Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VXhay9LEcAS_DRCs91YRwQi9PKY.roa
File: VXhay9LEcAS_DRCs91YRwQi9PKY.roa (raw, json)
Hash identifier: Bt/Z+selvKk1iAvGqzOJiEU9gUPqua9ADLFaDEVFQ8s=
Subject key identifier: 55:78:5A:CB:D2:C4:70:04:BF:0D:10:AC:F7:56:11:C1:08:BD:3C:A6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A88C954A8ED3CF8E013598088A624D071
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VXhay9LEcAS_DRCs91YRwQi9PKY.roa
Signing time: Tue 12 Sep 2023 09:46:50 +0000
ROA not before: Tue 12 Sep 2023 09:46:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 87.120.196.0/24 maxlen: 24
45.12.254.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
193.8.184.0/22 maxlen: 24
194.113.36.0/22 maxlen: 24
83.143.113.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
171.22.16.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
31.169.124.0/22 maxlen: 24
45.81.243.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
45.128.234.0/23 maxlen: 24
185.246.222.0/24 maxlen: 24
185.246.220.0/23 maxlen: 24
109.206.242.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
37.139.128.0/24 maxlen: 24
109.206.240.0/23 maxlen: 24
109.206.236.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
212.87.220.0/22 maxlen: 24
212.87.222.0/23 maxlen: 24
193.168.196.0/22 maxlen: 24
45.128.97.0/24 maxlen: 24
45.128.99.0/24 maxlen: 24
193.148.56.0/22 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.60.0/23 maxlen: 24
87.121.98.0/24 maxlen: 24
45.84.88.0/24 maxlen: 24
85.209.134.0/23 maxlen: 24
45.88.67.0/24 maxlen: 24
45.95.0.0/22 maxlen: 24
45.88.66.0/24 maxlen: 24
94.125.100.0/22 maxlen: 24
45.91.193.0/24 maxlen: 24
31.13.247.0/24 maxlen: 24
87.121.216.0/22 maxlen: 24
5.253.56.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:88:c9:54:a8:ed:3c:f8:e0:13:59:80:88:a6:24:d0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 12 09:46:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55785acbd2c47004bf0d10acf75611c108bd3ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:f7:09:22:bd:3a:14:22:4f:e9:9f:41:08:
d1:9a:0a:ec:f2:73:43:86:fc:08:a3:8c:42:3d:e4:
8b:f0:90:f0:55:25:03:46:0c:f8:da:a5:00:ac:11:
5f:7e:1a:15:5c:61:af:9d:35:e0:56:e6:eb:44:5a:
1b:8f:b9:7f:49:04:e0:bd:9d:9f:c1:1d:08:04:16:
2c:8e:7d:20:f8:bd:04:24:d2:61:fa:d5:bd:be:12:
ad:c5:a4:99:b5:d2:b5:f1:43:72:8e:3f:5e:bd:d3:
85:1f:28:0d:7d:2a:7f:95:93:7e:85:fc:75:c4:f4:
3c:37:a0:26:57:64:1f:44:a3:8a:da:d8:81:a0:3a:
82:98:26:13:64:ba:09:0a:3b:ae:23:c7:31:3e:18:
5e:05:ad:f6:f5:4c:84:ab:4f:f8:44:4d:f6:8a:78:
27:cd:c3:b3:7a:fb:5d:d9:94:f2:8f:ef:4a:dc:c2:
2f:2b:a4:5b:1e:63:7d:96:55:9a:e2:8e:57:da:a5:
3a:17:93:ec:d2:05:d3:a8:42:73:5b:1f:bc:9e:04:
10:79:82:66:f4:d5:b0:96:59:47:0b:40:0b:c1:46:
5b:4a:7f:ca:05:f2:33:1d:98:43:49:49:df:bd:93:
a2:33:3e:77:b3:99:f9:20:ac:14:da:e7:04:3a:77:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:78:5A:CB:D2:C4:70:04:BF:0D:10:AC:F7:56:11:C1:08:BD:3C:A6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VXhay9LEcAS_DRCs91YRwQi9PKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
31.13.247.0/24
31.169.124.0/22
37.139.128.0/24
45.12.254.0/24
45.14.165.0/24
45.81.243.0/24
45.84.88.0/24
45.88.66.0/23
45.89.244.0/24
45.91.193.0/24
45.95.0.0/22
45.128.97.0/24
45.128.99.0/24
45.128.234.0/23
45.149.235.0/24
79.110.63.0/24
83.143.113.0/24
84.21.172.0/24
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
85.208.139.0/24
85.209.134.0/23
87.120.36.0/24
87.120.88.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
87.121.98.0/24
87.121.216.0/22
91.92.21.0/24
93.123.30.0/23
94.125.100.0/22
94.156.236.0/24
109.206.236.0/24
109.206.240.0/22
171.22.16.0/24
171.22.19.0/24
171.22.30.0/24
185.207.14.0/23
185.218.137.0-185.218.138.255
185.246.220.0-185.246.222.255
185.252.179.0/24
193.8.184.0/22
193.47.60.0/23
193.148.56.0/22
193.168.196.0/22
194.113.36.0/22
212.87.220.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:85:74:05:29:ca:5d:74:3a:81:98:e1:76:10:1f:77:a7:61:
13:0d:86:72:90:39:e3:f4:83:ec:f0:7b:5f:43:a3:77:8d:13:
66:66:f3:cb:ee:74:24:27:b2:e6:46:92:75:8b:9e:ef:56:77:
d9:13:0a:5b:f8:94:e9:f0:6f:83:9b:c1:8d:d0:25:91:3a:66:
83:fd:54:7a:8c:e1:df:36:05:7d:97:e0:c8:05:94:7b:6a:41:
a2:8f:59:43:e3:4e:39:db:f6:c3:58:cc:8d:34:1c:69:b4:71:
9b:dd:94:66:7f:c6:ee:80:f8:03:68:fc:c4:e0:6a:d8:aa:4c:
65:84:1f:b3:1e:95:52:fa:5a:1b:5c:31:4c:ab:18:ce:df:f2:
1c:4b:96:bf:67:fd:6c:4d:d9:68:00:37:22:aa:db:2c:06:0f:
e3:83:c9:5d:c1:a2:ef:c9:2a:1c:83:f7:d1:72:58:b1:80:ee:
b7:be:0e:38:ed:98:fd:0d:a6:d7:49:6c:5d:89:e4:be:6f:9a:
d5:38:e6:ed:05:4a:9c:ed:8f:f1:fd:de:42:f3:5a:cd:74:70:
c0:dd:da:74:d7:28:b1:99:e8:9d:b9:2c:1a:d6:d1:fb:b0:1c:
d1:03:2c:45:38:08:99:a8:1a:13:52:19:d2:34:cf:50:39:f9:
c7:f3:1f:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 15 10:05:59 2023 by rpki-client on console-ams.rpki-client.org