Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P_SvSKHcnAwu53J0M7HNE5I9H_0.roa
File: P_SvSKHcnAwu53J0M7HNE5I9H_0.roa (raw, json)
Hash identifier: /zwF8OKOTdcCNW6aa+hMi8V59MHTA1ZsFfoXg2Kt7vo=
Subject key identifier: 3F:F4:AF:48:A1:DC:9C:0C:2E:E7:72:74:33:B1:CD:13:92:3D:1F:FD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187A35A1468F996B5F1168512708E84021B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P_SvSKHcnAwu53J0M7HNE5I9H_0.roa
Signing time: Fri 21 Apr 2023 10:26:42 +0000
ROA not before: Fri 21 Apr 2023 10:26:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 194.169.172.0/24 maxlen: 24
2.59.253.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
82.115.209.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
94.156.177.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
194.49.87.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:5a:14:68:f9:96:b5:f1:16:85:12:70:8e:84:02:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 21 10:26:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ff4af48a1dc9c0c2ee7727433b1cd13923d1ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:0c:5a:8a:e1:ee:84:63:5f:c3:92:fe:5c:
cc:cf:03:bb:2d:a6:7a:ce:b5:32:94:6f:b4:5f:d5:
a0:40:ea:6d:4d:2e:38:d5:a9:e0:61:2e:47:56:fb:
36:fe:fc:94:f1:57:63:55:13:d8:29:eb:26:9f:16:
37:30:5e:05:cf:82:aa:2c:ae:d9:ac:36:a3:0c:e3:
b5:7c:e5:8f:53:e7:5c:5e:44:c1:bc:ef:f3:fa:e2:
34:d9:df:10:61:b5:4b:b1:e4:01:8b:e5:d8:a3:76:
d3:f2:61:f6:ce:8a:12:7c:2d:73:f2:b6:52:d0:50:
f8:94:9b:c1:05:89:61:35:c6:35:c1:ca:68:60:9b:
45:20:97:88:5a:07:50:56:eb:c0:ee:dd:83:7b:14:
ed:15:32:a2:92:d0:aa:4c:68:26:8d:41:80:83:d2:
31:64:0d:79:80:7b:15:c7:02:08:a9:0a:7f:51:0c:
27:86:27:6c:c9:2b:e7:ec:0a:2e:07:01:a4:d8:8f:
8b:e3:77:73:36:da:0b:2b:27:c2:00:a3:55:2b:e7:
e6:a2:7c:ef:b5:b2:6a:bc:91:08:59:9f:95:f0:c5:
22:2f:94:1d:f4:19:66:91:ee:be:45:5a:bd:51:2c:
5e:47:93:7b:1c:c8:a1:44:cc:39:4d:a9:e6:b2:5e:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F4:AF:48:A1:DC:9C:0C:2E:E7:72:74:33:B1:CD:13:92:3D:1F:FD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P_SvSKHcnAwu53J0M7HNE5I9H_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.8.93.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
45.149.233.0/24
79.110.50.0/24
82.115.209.0/24
84.54.49.0/24
92.119.198.0/24
92.249.50.0/24
94.103.125.0/24
94.154.162.0/24
94.156.177.0/24
109.206.239.0/24
141.98.7.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/23
185.222.160.0-185.222.162.255
193.25.217.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.31.205.0/24
194.48.248.0/24
194.49.87.0/24
194.55.187.0/24
194.55.225.0/24
194.169.172.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
08:6c:27:84:c7:e6:f2:39:e9:2f:8c:24:35:40:bd:09:c7:d6:
62:34:63:c7:13:13:2a:06:ce:a0:4b:da:31:19:7f:a2:83:90:
c9:17:b4:4e:1e:3e:00:ff:e5:dd:2b:db:bb:5f:4b:16:a7:54:
93:aa:f6:7d:6d:f9:b3:3e:ae:f1:77:d1:3c:97:1c:a0:d0:05:
6a:02:bb:61:7b:5d:53:92:94:5b:48:98:b8:7d:7f:76:2b:94:
c6:65:fb:96:53:88:24:ab:8b:5d:ad:72:25:91:fd:0d:73:1e:
cf:46:07:8a:18:e1:fd:9e:5b:82:34:81:c4:bc:fd:7b:d0:4f:
11:08:75:ec:2c:ea:ee:41:0a:26:0c:e7:72:28:c9:97:38:5d:
36:c1:81:44:42:4b:2e:cb:05:4b:13:d7:44:8a:ed:3f:db:03:
9f:d0:2e:fc:13:9c:0e:d3:b4:93:7f:8c:55:5a:79:6a:fb:30:
35:ad:ae:12:ea:1e:ee:36:f6:ef:ef:08:e6:89:a5:f9:21:26:
34:76:52:3e:48:fd:8d:e9:e9:5f:c3:17:0d:04:bd:30:56:45:
e8:d9:ad:31:40:61:45:a0:90:13:e6:e7:0e:a2:af:7b:24:e6:
d5:b5:ba:76:67:0a:55:29:8e:1d:9c:b9:48:d8:7c:e7:5b:c8:
59:01:ae:db
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org