Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/O-MzZfdOMTTzcLCID4RSgETlLsc.roa
File: O-MzZfdOMTTzcLCID4RSgETlLsc.roa (raw, json)
Hash identifier: LNepmvmmAIyF4e3wTZLPMi8Mc3SXsff3I0FU7ZHz9WE=
Subject key identifier: 3B:E3:33:65:F7:4E:31:34:F3:70:B0:88:0F:84:52:80:44:E5:2E:C7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A662BE86CDF606219F29122FBC7676912
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/O-MzZfdOMTTzcLCID4RSgETlLsc.roa
Signing time: Tue 05 Sep 2023 16:27:48 +0000
ROA not before: Tue 05 Sep 2023 16:27:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 2.59.254.0/24 maxlen: 24
94.156.6.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
194.180.48.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
185.225.75.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
87.121.3.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
212.87.204.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
94.156.253.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
94.156.161.0/24 maxlen: 24
193.42.33.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
185.216.68.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
93.123.118.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:66:2b:e8:6c:df:60:62:19:f2:91:22:fb:c7:67:69:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 5 16:27:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3be33365f74e3134f370b0880f84528044e52ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:af:1b:5b:6b:f4:cb:8b:16:1e:30:06:60:e0:
e1:1b:9a:8c:a6:43:fd:29:06:1e:38:34:7b:1c:99:
ee:38:3f:92:1c:0d:fa:96:f2:ed:4e:93:84:45:ae:
b6:08:2f:d4:4f:82:f1:dc:a6:ad:ec:ab:b9:e9:1b:
de:59:64:12:00:25:c3:1f:ec:5a:88:8e:21:2b:02:
9c:fd:6e:a1:e9:7c:3f:90:05:32:aa:0b:5f:b0:8b:
02:79:b9:63:3c:e3:98:1c:25:c1:16:33:dc:ab:d8:
08:40:7d:08:b9:d9:8a:e1:35:8d:8a:61:9a:9d:fc:
2f:4c:a1:8a:8f:96:2d:90:c7:52:4f:55:73:72:16:
73:28:8c:90:2e:49:cb:18:e7:ff:cb:d9:86:30:ca:
75:79:52:18:9c:dc:10:2f:07:62:93:b8:71:2b:12:
08:f3:01:f9:9b:64:8f:3a:79:77:44:9f:59:24:67:
f3:45:97:8f:22:97:3b:1e:d8:b7:01:28:81:5b:b1:
3d:48:bf:27:22:c7:cb:b7:f0:b3:f4:8d:5d:ca:15:
71:a4:a6:07:9c:f9:12:89:d8:0e:f2:49:a7:b2:48:
0e:32:cb:34:8a:4d:9a:20:12:e1:b3:e8:28:78:27:
47:11:0d:38:e7:d8:ee:bd:3e:77:52:03:c4:c4:a4:
ab:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E3:33:65:F7:4E:31:34:F3:70:B0:88:0F:84:52:80:44:E5:2E:C7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/O-MzZfdOMTTzcLCID4RSgETlLsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.254.0/24
37.139.129.0/24
45.12.253.0/24
45.66.230.0/24
45.81.39.0/24
79.110.48.0/24
79.110.62.0/24
80.76.51.0/24
84.54.50.0/24
85.31.45.0/24
85.217.144.0/24
87.121.3.0/24
87.121.221.0/24
93.123.118.0/24
94.156.6.0/24
94.156.102.0/24
94.156.161.0/24
94.156.253.0/24
95.214.27.0/24
185.216.68.0/24
185.216.71.0/24
185.225.73.0-185.225.75.255
185.254.37.0/24
193.42.32.0/23
194.55.224.0/24
194.180.48.0/23
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:3d:85:d4:f2:fc:fd:4c:4e:04:31:0f:5d:f0:53:0f:19:62:
6e:8d:94:d9:4f:b9:7d:ee:9b:9a:6f:88:33:50:ee:c3:25:f6:
fe:04:08:aa:73:22:f0:82:93:02:25:92:77:71:e5:24:bc:93:
19:30:bd:be:ef:6e:6f:ff:dd:d3:00:f5:eb:09:e6:5a:7c:a7:
1e:ec:06:cf:33:56:3f:63:30:c1:c9:b5:1b:10:bc:4f:25:5c:
8d:f3:2c:97:79:b8:8f:01:7f:94:5c:10:4a:11:47:c0:f7:a5:
5f:46:e1:3a:1b:b7:a0:90:e6:45:0c:bb:92:73:9d:5b:fb:d7:
20:f6:e6:71:69:d8:71:c3:c1:b2:1b:ac:67:46:2b:25:97:6b:
6a:8c:c6:44:76:ac:11:f9:b1:33:87:84:a4:c0:39:99:6e:7a:
13:aa:3e:6d:e1:c8:36:89:49:f8:4a:74:03:19:0a:b0:cc:ff:
a3:75:10:ea:92:4f:c0:1d:19:d1:38:61:85:cc:c2:5b:51:0d:
87:16:b8:6f:f8:58:66:b9:f8:2b:df:e9:88:e3:d3:72:e5:00:
6f:90:d2:ba:7f:ad:12:66:2f:2a:8c:d7:5c:42:5d:0d:23:40:
46:15:b9:94:7a:09:3d:d2:c7:c1:10:ff:9c:38:f6:53:a0:a5:
71:8f:74:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 07:57:12 2023 by rpki-client on console-ams.rpki-client.org