Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dO472NiDR_L3X8S4cLZcHBPpsEs.roa
File: dO472NiDR_L3X8S4cLZcHBPpsEs.roa (raw, json)
Hash identifier: mYF5BEcRZdz/A+Fw0FsLOqdUyrrue4G4ZCuXnDG0ueo=
Subject key identifier: 74:EE:3B:D8:D8:83:47:F2:F7:5F:C4:B8:70:B6:5C:1C:13:E9:B0:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01893F57E42765B5BB52C30285CA181E3167
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dO472NiDR_L3X8S4cLZcHBPpsEs.roa
Signing time: Mon 10 Jul 2023 10:27:51 +0000
ROA not before: Mon 10 Jul 2023 10:27:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211760
IP address blocks: 185.221.67.0/24 maxlen: 24
171.22.28.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3f:57:e4:27:65:b5:bb:52:c3:02:85:ca:18:1e:31:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 10 10:27:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74ee3bd8d88347f2f75fc4b870b65c1c13e9b04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:fb:96:1e:69:cd:b4:e6:aa:6d:2c:88:e2:
4f:4b:9e:00:f8:34:dd:74:f3:6a:82:e3:d0:c4:bc:
73:bb:1a:c1:a5:1b:5d:51:09:3e:b9:9a:cc:5b:35:
d4:bf:d8:ad:42:77:de:f4:c7:93:af:93:38:8c:4c:
01:81:78:47:2c:e1:34:a4:83:03:85:ab:29:ac:0e:
9c:b6:0c:44:c6:8e:c4:69:86:f7:65:87:b0:0e:ad:
41:22:b2:49:0e:36:03:09:a7:c5:f0:8f:22:4a:ce:
ce:8e:c5:7d:8c:06:66:21:30:ff:23:10:9c:53:3b:
84:fe:86:cd:48:7a:d5:be:d6:e4:93:bb:ee:71:58:
8c:74:68:8d:da:6b:06:fc:be:cb:f2:2d:7f:de:a3:
d9:80:0b:d4:39:ec:65:ce:da:28:71:38:ac:30:73:
31:ac:8b:08:f5:6d:96:8b:db:89:87:50:6c:1e:f1:
cd:0c:a0:fa:f6:5d:35:c9:ec:2d:ce:58:19:82:db:
92:5f:66:42:20:51:3d:9b:c6:f0:c8:0e:b8:7f:03:
13:37:cf:cf:31:13:7f:9b:6c:03:da:d6:a0:a7:4a:
00:46:d2:45:6f:53:ae:27:7b:2a:c8:62:98:db:b1:
e9:32:09:ab:fe:41:92:11:7e:13:c2:66:72:85:6e:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EE:3B:D8:D8:83:47:F2:F7:5F:C4:B8:70:B6:5C:1C:13:E9:B0:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dO472NiDR_L3X8S4cLZcHBPpsEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.25.0-95.214.26.255
171.22.28.0/24
185.216.70.0/24
185.221.67.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e2:43:de:1d:a4:91:d1:01:65:94:09:60:bc:85:71:82:62:
3a:e0:bb:b6:4f:45:c2:ac:7b:7a:f3:c4:3f:b6:7d:0d:34:a2:
4b:18:66:cb:7f:c5:7f:68:b9:27:cb:df:26:35:b3:e0:48:eb:
80:33:fb:3b:11:20:12:0b:94:e2:b4:1e:c8:81:9b:81:b6:4e:
46:9b:ca:89:33:80:6f:b3:fc:a4:38:f0:46:49:8c:bd:f7:da:
08:b6:a8:db:69:9c:5c:0b:67:6e:a3:7d:d6:1f:5a:08:08:9c:
63:47:3b:d9:48:45:01:01:81:61:a9:87:81:d3:04:78:ab:45:
20:5c:0f:61:7a:70:65:88:2d:81:be:0c:68:59:05:83:ad:24:
17:52:c5:5c:74:09:38:be:e2:57:da:47:6c:09:70:1e:ec:40:
75:9d:65:5b:93:31:a7:0b:58:06:1c:bc:69:11:b8:19:1e:fc:
d9:f9:24:fc:ae:53:82:47:7d:e4:2f:df:a8:17:c8:16:8f:c2:
fd:86:2a:27:09:2f:dd:90:22:9e:c8:28:60:4e:a7:75:19:a8:
1b:34:2d:20:ee:2b:93:70:59:bb:6f:df:71:2e:e2:82:6e:7f:
d9:de:cc:b2:1c:17:23:c6:6f:de:63:6e:00:c3:57:4e:16:7a:
89:2e:32:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 12:10:38 2023 by rpki-client on console-ams.rpki-client.org