Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5CJVAyw2Y9PDPFsT-HCXOdmQGig.roa
File: 5CJVAyw2Y9PDPFsT-HCXOdmQGig.roa (raw, json)
Hash identifier: Z25Fros2nMrEHZEK3Gn41d9JRF4IRxHbQvP9jhaGlUs=
Subject key identifier: E4:22:55:03:2C:36:63:D3:C3:3C:5B:13:F8:70:97:39:D9:90:1A:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01859A5A63CA2CAB8B7A71163969C16562F0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5CJVAyw2Y9PDPFsT-HCXOdmQGig.roa
Signing time: Tue 10 Jan 2023 06:24:53 +0000
ROA not before: Tue 10 Jan 2023 06:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 45.12.253.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
194.180.48.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:5a:63:ca:2c:ab:8b:7a:71:16:39:69:c1:65:62:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 10 06:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e42255032c3663d3c33c5b13f8709739d9901a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:3d:a3:24:16:29:61:f5:36:1f:20:e0:0b:
99:44:05:f8:0e:5f:c1:b0:f3:6d:af:1e:a5:d2:f7:
2c:96:88:13:f5:ff:56:24:85:65:06:57:e8:de:12:
56:78:96:18:94:4d:ce:b2:a3:b8:ee:2a:15:17:44:
80:26:25:ed:75:95:3d:37:2e:b2:71:11:d8:f0:4c:
31:2b:eb:21:07:a7:ac:33:c0:0d:e6:ca:0e:7e:0c:
25:81:f8:f3:d6:ee:ca:f9:13:68:33:e8:fb:c5:ff:
b6:98:35:7c:ce:e8:59:ce:3e:0c:1a:48:41:83:46:
eb:92:7e:9f:33:9b:8a:29:ca:cb:fd:f2:a2:b2:57:
ac:b2:07:24:00:b5:d5:89:84:72:55:de:95:48:4a:
76:a1:90:96:da:2c:d7:95:8f:4e:4f:04:62:fb:67:
f7:70:dc:76:10:47:d4:a8:62:09:8d:5f:97:f7:59:
42:7b:1e:eb:99:30:97:b6:ad:2e:b0:81:73:6b:bb:
30:f7:99:89:1d:d5:28:56:1b:d7:4c:db:2d:f1:1e:
bd:a5:b6:20:4e:70:87:87:cc:a5:95:f1:e9:7f:95:
9f:79:2a:c6:8b:18:37:15:f4:6f:11:ca:4b:2c:9e:
77:ef:e9:ea:de:76:d3:cb:6c:e2:30:8e:6c:39:44:
2e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:22:55:03:2C:36:63:D3:C3:3C:5B:13:F8:70:97:39:D9:90:1A:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5CJVAyw2Y9PDPFsT-HCXOdmQGig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/23
45.12.253.0/24
45.66.230.0/24
45.81.39.0/24
45.88.67.0/24
79.110.62.0/23
80.76.51.0/24
84.21.172.0/24
85.31.44.0/24
85.31.46.0/24
85.217.145.0/24
109.206.240.0/23
109.206.243.0/24
185.216.71.0/24
185.225.73.0-185.225.74.255
185.246.220.0/23
185.252.178.0/24
185.254.37.0/24
193.47.61.0/24
194.55.186.0/24
194.180.48.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:7c:8e:02:d9:46:6c:a0:89:df:8a:b3:a3:27:dc:b1:bf:b9:
4b:d8:1b:27:95:6a:30:b2:ed:63:ca:93:ed:66:f3:f8:41:a3:
72:63:53:cf:b4:eb:dc:a2:20:35:6c:56:56:15:09:79:e5:05:
e7:de:69:94:eb:1f:7d:42:40:2e:86:3e:c9:b0:49:b4:3e:06:
65:6c:f9:2c:f0:90:cb:60:d6:04:db:c2:8d:a5:83:a3:a6:b2:
cd:f6:7c:5f:e4:ea:79:e2:ef:7a:2f:23:a4:c1:8d:91:8c:22:
c7:38:35:86:92:64:06:a9:98:6d:87:0c:58:17:c5:f6:c3:33:
4a:1e:f4:e7:a2:ad:06:81:55:c4:76:e6:aa:67:a6:63:a5:35:
4e:e0:a4:44:4d:9b:c8:f8:d5:4a:b1:57:10:91:e1:35:b6:63:
4f:2f:00:08:6f:6d:5a:f5:40:73:74:8b:bd:e4:a7:a7:29:bf:
e5:1f:b9:86:8d:aa:a1:c7:d1:62:74:eb:b9:78:14:25:54:66:
13:fa:d1:32:18:2d:38:0e:d8:69:d1:26:4f:0b:5f:22:60:0b:
aa:9b:e3:90:e6:e3:87:c7:cd:e7:d9:be:79:57:de:09:6f:8a:
5a:c7:b5:e6:91:c6:8a:d6:39:dc:f1:02:4a:1e:7b:30:cf:33:
4c:82:91:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org