Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PX8h1nXJn6VXmOWUsvwN9OFmQZg.roa
File: PX8h1nXJn6VXmOWUsvwN9OFmQZg.roa (raw, json)
Hash identifier: Kfw4jNpAcfyejg2h84Y2iavmLFYmZPv2KVU5a7IOYcY=
Subject key identifier: 3D:7F:21:D6:75:C9:9F:A5:57:98:E5:94:B2:FC:0D:F4:E1:66:41:98
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C8B3ED0422FB8EA25D74C6C0A316AA916
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PX8h1nXJn6VXmOWUsvwN9OFmQZg.roa
Signing time: Thu 21 Dec 2023 07:19:58 +0000
ROA not before: Thu 21 Dec 2023 07:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 194.169.172.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
2.59.253.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:3e:d0:42:2f:b8:ea:25:d7:4c:6c:0a:31:6a:a9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 21 07:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d7f21d675c99fa55798e594b2fc0df4e1664198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:89:6c:cd:6f:d7:4c:3d:eb:32:43:8a:81:
14:e9:29:48:7c:f2:f7:f4:6b:e9:cb:35:79:a0:23:
42:17:36:21:9e:83:c0:8d:59:51:7b:df:b3:95:45:
d9:14:24:32:13:e4:21:be:60:3d:e8:06:76:d0:82:
db:8f:8a:5f:12:7a:a1:38:ea:be:fa:96:b1:e3:9f:
f8:13:d6:30:aa:b4:ad:c3:c8:58:ff:1f:3d:4e:5e:
25:6b:43:f9:42:c1:bf:5e:df:76:d9:eb:25:37:19:
d4:b9:52:a6:90:70:be:4d:03:e6:9c:cb:90:d0:ff:
ef:99:dd:0c:98:b0:55:ef:f5:7e:d7:97:e0:52:2f:
af:9a:75:f5:0d:f6:8c:9e:e7:03:10:63:1c:d2:0a:
51:69:1c:cd:73:bb:a1:d0:ce:84:b4:c8:7c:aa:6c:
e8:46:87:d5:9d:98:3a:71:16:a8:95:7c:cd:f8:25:
1a:8e:6f:2c:a6:21:e1:c5:12:3d:5f:db:26:5a:4b:
b9:fa:29:8f:25:7d:12:6c:79:ff:18:57:43:d2:1f:
a8:7e:e1:1d:4a:88:f2:aa:66:74:05:e8:0f:fd:80:
2b:a8:07:b8:d6:a9:9e:9b:98:9f:63:98:6b:f2:40:
b3:35:ac:08:e0:3b:c2:8b:7d:9f:94:d0:bb:3b:08:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7F:21:D6:75:C9:9F:A5:57:98:E5:94:B2:FC:0D:F4:E1:66:41:98
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PX8h1nXJn6VXmOWUsvwN9OFmQZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
178.215.238.0/24
185.222.160.0-185.222.162.255
185.225.73.0/24
185.246.223.0/24
193.25.217.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.31.205.0/24
194.48.248.0/24
194.55.186.0/23
194.55.224.0/23
194.169.172.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
55:15:42:96:47:80:14:9d:f7:e5:e7:b9:73:c0:43:aa:98:4b:
72:2c:31:3d:c7:88:a4:2a:a3:9d:e2:e6:61:fa:b2:fa:46:e4:
3c:bf:1b:72:50:c0:b6:d6:cc:0b:de:a0:69:51:cd:ec:99:d1:
08:a8:e0:e7:23:97:1f:57:a0:de:32:74:c2:22:a7:bc:11:0a:
df:cb:fd:d2:79:eb:94:b3:d3:10:c2:e1:8e:6d:98:16:2c:3b:
51:3a:c7:68:08:dc:ce:43:53:ce:63:c9:de:7b:1c:06:24:a8:
62:fe:0a:00:2d:e4:56:b3:de:c0:e7:f6:ed:3d:f8:b2:e2:fa:
d3:d8:07:5c:ff:c7:d2:cc:d7:11:fc:0d:47:d7:b3:3a:b1:30:
e0:8a:ef:2e:af:d8:95:fa:3a:1c:c7:f1:b1:b3:7c:0f:48:bf:
d4:1b:e7:24:f3:46:20:3c:f4:51:3a:8b:9a:75:c0:bc:f7:c7:
5f:c9:6c:68:84:72:ff:35:ec:03:e3:1f:36:e3:60:3a:c7:83:
7c:8c:66:ca:3a:bc:e0:87:e0:48:6f:59:c1:d6:e1:1f:18:bc:
db:49:dd:c4:6d:6c:7a:e8:97:49:f5:65:c2:a5:8e:7e:7f:8b:
64:08:7f:81:36:c8:71:dc:c4:30:6f:21:14:27:a8:ab:34:80:
b9:c6:a4:ef
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAYyLPtBCL7jqJddMbAoxaqkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMjIxMDcxOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDdmMjFkNjc1Yzk5ZmE1NTc5OGU1OTRiMmZjMGRmNGUxNjY0MTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCSJbM1v10w96zJDioEU6SlIfPL3
9GvpyzV5oCNCFzYhnoPAjVlRe9+zlUXZFCQyE+QhvmA96AZ20ILbj4pfEnqhOOq+
+pax45/4E9YwqrStw8hY/x89Tl4la0P5QsG/Xt922eslNxnUuVKmkHC+TQPmnMuQ
0P/vmd0MmLBV7/V+15fgUi+vmnX1DfaMnucDEGMc0gpRaRzNc7uh0M6EtMh8qmzo
RofVnZg6cRaolXzN+CUajm8spiHhxRI9X9smWku5+imPJX0SbHn/GFdD0h+ofuEd
SojyqmZ0BegP/YArqAe41qmem5ifY5hr8kCzNawI4DvCi32flNC7Owjz0QIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFD1/IdZ1yZ+lV5jllLL8DfThZkGYMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUFg4aDFuWEpuNlZYbU9XVXN2d045T0ZtUVpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbADBAAC
O/0DBAAtVFsDBAAtWEADBAAtWFsDBABPbjMDBABcd8YDBABc+TIDBABemqIDBABt
zu8DBACy1+EDBACy1+MDBACy1+wDBACy1+4wDAMEBbneoAMEALneogMEALnhSQME
ALn23wMEAMEZ2QMEAMElKAMEAMElKgMEAMElLAMEAMHeYQMEAMHeYwMEAMIfzQME
AMIw+AMEAcI3ugMEAcI34AMEAMKprAMEAMK0JjANBgkqhkiG9w0BAQsFAAOCAQEA
VRVClkeAFJ335ee5c8BDqphLciwxPceIpCqjneLmYfqy+kbkPL8bclDAttbMC96g
aVHN7JnRCKjg5yOXH1eg3jJ0wiKnvBEK38v90nnrlLPTEMLhjm2YFiw7UTrHaAjc
zkNTzmPJ3nscBiSoYv4KAC3kVrPewOf27T34suL609gHXP/H0szXEfwNR9ezOrEw
4IrvLq/Ylfo6HMfxsbN8D0i/1BvnJPNGIDz0UTqLmnXAvPfHX8lsaIRy/zXsA+Mf
NuNgOseDfIxmyjq84IfgSG9ZwdbhHxi820ndxG1seuiXSfVlwqWOfn+LZAh/gTbI
cdzEMG8hFCeoqzSAucak7w==
-----END CERTIFICATE-----
Generated at Thu Dec 28 17:19:23 2023 by rpki-client on console-ams.rpki-client.org