Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7IZQlb3Ph9_6HdT8BPgV7J6U1dg.roa
File: 7IZQlb3Ph9_6HdT8BPgV7J6U1dg.roa (raw, json)
Hash identifier: ncb9HK2/i2CpdVbogrFzOEparelgswbKvq354ZH7k1A=
Subject key identifier: EC:86:50:95:BD:CF:87:DF:FA:1D:D4:FC:04:F8:15:EC:9E:94:D5:D8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CB105874404BC6C7F7BAE717084AFFAB0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7IZQlb3Ph9_6HdT8BPgV7J6U1dg.roa
Signing time: Thu 28 Dec 2023 15:22:58 +0000
ROA not before: Thu 28 Dec 2023 15:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 194.169.172.0/24 maxlen: 24
2.59.253.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b1:05:87:44:04:bc:6c:7f:7b:ae:71:70:84:af:fa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 28 15:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec865095bdcf87dffa1dd4fc04f815ec9e94d5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:96:0e:1e:f1:88:25:5f:c0:d6:9f:5f:65:
21:32:48:15:26:40:91:78:89:a4:e5:28:a1:c8:4c:
a0:10:4b:40:ba:eb:1f:19:7f:66:56:de:81:52:62:
c3:3d:8f:b6:eb:e0:69:fb:a3:3c:e6:f2:5f:14:d5:
55:2d:15:d8:c8:fb:2c:81:e7:f1:38:68:22:cd:da:
68:40:35:4a:4c:4f:e7:3c:ba:bf:ae:57:42:a5:2a:
af:29:c1:a6:36:b1:f7:4c:a8:82:ab:d8:90:94:b5:
74:74:4e:8f:bc:d0:ab:b5:2e:3f:84:5e:bf:c8:85:
4e:5c:6c:8e:b5:2f:07:db:7d:4f:4e:72:69:a0:2d:
69:c9:c0:d9:87:ff:9e:d2:f0:4e:7d:96:fe:22:0e:
49:9b:1b:98:94:19:4d:ff:86:ef:1d:a1:39:82:17:
9a:dd:58:9f:2f:34:7b:df:66:92:54:04:cb:51:8a:
51:57:1a:32:48:74:80:10:71:b5:59:8f:28:a6:dd:
e8:6e:df:06:fd:15:cf:f2:7c:ce:bf:c3:ee:7f:33:
ed:6b:5c:5a:e5:90:38:7f:04:9c:9e:8a:f5:e1:b9:
ac:18:05:c2:d7:c5:b1:cf:11:c0:e6:8b:d5:9c:10:
04:e6:e4:03:0a:d1:4b:6f:5e:1b:90:f2:c4:bc:b5:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:86:50:95:BD:CF:87:DF:FA:1D:D4:FC:04:F8:15:EC:9E:94:D5:D8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7IZQlb3Ph9_6HdT8BPgV7J6U1dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
83.219.97.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
178.215.238.0/24
185.222.160.0-185.222.162.255
185.225.73.0/24
193.25.217.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.31.205.0/24
194.48.248.0/24
194.55.186.0/23
194.55.224.0/23
194.169.172.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
35:db:e2:ff:d8:38:04:9c:b2:4b:88:3a:06:04:95:39:15:8b:
4a:c1:2d:a4:9f:dc:b4:60:0d:59:33:50:4e:35:14:d5:76:58:
4a:6a:06:f9:52:32:80:11:a3:b9:23:b1:6d:28:d2:ef:57:cf:
4e:2c:26:a0:07:87:ae:42:2a:79:d1:01:12:58:67:7b:a1:06:
bd:7d:75:ab:ef:28:d5:25:28:08:61:ff:4f:79:76:ac:bf:5c:
94:e9:17:a7:b4:44:10:b4:c9:65:63:cb:df:f6:a3:54:c4:f0:
ab:65:57:f4:75:91:37:e6:dc:4f:90:0e:29:05:df:86:3d:ca:
bc:e6:65:28:67:42:e5:18:db:53:04:08:fe:32:cc:e4:4b:86:
5c:7b:c6:0c:54:c8:ca:1e:4c:c6:b0:fd:f7:16:92:eb:ca:68:
a5:a3:69:dc:8a:83:5a:b7:55:ee:d7:30:60:cc:38:d8:1a:5c:
81:b1:c9:25:06:72:ca:8d:38:77:36:6b:5c:bc:d8:cc:3d:ef:
8b:d9:0c:e4:12:f7:0b:36:f8:c1:c0:d1:52:88:08:89:e5:75:
fe:55:7a:07:17:52:1a:dc:ab:86:34:1c:78:29:46:24:8f:64:
a8:d1:b0:e0:2e:19:d7:cf:8c:ee:5d:7d:37:5c:f8:db:55:bd:
55:80:fc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 10:23:46 2023 by rpki-client on console-ams.rpki-client.org