Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N3KrlPHG60S0VD3WcsilcNJRck8.roa
File: N3KrlPHG60S0VD3WcsilcNJRck8.roa (raw, json)
Hash identifier: 9sHswNVP4e8/5EGriOOc8tWRCLyDwYXhFfbf5IjMjgU=
Subject key identifier: 37:72:AB:94:F1:C6:EB:44:B4:54:3D:D6:72:C8:A5:70:D2:51:72:4F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01865954C4D1073ABDA3C6CEC249F288B73E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N3KrlPHG60S0VD3WcsilcNJRck8.roa
Signing time: Thu 16 Feb 2023 08:26:13 +0000
ROA not before: Thu 16 Feb 2023 08:26:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 45.12.253.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
194.180.48.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
212.87.204.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:54:c4:d1:07:3a:bd:a3:c6:ce:c2:49:f2:88:b7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 16 08:26:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3772ab94f1c6eb44b4543dd672c8a570d251724f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4f:39:00:5f:96:11:6d:3e:95:6a:92:a7:cf:
04:49:3f:f5:d2:ec:ac:e9:81:0a:79:05:15:b6:6a:
25:e6:73:b9:95:a2:ee:2e:ce:e1:dd:c2:4b:b7:e3:
13:e5:94:1f:6b:ff:d6:ff:90:c5:a9:31:fb:71:03:
4f:0d:57:76:f7:d8:c8:5f:c5:4c:db:b3:57:ad:7c:
f4:6b:07:98:91:6e:94:bb:56:7b:71:00:3c:b4:13:
ee:1c:aa:c8:fa:09:5b:97:ed:32:c3:f1:0a:e7:4a:
7b:95:1f:3f:57:0c:4b:11:6c:b1:20:54:df:55:f0:
e4:ea:90:bb:9b:c7:67:78:da:04:0e:5a:32:53:06:
87:13:ac:48:f4:61:a2:5b:a5:ba:2b:03:4a:75:c4:
6e:92:61:2e:f7:b1:17:3f:68:1a:9b:98:65:49:f5:
e7:f6:72:1d:72:93:ed:ce:f2:48:f7:32:d1:f9:e0:
5b:08:16:ec:22:a6:0f:40:ab:e9:fe:ba:2f:cc:73:
b2:12:f2:72:36:96:ca:f3:d0:9d:5d:b3:6c:fc:e7:
02:5c:84:93:42:1e:78:2b:35:d5:48:e6:57:05:e7:
3d:ee:b0:fd:d6:55:2f:6d:03:c4:5c:f5:9b:f3:e9:
ff:7e:6b:12:41:f0:55:2c:52:79:f1:4a:5b:d4:8e:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:72:AB:94:F1:C6:EB:44:B4:54:3D:D6:72:C8:A5:70:D2:51:72:4F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N3KrlPHG60S0VD3WcsilcNJRck8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/23
45.12.253.0/24
45.66.230.0/24
45.81.39.0/24
45.88.67.0/24
79.110.62.0/23
80.76.51.0/24
84.21.172.0/24
85.31.44.0/24
85.31.46.0/24
85.217.145.0/24
109.206.240.0/23
109.206.243.0/24
185.216.71.0/24
185.225.73.0-185.225.74.255
185.246.220.0/23
185.252.178.0/24
185.254.37.0/24
193.47.61.0/24
194.55.186.0/24
194.180.48.0/23
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:59:b6:29:76:48:1e:e0:79:cd:b4:84:d9:99:87:38:aa:c5:
22:32:1c:5d:de:0e:4e:0b:33:bc:19:ca:71:8e:87:49:a2:4d:
c9:c3:8d:25:9f:41:dc:87:de:d0:ba:80:4a:a8:70:9f:01:c7:
86:c7:4b:f0:07:1a:68:84:3b:db:c3:09:d8:ac:74:3d:c2:dc:
fe:39:61:9d:3a:32:ae:e5:6f:9b:ce:28:49:91:d6:d0:99:05:
1b:fe:ec:39:57:a6:99:08:a6:2e:0f:60:3d:98:be:1c:e7:16:
96:b7:5d:08:f5:f3:b7:42:11:dd:ff:ee:8d:34:b4:1e:d7:3d:
bb:38:b0:61:f8:53:ec:9b:08:3c:98:bb:c5:7c:95:13:4c:bf:
a4:0e:a1:1f:e8:75:11:16:51:fe:53:26:08:fa:32:59:36:09:
91:a8:4d:47:4a:bf:c3:f8:69:89:9d:79:e0:05:d2:0b:c5:52:
39:46:08:40:15:59:88:ac:40:0e:0d:c7:86:f7:92:f6:92:16:
85:30:2d:73:e7:c2:f3:b3:8d:d0:76:95:14:ee:76:7b:75:0f:
aa:e7:49:7b:e0:f3:23:16:5b:11:e7:c6:3c:d5:8d:5d:10:6f:
fc:e8:7d:56:2b:fa:15:26:25:18:4c:45:53:5d:83:5b:38:cc:
b8:af:82:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org