Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VHlbFRNot12gHj5bOztapyPoKyc.roa
File: VHlbFRNot12gHj5bOztapyPoKyc.roa (raw, json)
Hash identifier: mNKvfXPxWOAQp99Y7BBdHVIFSvpiV1LKu9ORoDf/Tu8=
Subject key identifier: 54:79:5B:15:13:68:B7:5D:A0:1E:3E:5B:3B:3B:5A:A7:23:E8:2B:27
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D30710E1A12FE139BE43ED5CF8BD95988
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VHlbFRNot12gHj5bOztapyPoKyc.roa
Signing time: Mon 22 Jan 2024 09:12:12 +0000
ROA not before: Mon 22 Jan 2024 09:12:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.253.0/24 maxlen: 24
45.9.156.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 07:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:71:0e:1a:12:fe:13:9b:e4:3e:d5:cf:8b:d9:59:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 22 09:12:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54795b151368b75da01e3e5b3b3b5aa723e82b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:40:fc:16:71:6d:da:3a:15:f1:87:c2:7e:
92:4a:4b:27:56:fd:25:74:d8:94:fe:95:5a:6c:38:
c7:26:1f:19:df:b0:52:27:d4:7e:b3:25:98:e7:1e:
3a:2c:2b:71:4e:47:35:e8:6d:75:0b:d4:c4:4b:10:
57:8d:06:be:49:19:fc:c9:6c:f9:ac:24:5f:11:a9:
ea:b9:82:1e:5e:1c:33:3a:10:6e:85:ca:50:e0:43:
49:02:12:4c:72:9b:19:8a:89:5f:10:05:36:14:e6:
b2:76:db:2b:d8:b5:65:a4:7f:02:f3:7e:72:59:c1:
85:a6:6a:b2:d1:0e:07:2c:b9:ca:23:b1:c9:d8:00:
3c:e1:ab:64:31:b4:83:20:d6:96:8a:e2:fd:20:66:
a4:39:9b:5f:4d:c3:bd:a4:79:23:4c:32:bc:0d:a8:
86:fc:c7:d4:d1:cf:68:34:48:ca:ae:31:5f:12:cb:
c0:8a:37:98:7b:c9:2b:47:85:51:d8:66:41:70:f4:
fd:a9:ed:9b:9d:e0:b8:92:e4:a2:58:b7:ec:b5:75:
b7:06:c4:5b:11:e7:da:e6:7c:46:df:4f:3c:eb:bf:
05:56:4f:af:2a:32:db:7b:4d:5e:b6:35:c4:24:d8:
29:26:a0:ee:10:e3:d8:35:6c:53:5c:85:f0:a4:ec:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:79:5B:15:13:68:B7:5D:A0:1E:3E:5B:3B:3B:5A:A7:23:E8:2B:27
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VHlbFRNot12gHj5bOztapyPoKyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.9.156.0/24
45.84.89.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
82.115.208.0/24
83.219.97.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
185.222.160.0-185.222.162.255
185.246.223.0/24
193.25.217.0/24
193.35.19.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.31.205.0/24
194.48.248.0/24
194.55.187.0/24
194.55.225.0/24
194.169.172.0/24
194.180.38.0/23
Signature Algorithm: sha256WithRSAEncryption
13:01:23:c0:2a:b1:02:f5:f5:b3:30:77:eb:4c:4f:db:20:7e:
ed:87:4c:93:1c:48:2c:34:84:ce:86:d0:b5:2b:f8:25:9b:8b:
cb:73:d8:9a:25:ff:c4:a1:44:aa:1b:fb:a7:93:4e:de:a0:b6:
81:f6:00:59:8e:39:8b:11:0f:e1:8d:2a:a8:23:40:04:2d:96:
3e:dd:24:f0:22:1f:da:d5:a7:02:79:cc:c0:32:7a:0f:00:39:
7d:e6:d5:f8:93:af:88:6c:0a:d0:07:50:00:80:a8:af:51:8e:
36:1f:9a:d3:db:8b:7a:62:b6:63:52:04:dd:98:8c:af:8b:d9:
64:ee:4a:a9:31:69:7c:c6:c6:d9:37:e0:0f:76:db:1b:32:6e:
66:03:a5:d3:d3:ec:0b:84:de:3a:71:0f:87:1e:f9:98:ae:2e:
a6:60:7c:59:a5:35:7e:b4:2e:00:2f:4b:32:f2:95:d1:c8:4b:
6b:b5:5b:5b:63:eb:02:8e:c6:df:39:48:8e:2b:44:79:c7:fa:
25:19:0e:82:f5:0c:0e:6d:24:24:d2:13:92:e0:5e:cc:e2:55:
c4:41:84:a8:0d:b4:13:66:ce:c9:df:88:66:1b:24:05:86:1d:
2b:7d:a5:d0:6f:90:1b:a0:4d:86:7b:a1:1e:7d:8e:7c:f0:75:
c0:05:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 12:58:20 2024 by rpki-client on console-ams.rpki-client.org