Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f24rzzPGczwSsPix7IV3NEsjNL4.roa
File: f24rzzPGczwSsPix7IV3NEsjNL4.roa (raw, json)
Hash identifier: OdHpRauZT1ZpBAsy0g6n0eqJ8R9E2ncG8xWv/dvw/2c=
Subject key identifier: 7F:6E:2B:CF:33:C6:73:3C:12:B0:F8:B1:EC:85:77:34:4B:23:34:BE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01908232B2DC588DA0973B70E0A2EBC8D838
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f24rzzPGczwSsPix7IV3NEsjNL4.roa
Signing time: Fri 05 Jul 2024 09:21:18 +0000
ROA not before: Fri 05 Jul 2024 09:21:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.253.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 12:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:32:b2:dc:58:8d:a0:97:3b:70:e0:a2:eb:c8:d8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 09:21:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f6e2bcf33c6733c12b0f8b1ec8577344b2334be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:f5:2c:d2:ba:4d:58:4c:5c:3c:99:8c:fe:
47:7b:22:01:3b:8c:48:b0:c8:c5:11:4a:72:94:93:
a1:af:b6:17:6a:88:1c:4c:6c:bc:e3:45:e0:06:75:
b6:c3:1d:ea:7c:a8:01:95:33:60:5c:3c:c3:dc:b7:
a3:59:94:7e:85:2b:c1:43:37:45:1a:cd:02:e8:ae:
d4:b3:8e:e9:82:fd:66:11:33:d5:63:c6:67:9c:7e:
0d:c3:fc:a6:63:ed:1c:b9:ef:91:5a:87:e3:28:1f:
3c:53:38:9a:5e:38:8d:4d:34:9f:0e:d4:ca:2b:ce:
a5:f3:00:5b:2f:54:7f:40:4e:e9:e4:dd:88:9b:22:
81:f3:b1:cb:3a:aa:55:67:23:59:1c:c0:41:6e:89:
85:ab:0b:db:81:e5:2b:ae:8e:4a:4a:81:1e:21:a9:
1c:a2:c7:7c:6b:2f:c3:9f:7e:59:92:6e:8c:5f:38:
75:95:8b:51:56:a1:9f:5d:2f:65:64:f5:fe:ad:d2:
dc:5c:cc:f9:49:c1:0e:e5:6c:d1:37:0c:80:f6:c6:
fe:09:42:6f:77:b4:78:b7:2b:f2:dd:dd:99:9f:c4:
b2:7c:f7:b5:b7:d3:7d:8c:54:12:71:2e:8d:c7:d4:
b4:ca:e9:81:41:5f:f7:1c:58:7c:d9:54:2e:fa:74:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6E:2B:CF:33:C6:73:3C:12:B0:F8:B1:EC:85:77:34:4B:23:34:BE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f24rzzPGczwSsPix7IV3NEsjNL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
79.110.51.0/24
94.154.162.0/24
109.206.239.0/24
185.222.161.0/24
193.37.40.0/24
194.55.225.0/24
Signature Algorithm: sha256WithRSAEncryption
00:47:6e:2d:49:a5:a7:ff:59:52:81:46:43:08:c5:a7:20:9e:
1c:d8:d2:72:90:15:19:76:7a:f3:be:6d:6b:29:ca:f7:9a:56:
4d:85:74:b1:1d:1d:b6:46:9a:87:2b:55:6e:9e:2d:b3:0e:a6:
98:7f:d2:e1:c7:62:fc:02:50:be:50:6d:6e:3b:cb:be:c2:e8:
ab:4e:01:92:bf:0f:fd:20:6e:9d:f5:b1:08:62:1e:7e:be:c2:
b2:06:de:f5:d1:4f:dd:df:78:ec:07:a7:e8:e0:ce:ac:42:f5:
0e:34:15:92:b6:30:31:b3:29:20:f6:c3:c3:95:47:dd:ac:50:
59:2f:8e:e4:59:fe:47:fb:2c:c3:8e:a4:09:92:e6:eb:69:6a:
12:70:4d:f7:a6:41:e3:a8:eb:ac:f4:8b:c3:f5:94:b1:8d:83:
e6:c6:a7:47:b6:d9:f0:ab:ec:e6:b6:43:d3:ca:72:80:4b:b5:
57:ef:e9:6e:f7:3b:ae:f2:d6:a7:ee:af:11:92:e7:6b:e5:88:
fb:51:4d:01:87:f7:c2:54:68:78:20:eb:68:f3:cd:aa:15:20:
80:19:03:d1:35:5e:7d:1f:a0:e0:4f:a3:69:44:49:11:74:17:
10:a8:c3:42:dc:be:da:c4:72:cb:ec:d5:ba:dd:51:9e:0a:05:
8a:c2:4d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 13:49:19 2024 by rpki-client on console-ams.rpki-client.org