Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PLIzGjxNPKYZRw6P-wYd5mDy8hs.roa
File: PLIzGjxNPKYZRw6P-wYd5mDy8hs.roa (raw, json)
Hash identifier: TTjHmRTm1KkYtCawjk+tNLwQPqMV9MnwOEDRl+4rjEE=
Subject key identifier: 3C:B2:33:1A:3C:4D:3C:A6:19:47:0E:8F:FB:06:1D:E6:60:F2:F2:1B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018683AF660B94498D89CAC78B2438D19956
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PLIzGjxNPKYZRw6P-wYd5mDy8hs.roa
Signing time: Fri 24 Feb 2023 13:49:15 +0000
ROA not before: Fri 24 Feb 2023 13:49:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211760
IP address blocks: 95.214.25.0/24 maxlen: 24
171.22.28.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:af:66:0b:94:49:8d:89:ca:c7:8b:24:38:d1:99:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 24 13:49:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cb2331a3c4d3ca619470e8ffb061de660f2f21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dc:d5:c6:60:a4:79:1e:b4:3c:8b:fe:05:62:
d2:10:37:ab:0f:32:af:1b:4a:1d:a3:94:a3:06:72:
48:84:27:16:9d:49:2c:47:22:e1:b6:21:07:3f:a4:
7a:b2:c7:ce:32:ec:4d:cc:ce:3e:00:46:aa:55:2b:
c9:d9:fb:11:63:5b:ca:00:ee:60:5b:ff:be:56:7d:
cf:5a:91:41:17:56:c5:89:fc:e4:b8:a6:8c:cd:d0:
c5:7c:07:9a:da:0a:39:84:7b:21:5e:fc:8b:03:5c:
2b:77:0e:37:8e:93:bd:b3:2c:c3:ac:d8:b0:58:88:
0f:bd:68:60:b0:65:64:c4:92:89:f5:48:19:6d:4f:
22:49:e9:b9:4b:32:e5:0f:7f:de:0f:01:80:c0:69:
92:d9:0e:35:89:bd:21:b9:04:52:44:c1:f1:3c:11:
b2:4e:59:50:0e:2e:04:09:11:88:b5:9e:eb:32:91:
b5:ea:81:7e:be:92:9e:80:da:0b:01:e3:8d:98:2d:
0a:04:17:dd:f7:9e:5e:34:ac:70:a4:a8:9c:c5:28:
3a:bf:97:2a:aa:29:5c:62:53:43:ca:24:9e:b6:e2:
1f:d1:75:0c:78:fd:11:e7:40:a1:15:9a:a2:e1:ce:
50:02:a9:f6:8a:f5:e8:0f:fe:9d:6c:89:0b:6b:7b:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B2:33:1A:3C:4D:3C:A6:19:47:0E:8F:FB:06:1D:E6:60:F2:F2:1B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PLIzGjxNPKYZRw6P-wYd5mDy8hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.25.0/24
171.22.28.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b1:ae:53:87:e1:b8:b7:eb:58:76:3b:f7:9a:47:7c:15:65:
ca:d0:84:b0:f3:81:85:df:10:59:9f:6b:dc:3f:af:ae:57:fe:
2f:f3:fa:24:f2:08:c9:7e:6c:e0:0b:17:42:dc:7b:ff:af:b7:
78:1b:51:eb:12:0c:ba:12:56:d2:12:7e:0e:22:a0:ad:59:3f:
6d:71:96:56:a3:b0:fa:09:d6:cb:87:b1:72:b9:8a:9f:05:18:
31:c8:5a:72:ca:39:f9:9b:ae:89:66:0e:a1:4c:81:31:59:5a:
2f:a1:71:f5:69:df:d8:15:c0:73:85:5e:da:ae:88:37:fd:cb:
2d:44:d4:5f:4b:6e:41:3a:a6:11:a9:63:a9:04:e1:1f:4b:98:
b9:d5:2c:b3:e6:3e:c5:0a:3c:7c:4d:f7:d8:cc:4d:03:0c:0e:
9d:b5:70:03:19:a7:ca:26:1a:db:c3:9f:29:8c:f5:39:2a:17:
49:d0:39:c8:1c:27:97:1b:10:10:79:59:f1:2c:b6:f4:8c:c2:
dc:61:d5:06:67:9a:0f:f0:52:2b:08:0f:7b:d3:20:65:d9:cf:
65:9c:af:a3:fc:ec:c3:22:b7:e6:7f:fb:e3:2d:9f:e5:84:e8:
62:74:a2:95:d4:e7:b5:26:f2:35:41:90:90:69:f4:f6:96:b5:
0c:48:59:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org