Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_aPOvUMmkFqVYjqDbF15ZMpH-po.roa
File: _aPOvUMmkFqVYjqDbF15ZMpH-po.roa (raw, json)
Hash identifier: zhgNB6BDbvtOvoTdPl0lTZUmpesxCUWkyiIYEGMIBzA=
Subject key identifier: FD:A3:CE:BD:43:26:90:5A:95:62:3A:83:6C:5D:79:64:CA:47:FA:9A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C8C493B43EAB697E60B26955923BDB15F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_aPOvUMmkFqVYjqDbF15ZMpH-po.roa
Signing time: Thu 21 Dec 2023 12:10:58 +0000
ROA not before: Thu 21 Dec 2023 12:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2.59.255.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
94.156.10.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
185.226.172.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
185.216.84.0/22 maxlen: 24
45.88.90.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:49:3b:43:ea:b6:97:e6:0b:26:95:59:23:bd:b1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 21 12:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fda3cebd4326905a95623a836c5d7964ca47fa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:15:ee:55:c8:79:35:81:bc:1c:51:89:94:
c4:a1:bd:42:8f:e1:46:4f:91:51:5a:60:93:f7:0a:
d1:e8:f3:a4:86:5b:c9:92:3f:49:31:c6:71:f9:41:
fd:a1:b8:b8:e6:cc:27:2f:21:48:a7:a5:eb:44:50:
2c:28:4a:eb:62:1e:29:a4:a9:05:79:06:bb:80:64:
3a:9d:a0:b8:7d:e0:0d:c8:47:0d:1f:9b:2b:cb:30:
c8:ae:3f:21:76:42:54:23:37:1e:3f:4a:2d:80:5e:
79:88:8b:aa:e0:59:cd:4b:43:d1:a2:c4:58:fa:b6:
a7:47:5a:f0:59:36:80:38:e0:6e:23:f5:0e:ef:7d:
27:7b:c2:1f:e3:15:ca:44:2e:2e:65:86:7d:0c:f7:
87:f1:cb:07:eb:fe:06:ae:0d:60:8b:9b:5b:3b:b5:
f0:8e:8d:81:66:b0:19:a0:f0:e0:3b:c6:90:22:d7:
fa:84:e4:f7:fd:a4:b0:f2:78:b9:f1:b7:89:78:90:
0e:e5:ba:d4:12:7f:ca:db:10:0a:da:e8:24:6b:61:
9f:ce:05:96:66:38:81:58:aa:73:6f:ad:bb:e2:06:
c1:0a:88:9e:aa:ee:aa:b8:ca:a7:4d:50:1b:76:99:
78:b3:96:10:d9:2a:d1:8e:06:05:76:92:fc:0d:de:
2c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A3:CE:BD:43:26:90:5A:95:62:3A:83:6C:5D:79:64:CA:47:FA:9A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_aPOvUMmkFqVYjqDbF15ZMpH-po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.255.0/24
45.88.90.0/24
45.129.86.0/24
45.151.89.0/24
83.219.97.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
93.123.116.0/24
94.154.161.0-94.154.163.255
94.156.10.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.172.0/24
185.226.175.0/24
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e7:6e:fb:14:dc:9f:e9:a1:e0:e4:b7:1e:8b:03:7c:89:d8:
fc:20:59:99:63:12:fd:13:f7:d4:0d:fc:40:99:7f:6d:a8:30:
60:9e:da:13:40:10:c7:c0:ce:2f:a3:e3:f5:ab:b3:b4:5f:90:
15:1b:af:6f:dd:34:f6:ed:6c:1a:2a:0c:89:58:e1:1e:39:53:
df:16:01:4f:04:83:f0:d9:3c:f1:c9:a3:b0:33:60:11:7d:e0:
c9:ad:22:a7:31:ff:e8:5b:14:4e:60:4c:47:6a:ca:ec:19:f2:
f9:32:15:7e:8a:0a:6b:11:50:dc:f9:89:96:f0:c7:3f:18:d1:
87:a7:d8:de:e4:4c:37:41:fb:cb:42:4d:22:d6:c7:97:ab:4e:
83:1c:e9:7d:54:b3:4f:df:78:97:dd:62:a3:dc:72:4c:54:dd:
cc:c9:ec:3d:eb:06:e5:d4:a5:fb:a5:9f:ae:f0:a3:83:69:1a:
31:b3:14:dc:82:f2:c3:01:9b:7d:e9:e9:f7:0f:74:26:a2:c4:
eb:74:46:6e:a9:05:fa:fe:ef:a0:7c:7c:e3:41:d6:06:d5:0e:
11:5d:42:e6:42:53:49:54:0f:3e:d6:04:c5:2d:22:57:81:ad:
47:49:81:9f:1c:45:60:f5:01:66:43:14:52:a4:20:2d:c7:f2:
1a:9f:99:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 16:30:57 2023 by rpki-client on console-fra.rpki-client.org