Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KC2hQqp6T6xIYFEmO98mV_KVyEs.roa
File: KC2hQqp6T6xIYFEmO98mV_KVyEs.roa (raw, json)
Hash identifier: yQt4sz2T71QBkC3ro9M+SGaqB3E+F2+7Mqqt1Ua9eoU=
Subject key identifier: 28:2D:A1:42:AA:7A:4F:AC:48:60:51:26:3B:DF:26:57:F2:95:C8:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189AD27113C63C1F44ADF7376CFD1E74DC9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KC2hQqp6T6xIYFEmO98mV_KVyEs.roa
Signing time: Mon 31 Jul 2023 18:12:45 +0000
ROA not before: Mon 31 Jul 2023 18:12:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 2.59.254.0/24 maxlen: 24
94.156.6.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
194.180.48.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
45.139.105.0/24 maxlen: 24
185.225.75.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
87.121.3.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
212.87.204.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
94.156.253.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
94.156.161.0/24 maxlen: 24
193.42.33.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
185.216.68.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
93.123.118.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:27:11:3c:63:c1:f4:4a:df:73:76:cf:d1:e7:4d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 31 18:12:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=282da142aa7a4fac486051263bdf2657f295c84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:d8:ab:80:4b:f6:83:6d:ab:56:25:b5:9d:
1f:96:af:b2:0b:88:fe:d0:16:82:21:97:50:10:b8:
b4:03:af:20:f4:99:e6:12:49:69:0b:de:51:74:e1:
56:99:7b:84:76:20:30:85:1c:99:8f:98:bc:d2:5b:
69:d6:9e:93:76:91:2c:38:af:00:1e:69:ec:57:99:
77:15:c3:49:62:cc:0c:35:db:0b:be:6d:fe:f2:c4:
75:9b:6a:fb:df:e3:08:6b:ec:78:e3:bd:b5:44:e0:
81:21:af:3c:08:dd:34:80:95:1d:e8:ff:91:9e:98:
1f:1c:d1:09:bc:f2:2b:23:4e:34:3a:ac:7f:d6:92:
cc:47:56:fe:7f:67:09:44:48:6a:00:0a:6a:32:1f:
39:c5:70:d7:7a:28:3a:5e:c9:ed:7e:f9:73:d9:b2:
c0:e4:19:1a:fb:0d:e8:a5:8e:9e:84:2a:cb:b5:27:
9b:5b:a1:8b:49:7f:63:b6:dd:88:97:9e:5a:d8:61:
44:6b:a2:2f:9f:ef:8e:05:bf:bb:ec:2a:57:7a:3f:
6c:ca:64:08:b1:0d:f1:d6:b1:c1:95:14:e1:41:8d:
00:44:c4:2d:79:6c:f7:d5:62:38:35:f2:54:00:17:
bb:d0:f5:89:b1:42:38:23:8f:5f:d7:44:82:8e:ec:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2D:A1:42:AA:7A:4F:AC:48:60:51:26:3B:DF:26:57:F2:95:C8:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KC2hQqp6T6xIYFEmO98mV_KVyEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.254.0/24
37.139.128.0/23
45.12.253.0/24
45.66.230.0/24
45.81.39.0/24
45.81.243.0/24
45.88.67.0/24
45.139.105.0/24
79.110.48.0/24
79.110.62.0/23
80.76.51.0/24
84.21.172.0/24
84.54.50.0/24
85.31.44.0-85.31.46.255
85.217.144.0/24
87.121.3.0/24
87.121.221.0/24
93.123.118.0/24
94.156.6.0/24
94.156.102.0/24
94.156.161.0/24
94.156.253.0/24
95.214.27.0/24
109.206.240.0/23
109.206.243.0/24
185.216.68.0/24
185.216.71.0/24
185.225.73.0-185.225.75.255
185.246.220.0/23
185.252.178.0/24
185.254.37.0/24
193.42.32.0/23
193.47.61.0/24
194.55.186.0/24
194.55.224.0/24
194.180.48.0/23
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:17:be:0a:80:4c:90:f7:eb:3a:21:0e:db:06:8d:39:9f:d8:
50:b0:b3:96:cb:0b:60:e7:7e:0d:2d:3d:b7:96:1e:55:3d:28:
03:11:9c:68:05:5c:5f:2e:42:c4:ec:ab:ba:7e:02:f8:df:e8:
2d:97:8c:88:7c:d4:92:d7:01:3e:fa:ad:a0:01:76:fb:3b:c1:
99:e7:e7:d1:7e:f1:c1:79:27:6d:92:b6:13:b8:88:10:1a:77:
5f:84:4c:af:ce:89:75:7f:25:08:0b:2d:b3:b4:d8:e2:12:f3:
d9:0d:76:d1:24:03:a2:6f:c6:14:f8:ee:0d:09:5d:f1:a3:2b:
52:0d:ec:fa:b5:7e:31:60:aa:59:08:83:8e:46:06:ef:db:98:
48:9a:dc:20:d0:53:3b:ef:ea:fb:7a:dc:3f:ea:0b:1d:82:22:
38:75:88:15:d9:3a:c4:b3:93:02:11:d7:94:08:c3:b8:69:1c:
b4:f5:04:6c:d0:98:a3:6c:10:cb:6a:0b:96:cb:7f:1b:2a:63:
61:c2:56:48:96:b1:b5:0a:86:77:5a:92:34:cd:c3:dc:76:c4:
8d:0a:69:5c:aa:e6:44:bb:e5:aa:0e:d1:3e:21:bc:c0:69:81:
ff:34:32:08:e0:26:71:3d:24:e5:f6:14:03:ed:5b:83:82:40:
39:07:4f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 2 20:17:50 2023 by rpki-client on console-ams.rpki-client.org