Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CPPbhcTdppWpMdtXRQYkHYKN15E.roa
File: CPPbhcTdppWpMdtXRQYkHYKN15E.roa (raw, json)
Hash identifier: q7y54KMW7w+26OTykSyVSr0mwVX+HV30AYH8PdHJD8c=
Subject key identifier: 08:F3:DB:85:C4:DD:A6:95:A9:31:DB:57:45:06:24:1D:82:8D:D7:91
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A243AB04957A9A281AEF222ED587F8BA9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CPPbhcTdppWpMdtXRQYkHYKN15E.roa
Signing time: Wed 23 Aug 2023 21:09:00 +0000
ROA not before: Wed 23 Aug 2023 21:09:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211760
IP address blocks: 185.221.67.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:24:3a:b0:49:57:a9:a2:81:ae:f2:22:ed:58:7f:8b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 23 21:09:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08f3db85c4dda695a931db574506241d828dd791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:1b:9e:55:93:42:0b:1f:f2:43:52:55:e4:
ab:e3:59:04:77:dc:ca:23:d5:29:5d:40:bb:1f:18:
ba:13:90:db:61:b8:1f:1e:84:45:2c:6c:c8:59:1e:
fa:73:21:f2:01:e5:7f:8d:4b:e5:8e:d5:db:55:a8:
ee:a9:7b:fc:7e:75:84:ec:98:09:c2:08:de:12:e2:
14:83:e8:1c:83:4a:96:43:b8:1b:87:e7:37:9a:71:
87:5d:43:d8:2a:e0:7f:0e:c9:97:c2:26:87:7e:26:
27:c5:eb:59:fa:35:41:13:43:ee:b6:d1:a7:09:d1:
c1:53:af:f3:de:95:52:ff:49:b9:6c:54:e4:d3:ac:
bf:fb:34:e9:08:93:b5:b9:2b:a8:ca:4d:5a:92:a5:
6d:a5:23:73:91:16:29:76:3d:20:56:d5:44:b6:fe:
2a:6b:25:27:97:f1:ea:b3:7b:9a:5e:26:4b:23:a1:
3e:e2:01:c9:4a:82:31:b1:86:17:94:60:33:b1:c8:
7c:5e:fb:64:29:42:ed:b5:70:76:52:41:da:8b:52:
7d:12:ba:3e:52:47:d4:6a:10:5e:02:c3:e7:1d:01:
6a:46:3a:7c:80:a2:54:3e:2c:01:7b:04:ec:7d:be:
c4:93:4c:02:52:84:58:af:b2:d4:a3:5e:2d:11:e8:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F3:DB:85:C4:DD:A6:95:A9:31:DB:57:45:06:24:1D:82:8D:D7:91
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CPPbhcTdppWpMdtXRQYkHYKN15E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.25.0-95.214.26.255
185.216.70.0/24
185.221.67.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b5:61:45:8b:33:b4:8a:19:6c:98:1f:72:5b:66:3c:b8:4e:
ee:36:a1:b4:1d:32:ed:42:9e:31:ae:21:73:41:43:8f:7c:cd:
04:98:8e:7c:50:a6:e0:d3:3a:1e:95:1d:92:bf:48:43:8b:af:
29:14:e6:4c:2d:80:40:22:bd:db:31:3c:99:32:77:70:26:91:
ae:e3:62:84:43:a8:6b:05:40:ae:56:7e:46:60:0d:51:c6:4b:
59:88:81:47:55:8f:cc:dc:98:51:e5:d3:1b:42:bb:f6:52:2f:
92:25:10:e9:54:ba:a3:88:f5:27:4d:b9:ed:57:ff:aa:e3:89:
82:bb:78:ce:a4:8d:32:55:d1:67:5d:f0:8d:8a:00:82:62:33:
9d:73:00:ed:6e:66:ba:c7:29:05:00:b5:ef:6f:c9:91:ac:cf:
4f:e5:35:d3:65:a5:c3:b2:9a:82:d8:e9:dc:92:2b:37:03:01:
c6:02:69:35:48:cc:1a:e9:c5:df:d1:42:ee:35:7e:55:be:df:
4b:1c:ee:97:69:b2:a2:41:18:99:f2:1b:1a:8e:ad:46:ee:16:
20:d0:51:c6:8a:a9:7e:c8:6e:cf:8a:dd:82:fa:01:6c:2e:9a:
e3:6e:eb:ec:5c:a7:e1:91:e4:f8:05:64:85:68:65:d4:41:4d:
fe:a0:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 07:49:39 2023 by rpki-client on console-ams.rpki-client.org