Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsH4ZRUNLt4NfeUAq64NIgC1Z6Y.roa
File: IsH4ZRUNLt4NfeUAq64NIgC1Z6Y.roa (raw, json)
Hash identifier: I/BZ8hxBwyILFNB8hlzHp39TwtaIQZsL1q4KgKKeQkY=
Subject key identifier: 22:C1:F8:65:15:0D:2E:DE:0D:7D:E5:00:AB:AE:0D:22:00:B5:67:A6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AA87ABC3A98EB3347806CFFBAA0DE8A67
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsH4ZRUNLt4NfeUAq64NIgC1Z6Y.roa
Signing time: Mon 18 Sep 2023 13:28:50 +0000
ROA not before: Mon 18 Sep 2023 13:28:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 85.217.145.0/24 maxlen: 24
185.222.163.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:7a:bc:3a:98:eb:33:47:80:6c:ff:ba:a0:de:8a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 18 13:28:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22c1f865150d2ede0d7de500abae0d2200b567a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:bf:b9:c4:8c:81:ec:b0:89:a1:7e:57:9f:
1d:b2:37:31:c0:0e:f3:41:32:b6:e2:e2:94:18:80:
cc:26:79:26:a6:c8:61:fc:80:b8:8d:e2:66:3f:e0:
25:4f:fa:b2:34:49:86:e6:c1:5c:20:76:f0:a0:61:
20:72:83:13:fb:6c:ec:05:76:50:05:18:b9:c8:e7:
a7:44:a6:b1:5f:21:3c:02:89:20:f0:00:52:94:62:
5f:d6:b0:b1:43:83:66:bb:2b:a2:87:b5:aa:89:51:
34:da:42:32:43:3e:ac:98:83:4b:d1:a1:ad:80:d5:
96:6e:b6:1a:c5:8b:af:7e:1f:37:d5:47:9e:77:38:
98:1e:8e:5d:04:fc:99:d0:77:29:a0:76:98:56:20:
50:af:b9:9f:e1:ba:b6:74:60:c3:8e:c6:83:f3:71:
72:48:80:71:69:69:d5:af:58:9c:f3:18:0f:c8:91:
fb:2b:49:67:47:2d:73:63:49:d3:b4:0d:2b:24:23:
ec:35:41:13:99:bc:bb:b8:d2:1a:ff:00:4c:06:f8:
08:35:6b:39:cb:88:67:65:54:2b:fb:b3:c9:f3:39:
98:6a:de:86:2e:5d:d8:93:a5:44:45:2f:1c:e2:ed:
f9:cb:20:76:42:c4:a6:6e:e4:53:41:c4:14:0d:47:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C1:F8:65:15:0D:2E:DE:0D:7D:E5:00:AB:AE:0D:22:00:B5:67:A6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsH4ZRUNLt4NfeUAq64NIgC1Z6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
80.76.50.0/24
85.217.145.0/24
93.123.85.0/24
176.125.252.0/24
185.222.163.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:22:13:1d:94:70:e8:c8:f6:fb:bd:7c:67:84:a4:7a:2f:bc:
59:54:a3:77:a3:1f:44:e9:62:f4:1a:17:87:7d:4b:48:86:72:
8a:a2:0f:a7:b5:4c:d1:90:45:a4:8b:f8:00:75:53:d4:c7:88:
89:05:d6:0a:9f:18:81:19:af:3d:1a:fd:79:27:07:83:76:7d:
55:d0:2b:64:b9:b6:8a:18:4a:f2:57:42:44:e0:bb:5c:50:33:
23:94:65:c1:ba:83:81:a5:3c:c6:ef:88:1d:25:12:67:af:00:
81:59:84:5f:8b:34:6f:16:39:43:7b:6d:05:25:f9:51:64:8f:
da:19:57:4e:36:f6:64:d5:f4:a3:49:01:0c:3e:2d:81:a4:ab:
b1:84:e7:21:b2:76:2d:96:03:2e:d4:c5:d2:01:81:bc:41:b8:
1b:6c:0d:cd:3d:4b:ff:6f:f3:fa:b8:9a:11:7f:d7:47:1b:06:
94:52:6e:f0:7d:6b:0c:c3:b9:94:7a:15:b8:2f:88:d9:10:52:
15:41:b6:9c:08:4c:97:a8:d9:8d:5a:f2:ec:50:23:02:9c:d7:
59:fb:e8:c0:6c:48:b8:c4:89:12:02:83:49:ba:8e:a3:c7:ad:
b9:65:86:f4:fb:69:ec:76:45:71:96:33:b8:6e:99:a9:88:32:
de:6f:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 08:30:01 2023 by rpki-client on console-ams.rpki-client.org