4wDAMEBbneoAMEALneogME
ALnhSQMEALnirAMEALn23wMEAMEZ2QMEAMElKAMEAMElKgMEAMElLAMEAMHeYQME
AMHeYwMEAMIfzQMEAMIw+AMEAcI3ugMEAMI34QMEAMKprAMEAMK0JjANBgkqhkiG
9w0BAQsFAAOCAQEAbqTDcZL3kn9lytlkD3wN1H2Ll3oUTzx3vikkAnISx23EDtV9
k6uao5ZtjfYX8pbjPSElwRJBKVTliTVewE+7MzEVbWOd1Pm5MZR2KvI9qqnGrqyf
P2b4jKbC5zxKI89Eg1m6t9+CoycZ68Ke0+QqbG+eqAbuBH2ifMIFjbxatEpTJrkx
Wc/aG5iaftco54DcOLunze/vTGkAHAUwIxkwKoM2+F0u8JYYU2hBiV+gmzxH50Be
PlWNRpJVBUxYH63riDj2Dpj/PvT4vyySLsHudVIgsfrqu11lRpQkM5X04VQ6h58V
H1uiDSK1ZvtIfhumapYKK9qxz+BjNqTUg4Mpcg==
-----END CERTIFICATE-----
Generated at Mon Dec 11 09:08:12 2023 by rpki-client on console-ams.rpki-client.org