Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hiZ1oh-aRFEW8ahaQk3Y1-mnLrQ.roa
File: hiZ1oh-aRFEW8ahaQk3Y1-mnLrQ.roa (raw, json)
Hash identifier: jd6cDYEtg3m6N+aezixayl1STjlXtzq0gavevPgwsDs=
Subject key identifier: 86:26:75:A2:1F:9A:44:51:16:F1:A8:5A:42:4D:D8:D7:E9:A7:2E:B4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81DAC2E5B0058A49935CF5014E7275
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hiZ1oh-aRFEW8ahaQk3Y1-mnLrQ.roa
Signing time: Sun 01 Jan 2023 13:25:04 +0000
ROA not before: Sun 01 Jan 2023 13:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 45.90.88.0/22 maxlen: 24
45.12.254.0/24 maxlen: 24
193.58.120.0/24 maxlen: 24
147.78.100.0/23 maxlen: 24
84.21.173.0/24 maxlen: 24
194.31.204.0/24 maxlen: 24
195.178.121.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
194.169.173.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
81.161.238.0/23 maxlen: 24
178.215.226.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
193.222.98.0/23 maxlen: 24
193.47.63.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
185.221.67.0/24 maxlen: 24
79.110.48.0/23 maxlen: 24
194.49.87.0/24 maxlen: 24
194.49.95.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:da:c2:e5:b0:05:8a:49:93:5c:f5:01:4e:72:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=862675a21f9a445116f1a85a424dd8d7e9a72eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:97:31:bb:82:8d:2e:fa:b8:67:19:49:f3:d6:
5a:e8:59:db:37:17:7a:20:8d:43:56:4f:18:51:b1:
32:57:7e:df:e1:e2:5d:b1:f8:a3:5b:1e:1c:d0:8e:
72:ba:aa:1c:2f:e1:90:b2:49:5a:2f:73:a5:25:67:
b0:b5:7b:36:f7:85:21:b1:9f:b6:34:16:aa:b6:c4:
dc:a0:33:39:a1:54:93:c4:e9:2d:09:06:b3:53:2b:
5a:bb:5d:1a:64:6a:5e:53:22:7a:0d:cb:26:10:bb:
1e:7b:05:f7:47:ce:78:27:d4:52:a2:95:81:33:5d:
5e:e4:56:aa:33:0e:87:ad:08:46:e3:84:16:55:13:
4a:57:27:29:8b:0d:74:43:15:27:84:82:9e:ae:77:
98:a3:5a:20:ab:bc:35:1b:60:4f:60:16:8f:26:f8:
e3:5a:d3:0a:af:66:88:fa:06:85:8a:46:5c:28:0b:
16:81:d6:eb:11:83:7a:06:f8:1d:75:06:8c:5e:7f:
ee:6d:0d:e0:7e:7a:6e:eb:1a:e7:67:26:2a:eb:ee:
2a:d1:1a:60:af:d1:b9:2d:97:cb:90:49:62:49:a8:
de:13:85:d8:81:b6:e2:9e:de:69:eb:19:57:88:36:
40:4b:10:7a:b2:b5:94:ac:b4:d2:8c:30:af:9a:5c:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:26:75:A2:1F:9A:44:51:16:F1:A8:5A:42:4D:D8:D7:E9:A7:2E:B4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hiZ1oh-aRFEW8ahaQk3Y1-mnLrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.254.0/24
45.90.88.0/22
45.149.233.0/24
45.149.241.0/24
79.110.48.0/23
81.161.238.0/23
82.115.208.0/24
84.21.173.0/24
84.54.49.0/24
87.121.220.0/24
109.206.239.0/24
141.98.4.0/24
141.98.7.0/24
147.78.100.0/23
171.22.18.0/24
171.22.31.0/24
178.215.226.0/24
178.215.237.0/24
185.221.67.0/24
193.25.217.0-193.25.218.255
193.47.63.0/24
193.58.120.0/24
193.222.98.0/23
194.31.204.0/24
194.48.248.0/24
194.49.87.0/24
194.49.95.0/24
194.55.227.0/24
194.169.173.0-194.169.174.255
195.178.121.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5b:01:49:b6:16:09:c1:ab:b3:21:c0:64:e7:5d:38:82:e8:
e1:5a:4c:12:f9:1d:b5:66:28:06:b2:eb:5f:17:d3:8e:cc:e3:
3f:4b:cb:2d:33:02:15:89:f4:8e:81:3f:69:7e:cf:96:83:7d:
60:a0:ab:fb:5b:d6:77:99:35:ba:ec:dc:8d:15:ee:88:08:ee:
c8:28:ac:92:84:7e:61:21:0b:22:1d:c4:27:71:d6:c7:2c:ec:
d4:b5:f1:d7:d5:5e:16:b0:86:83:5c:54:db:5f:e8:0e:5d:ed:
2c:20:3b:83:86:40:9b:50:85:40:3e:fc:9e:dd:fc:ea:84:ee:
f6:c3:1b:fe:f6:9f:3a:88:a5:59:d3:f5:01:13:22:b4:a6:b3:
ed:13:22:63:32:77:8f:bb:ed:64:08:1f:4a:1f:a2:c2:43:0a:
e2:51:48:37:83:4a:40:ba:4b:46:c7:14:c1:df:35:f6:3a:e4:
68:7d:80:1a:bf:96:38:42:b4:e3:53:d7:63:4c:a7:ab:d8:d7:
a1:3f:b2:c7:8d:4a:1d:42:61:c5:e0:9e:8e:28:2e:84:df:1a:
e4:c2:e7:40:4a:36:21:0d:7b:e4:c0:ee:fa:7b:83:5a:35:52:
2c:ad:82:07:44:cf:33:62:18:94:e1:9e:07:68:27:3b:62:2f:
43:80:3b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org