Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OcXsKDcKQYfKKGWmhd2OHGeTxtk.roa
File: OcXsKDcKQYfKKGWmhd2OHGeTxtk.roa (raw, json)
Hash identifier: aE0agj0xKslspuwMfFSL677anGAp0MEbgNDAmNGykFQ=
Subject key identifier: 39:C5:EC:28:37:0A:41:87:CA:28:65:A6:85:DD:8E:1C:67:93:C6:D9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD07446A5BC4060FB2F627212E5DA4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OcXsKDcKQYfKKGWmhd2OHGeTxtk.roa
Signing time: Tue 02 Jan 2024 06:29:37 +0000
ROA not before: Tue 02 Jan 2024 06:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 194.169.172.0/24 maxlen: 24
2.59.253.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:07:44:6a:5b:c4:06:0f:b2:f6:27:21:2e:5d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39c5ec28370a4187ca2865a685dd8e1c6793c6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dd:1b:d7:fd:af:19:4b:33:35:6a:d1:79:5f:
29:1f:82:a6:8d:18:c7:3d:b2:85:98:2c:65:86:a6:
cb:c9:e1:11:21:3b:6e:9c:24:b1:88:50:a5:c5:9f:
02:f9:28:86:73:ba:61:1b:97:fb:35:9c:b2:06:5b:
fd:a2:6c:22:0b:e3:98:37:1d:34:d0:16:35:dc:69:
46:e4:3d:6a:72:73:7a:d3:e6:7d:9e:d8:22:76:b3:
ef:c7:e5:43:41:21:40:d5:9a:f4:48:f2:ec:14:ec:
78:a7:ca:dd:b4:55:fd:f9:c2:92:33:9c:6e:9c:24:
a8:f6:59:43:97:ff:fd:cc:7e:9f:04:29:20:fc:29:
d2:be:64:4b:f3:b9:b9:1c:79:78:d5:02:c6:e6:49:
29:a8:ca:3e:18:fb:1b:37:74:e1:54:b9:47:a9:1e:
1b:bc:6f:bc:a4:03:54:13:44:38:06:44:a1:9a:46:
a6:81:ca:93:83:cc:a6:b8:cb:f9:6f:ec:29:a9:a0:
5a:6f:d6:fc:bd:00:72:7e:03:ad:70:98:d4:67:84:
18:f5:b1:6c:37:d6:12:f3:21:db:d7:1f:aa:65:04:
ea:a8:e5:f3:31:2c:d3:b7:1b:03:74:16:0b:4d:be:
45:c6:62:c0:50:bf:60:8f:73:a5:6e:89:9f:14:6d:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C5:EC:28:37:0A:41:87:CA:28:65:A6:85:DD:8E:1C:67:93:C6:D9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OcXsKDcKQYfKKGWmhd2OHGeTxtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
83.219.97.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
185.222.160.0-185.222.162.255
193.25.217.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.31.205.0/24
194.48.248.0/24
194.55.186.0/23
194.55.224.0/23
194.169.172.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:73:bd:0d:f0:e6:0a:3c:74:c6:0d:5c:61:78:03:7f:db:01:
01:87:e3:8a:31:a0:38:b6:af:43:36:32:17:9c:b7:a8:6a:5f:
9a:6a:eb:30:58:2d:93:86:71:1b:e4:40:fc:62:2f:54:3b:5f:
9a:a4:fb:ba:9a:70:c4:08:44:78:ba:4b:3c:25:64:b4:af:e4:
57:e6:a4:f4:0a:01:34:b0:62:40:ad:99:74:7a:11:49:81:fe:
35:c6:61:91:6c:47:87:24:f2:d2:0f:1d:16:db:ae:10:8b:b0:
54:6f:f1:e2:f8:7d:6c:dc:40:77:18:0f:48:01:d3:c5:18:8a:
ce:36:1f:8c:8d:09:fe:b7:25:ab:75:c9:d5:61:89:4f:69:d6:
f7:cc:d8:32:37:6d:94:89:f3:cf:94:1a:74:3c:f4:d5:3c:d2:
3a:26:dc:40:2a:d9:72:65:de:f1:49:54:13:2d:6a:7e:34:bd:
1b:39:f4:bc:bc:e1:71:50:c4:a4:44:3d:90:f5:6b:a6:12:92:
78:06:6c:24:38:ae:45:0b:85:b6:20:b7:fc:c5:50:f8:50:ba:
42:8c:dd:e0:c1:90:f1:48:b8:60:b1:72:8f:bc:ad:4d:d2:fc:
8b:b5:d6:3f:04:21:63:38:d9:9f:11:e6:6d:54:13:9b:9a:f5:
c1:ba:49:ff
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAYzI3QdEalvEBg+y9ichLl2kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWM1ZWMyODM3MGE0MTg3Y2EyODY1YTY4NWRkOGUxYzY3OTNjNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht0b1/2vGUszNWrReV8pH4KmjRjH
PbKFmCxlhqbLyeERITtunCSxiFClxZ8C+SiGc7phG5f7NZyyBlv9omwiC+OYNx00
0BY13GlG5D1qcnN60+Z9ntgidrPvx+VDQSFA1Zr0SPLsFOx4p8rdtFX9+cKSM5xu
nCSo9llDl//9zH6fBCkg/CnSvmRL87m5HHl41QLG5kkpqMo+GPsbN3ThVLlHqR4b
vG+8pANUE0Q4BkShmkamgcqTg8ymuMv5b+wpqaBab9b8vQByfgOtcJjUZ4QY9bFs
N9YS8yHb1x+qZQTqqOXzMSzTtxsDdBYLTb5FxmLAUL9gj3OlbomfFG3x6QIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFDnF7Cg3CkGHyihlpoXdjhxnk8bZMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvT2NYc0tEY0tRWWZLS0dXbWhkMk9IR2VUeHRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBqwQCAAEwgaQDBAAC
O/0DBAAtVFsDBAAtWEADBAAtWFsDBABPbjMDBABT22EDBABcd8YDBABc+TIDBABe
mqIDBABtzu8DBACy1+EDBACy1+MDBACy1+wwDAMEBbneoAMEALneogMEAMEZ2QME
AMElKAMEAMElKgMEAMElLAMEAMHeYQMEAMHeYwMEAMIfzQMEAMIw+AMEAcI3ugME
AcI34AMEAMKprAMEAMK0JjANBgkqhkiG9w0BAQsFAAOCAQEAL3O9DfDmCjx0xg1c
YXgDf9sBAYfjijGgOLavQzYyF5y3qGpfmmrrMFgtk4ZxG+RA/GIvVDtfmqT7uppw
xAhEeLpLPCVktK/kV+ak9AoBNLBiQK2ZdHoRSYH+NcZhkWxHhyTy0g8dFtuuEIuw
VG/x4vh9bNxAdxgPSAHTxRiKzjYfjI0J/rclq3XJ1WGJT2nW98zYMjdtlInzz5Qa
dDz01TzSOibcQCrZcmXe8UlUEy1qfjS9Gzn0vLzhcVDEpEQ9kPVrphKSeAZsJDiu
RQuFtiC3/MVQ+FC6Qozd4MGQ8Ui4YLFyj7ytTdL8i7XWPwQhYzjZnxHmbVQTm5r1
wbpJ/w==
-----END CERTIFICATE-----
Generated at Wed Jan 3 10:22:44 2024 by rpki-client on console-ams.rpki-client.org