Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XIs38CJMpN_S24GeuPMEPC8nOGI.roa
File: XIs38CJMpN_S24GeuPMEPC8nOGI.roa (raw, json)
Hash identifier: 5rNMLotzfD6teIfuwPmH7K76jVGbvSgzpTgjJn6Rouk=
Subject key identifier: 5C:8B:37:F0:22:4C:A4:DF:D2:DB:81:9E:B8:F3:04:3C:2F:27:38:62
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E5184BD25B3A09BC955680EAF8FF8B698
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XIs38CJMpN_S24GeuPMEPC8nOGI.roa
Signing time: Mon 18 Mar 2024 12:23:57 +0000
ROA not before: Mon 18 Mar 2024 12:23:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.253.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
94.156.75.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 10:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:84:bd:25:b3:a0:9b:c9:55:68:0e:af:8f:f8:b6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 18 12:23:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c8b37f0224ca4dfd2db819eb8f3043c2f273862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:59:c8:81:9b:e8:df:d2:05:c6:a2:56:2b:
51:e6:02:3d:cb:b9:11:4c:76:70:14:87:35:55:93:
48:7f:9d:a6:c1:34:7b:41:54:34:72:ac:5e:80:6e:
7e:01:1b:03:f0:68:51:8f:a5:7a:ac:78:01:fd:c6:
2e:c3:c9:a2:3c:a2:db:ec:9a:40:f8:54:04:26:4a:
04:73:ba:b4:08:5f:5d:71:b1:3c:85:30:f5:f5:5f:
8a:a5:f2:06:ba:f2:5b:42:dd:37:f7:67:ef:c2:4d:
82:6d:b4:dc:bc:df:73:da:e3:c9:9f:c0:3b:c6:c9:
25:5f:6c:ee:84:a0:8e:9e:6c:f6:75:10:4e:18:a2:
80:e7:5c:8d:61:f8:23:9f:12:05:29:bc:78:05:fe:
64:74:d8:f0:e0:12:cd:65:85:d7:af:30:1c:a1:d5:
63:fe:90:d6:02:a1:1a:5f:e9:91:d3:a1:39:1b:ee:
5b:73:aa:21:ac:79:c0:15:67:e9:45:eb:2f:74:ee:
44:3a:d9:15:3c:a5:96:57:3d:94:ab:ce:54:c2:f0:
1c:74:9f:f2:7f:e6:d5:0f:d6:cc:7a:9e:d1:ac:06:
43:af:a6:f6:dd:a3:09:02:07:14:53:09:e1:06:52:
5d:a9:16:76:7d:a1:07:ef:de:35:96:bd:0f:d7:d4:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8B:37:F0:22:4C:A4:DF:D2:DB:81:9E:B8:F3:04:3C:2F:27:38:62
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XIs38CJMpN_S24GeuPMEPC8nOGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
83.219.97.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
94.156.75.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
185.222.160.0-185.222.162.255
185.246.223.0/24
193.25.217.0/24
193.35.19.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.55.187.0/24
194.55.225.0/24
194.59.31.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c9:73:e6:83:24:10:95:4c:bf:11:c6:3a:ac:f8:21:90:86:
2d:fb:80:2e:a1:77:6b:3e:2e:81:59:e3:b9:10:be:10:d3:70:
1e:18:54:11:b7:55:19:f1:4b:47:3e:9a:90:00:1d:36:ed:8d:
fc:4b:2b:7c:45:8f:18:e6:64:33:c9:e3:d8:2f:f9:11:16:59:
84:c6:58:c4:47:03:b5:a5:6e:0c:4a:a5:8f:7e:36:31:12:10:
c8:33:ec:59:d4:12:91:20:ee:8a:46:b3:e4:83:a7:33:f7:cb:
60:3d:88:59:42:1f:f0:28:54:22:25:c2:74:7a:a5:11:4d:68:
44:e5:ad:34:34:60:cb:2b:72:85:30:a9:1d:bd:72:8e:bc:6d:
86:1b:57:bc:e2:f6:90:5a:d6:c4:64:45:4b:e2:03:e4:c5:b6:
9e:c1:d4:ab:2e:5a:76:17:ce:f5:4a:08:6b:7c:fa:a6:03:1e:
eb:dd:c1:9e:39:12:6e:a6:f6:8d:5c:7e:4c:c9:72:27:00:2c:
5f:da:64:01:b8:f6:42:d3:e6:51:09:97:08:ea:c9:ed:0d:47:
5a:21:08:87:2b:9a:ec:51:2b:00:78:10:ec:85:4d:c3:de:58:
4d:e2:b9:83:48:77:fb:db:b5:ee:cc:1c:32:49:2e:43:c1:e7:
c9:f5:ca:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 15:17:41 2024 by rpki-client on console-ams.rpki-client.org