Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DmRwLeFpxkp1lKSjeWhluMIEaiY.roa
File: DmRwLeFpxkp1lKSjeWhluMIEaiY.roa (raw, json)
Hash identifier: +VjOiR0EAOZ62xVMS4LWvcrcHx9BAHGSOY3vgwNSBKM=
Subject key identifier: 0E:64:70:2D:E1:69:C6:4A:75:94:A4:A3:79:68:65:B8:C2:04:6A:26
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CED393FA6B46457ED02871416E4ADB5DE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DmRwLeFpxkp1lKSjeWhluMIEaiY.roa
Signing time: Tue 09 Jan 2024 07:56:41 +0000
ROA not before: Tue 09 Jan 2024 07:56:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 194.169.172.0/24 maxlen: 24
2.59.253.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 06:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:39:3f:a6:b4:64:57:ed:02:87:14:16:e4:ad:b5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 9 07:56:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e64702de169c64a7594a4a3796865b8c2046a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e1:62:22:3c:1a:c3:b6:15:d8:d3:e6:74:08:
af:d4:16:58:87:c9:f5:45:6f:59:b3:8d:c9:56:a2:
7a:af:a1:b8:3d:a0:f5:99:b7:ac:e2:f0:e0:44:45:
66:bb:cc:fe:be:48:00:10:fa:b8:19:13:57:85:f2:
8a:7c:90:bc:68:36:df:2b:d3:61:5f:67:86:ec:83:
fd:2a:43:e5:e7:6f:e1:ca:df:9b:1e:a4:f8:08:0d:
00:b9:8f:7c:f9:94:47:b5:f0:86:48:9f:91:69:75:
b4:af:1f:4d:3e:f2:e7:66:ba:be:c6:ee:c4:1e:c8:
d0:e9:78:9c:5d:db:1d:f7:fe:71:54:1d:dc:69:c2:
f1:bb:c3:ff:a1:4a:0c:42:16:48:46:cc:60:2e:25:
33:1c:d5:a0:40:bd:3d:b6:83:12:b8:8e:7a:3b:b5:
17:cb:21:81:f4:3a:73:05:c5:20:b9:a5:87:47:88:
e4:56:45:1b:93:dc:aa:9c:28:00:b3:44:09:24:36:
3e:68:d8:4d:09:3a:b2:1f:f5:89:d2:24:da:24:d4:
f8:0e:6c:eb:b6:dc:93:0f:15:77:59:e0:21:4d:d6:
64:c4:77:db:20:14:c6:9d:9d:a9:f1:d9:b2:5f:74:
40:35:c8:e1:79:18:9c:b5:eb:09:9a:8b:71:dd:87:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:64:70:2D:E1:69:C6:4A:75:94:A4:A3:79:68:65:B8:C2:04:6A:26
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DmRwLeFpxkp1lKSjeWhluMIEaiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
82.115.208.0/24
83.219.97.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
185.222.160.0-185.222.162.255
193.25.217.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.31.205.0/24
194.48.248.0/24
194.55.187.0/24
194.55.224.0/23
194.169.172.0/24
194.180.38.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:2b:d2:f1:58:23:3e:5b:81:f9:ef:d9:eb:0b:f5:49:a7:01:
65:3a:6c:67:df:1e:cc:80:0a:d4:4e:3e:4e:dc:f1:82:b5:f8:
5e:65:8c:e8:11:d0:d8:78:cc:96:40:ba:65:62:ce:ae:b2:35:
58:cb:3d:95:79:ab:e9:aa:02:92:c8:84:80:f0:a9:c0:b1:81:
1c:1b:94:7b:ad:05:27:d8:d2:60:2f:15:3f:c3:1d:39:7d:04:
a0:e9:f5:7b:c9:c2:4b:e4:f3:f5:34:64:ce:c8:66:32:a5:06:
ba:28:17:4d:a2:0c:b0:c8:2d:4c:bc:e0:2c:3b:d1:72:e4:c0:
df:4f:d4:a3:cd:33:63:ef:b1:b8:6e:c8:01:57:30:fe:e1:87:
04:81:c3:cf:05:b9:24:e4:aa:8c:d8:53:4c:05:04:41:29:f3:
c6:e6:c2:75:1f:c9:97:74:c7:78:b1:b0:62:7c:de:8e:2d:04:
80:55:8a:a6:45:7b:57:fe:1a:01:7e:6e:69:b3:8b:16:6a:f8:
d0:42:65:90:4f:df:8b:53:b8:43:55:14:3b:c4:52:57:77:ef:
69:12:e9:99:77:94:70:be:e3:23:ef:03:a2:4f:ae:2f:3e:b5:
57:ec:f7:e0:4a:e0:fa:7c:7c:8e:e7:f2:bb:c5:2b:9e:5a:30:
1f:69:bc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 08:02:23 2024 by rpki-client on console-ams.rpki-client.org