Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kspg4fTU9b7ataZwbU9fS-tl970.roa
File: kspg4fTU9b7ataZwbU9fS-tl970.roa (raw, json)
Hash identifier: qUPbuPS4BJWpWNUd26O6QxJ5Vz4j1IgNkBUcet31Re8=
Subject key identifier: 92:CA:60:E1:F4:D4:F5:BE:DA:B5:A6:70:6D:4F:5F:4B:EB:65:F7:BD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C1ACC3F458080DCBC31D902780138B12D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kspg4fTU9b7ataZwbU9fS-tl970.roa
Signing time: Wed 29 Nov 2023 11:17:22 +0000
ROA not before: Wed 29 Nov 2023 11:17:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 94.156.8.0/24 maxlen: 24
194.169.172.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
185.226.172.0/24 maxlen: 24
2.59.253.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:cc:3f:45:80:80:dc:bc:31:d9:02:78:01:38:b1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 29 11:17:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92ca60e1f4d4f5bedab5a6706d4f5f4beb65f7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:9c:d4:5d:74:91:c5:4c:ba:af:0b:43:00:
17:88:a4:2e:a1:a8:aa:95:32:35:44:fc:44:4b:7b:
c8:9d:bc:4a:16:b8:ee:39:b1:1b:b5:4c:b4:2c:f6:
53:72:ae:07:0e:e4:9f:c8:b2:67:13:37:52:87:b9:
bc:cf:bc:ab:42:14:da:79:d6:f8:4e:5d:75:89:9a:
85:8d:b9:e5:c7:1c:f0:9c:70:7e:d3:80:f3:7e:18:
f8:3d:7b:4c:de:b0:19:c5:f7:90:ca:e7:6e:1d:4e:
4e:9c:a5:f5:1a:67:ef:b0:ad:45:ef:37:37:0b:7a:
d0:41:93:d9:38:a4:6a:3e:4f:f4:f1:bd:df:df:45:
8f:67:45:2e:46:02:ae:a6:6f:3c:c4:f3:cd:3e:d1:
3a:df:e5:45:af:c8:2d:c1:7f:e3:e9:c2:cf:68:3b:
7b:3a:83:9f:88:47:9f:19:93:cc:f7:de:8f:77:0f:
38:55:01:af:8e:d2:16:e1:6c:04:8c:19:fa:2d:97:
64:53:bd:57:0e:ee:cd:e6:e7:e1:50:d9:a4:84:9d:
16:fb:d0:7b:89:ec:7f:09:a9:c7:7b:d7:78:72:29:
61:3a:0c:a0:04:4c:2b:04:a4:69:f6:9d:0d:46:d6:
1d:d9:42:c7:82:a5:23:3c:e9:1d:6a:be:eb:7b:f8:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CA:60:E1:F4:D4:F5:BE:DA:B5:A6:70:6D:4F:5F:4B:EB:65:F7:BD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kspg4fTU9b7ataZwbU9fS-tl970.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
94.156.8.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
178.215.238.0/24
185.222.160.0-185.222.162.255
185.225.73.0/24
185.226.172.0/24
185.246.223.0/24
193.25.217.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.31.205.0/24
194.48.248.0/24
194.55.187.0/24
194.55.225.0/24
194.169.172.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
57:7a:d5:bf:bf:64:b4:5b:0b:5a:28:3d:37:8f:81:bd:b4:ea:
6b:dc:0b:e8:54:d0:c1:be:f1:bf:7f:5b:90:28:6f:43:f2:82:
f8:48:78:27:29:45:46:e5:55:41:b9:06:e7:18:e9:4f:f2:c7:
be:ed:e9:28:5f:f3:60:ac:29:c4:2d:8f:d9:70:d2:fa:f3:33:
98:7f:f6:95:2c:55:13:38:56:97:55:13:c7:fa:75:39:15:73:
08:56:3f:3d:3c:32:ee:36:95:b1:a3:7d:4f:a2:55:bb:1d:c6:
81:f2:21:cd:01:cb:ed:47:13:63:52:57:7b:fb:a7:c6:c6:56:
13:3b:32:b3:54:00:03:7d:ae:1e:ca:e1:85:81:02:1e:86:81:
8b:c0:aa:e6:9f:44:c0:52:86:e7:23:cc:dc:a5:0b:27:93:c9:
bd:43:f7:83:fb:05:f5:29:a3:f6:4b:e7:a4:42:dd:3f:ce:63:
c0:95:05:f3:6c:57:e5:d8:cc:5c:3e:c3:ad:2d:ac:92:6d:a2:
36:20:77:30:4c:6f:19:86:52:4a:dd:b2:c2:89:16:21:53:79:
e8:db:7c:00:3a:bb:bf:37:ca:29:30:6f:fb:04:57:88:d4:a1:
89:bf:fb:49:2c:46:43:bc:1d:d7:c7:9c:f3:69:ca:42:40:fa:
6e:af:79:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 12:59:49 2023 by rpki-client on console-ams.rpki-client.org