Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mBxuCzPnQCVtHlipvexAT95Y7As.roa
File: mBxuCzPnQCVtHlipvexAT95Y7As.roa (raw, json)
Hash identifier: OypS2US47pAbC3AXUSC51VfqEKG7JvE2HtWX4Uja6N4=
Subject key identifier: 98:1C:6E:0B:33:E7:40:25:6D:1E:58:A9:BD:EC:40:4F:DE:58:EC:0B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C7BDB6AC48C6F8EC3734EE617BF271246
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mBxuCzPnQCVtHlipvexAT95Y7As.roa
Signing time: Mon 18 Dec 2023 07:37:06 +0000
ROA not before: Mon 18 Dec 2023 07:37:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 185.216.69.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
185.226.173.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
95.214.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:db:6a:c4:8c:6f:8e:c3:73:4e:e6:17:bf:27:12:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 18 07:37:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=981c6e0b33e740256d1e58a9bdec404fde58ec0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:5b:7f:e5:9d:9b:48:4d:06:10:79:d1:90:
b2:a1:47:69:77:99:7b:82:8c:a2:bc:48:36:98:e2:
c6:92:57:53:c1:17:ee:3c:85:1b:af:dc:51:d6:58:
b8:33:89:cc:d6:f8:77:cb:fd:09:ee:f9:a6:4a:16:
0b:bb:9f:97:08:3b:2b:4d:bc:e7:31:62:e7:5e:3e:
d3:69:bf:5b:1e:79:31:07:ef:bf:b1:08:ce:1a:d2:
e4:92:b7:c8:5e:04:25:93:15:51:9a:94:93:5d:36:
c2:54:8c:a3:90:ee:5b:68:d3:61:e7:26:eb:78:1e:
9a:f2:19:93:ff:fb:2e:3d:3c:9f:d7:32:89:88:e8:
dc:1e:ff:fc:79:16:37:9a:d3:bf:21:64:02:3a:7a:
3f:52:8f:b2:e0:e6:dd:67:a2:33:48:76:e7:16:86:
5e:df:68:27:6f:87:fa:eb:45:92:18:f1:81:65:b1:
2b:9e:4c:c2:d4:bb:a0:57:02:22:d3:0a:ea:23:a9:
fb:56:53:ce:0c:10:b9:30:20:dd:02:52:f1:4d:a1:
a4:b0:f5:45:d0:c2:5e:a0:f8:57:94:6c:80:79:e3:
69:9b:48:50:87:66:17:f8:45:f7:76:25:48:75:d7:
3b:71:ec:48:7d:31:12:72:90:49:cc:7c:fc:29:e4:
a6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1C:6E:0B:33:E7:40:25:6D:1E:58:A9:BD:EC:40:4F:DE:58:EC:0B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mBxuCzPnQCVtHlipvexAT95Y7As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.84.0/24
93.123.84.0/24
95.214.24.0/24
109.206.237.0/24
147.78.103.0/24
185.216.69.0/24
185.226.173.0/24
Signature Algorithm: sha256WithRSAEncryption
42:21:72:5f:6d:18:c4:43:0a:d4:f8:40:11:db:93:b2:32:a8:
88:41:58:59:f0:ba:58:f3:96:aa:d4:37:a7:44:a5:0c:ab:de:
ae:bf:a5:26:f7:1c:f1:47:77:09:06:aa:1a:4c:a3:5b:05:c5:
0c:39:3e:86:10:57:53:d9:af:4c:f7:ec:88:36:32:54:0e:be:
38:13:80:52:d2:6b:f4:e3:47:82:ab:9f:4c:72:e2:3b:29:18:
d5:76:cd:a0:47:15:fa:d0:cb:15:22:46:21:95:21:09:82:ee:
f1:51:38:a1:46:e1:15:20:fa:e0:c3:45:ea:57:c2:0f:8d:be:
fd:e9:32:bb:70:d9:65:bf:2e:7c:57:b0:54:9d:b7:f3:ca:13:
86:39:a9:46:c5:cb:48:69:47:1f:e9:21:b3:0c:66:3f:bc:27:
ac:c5:3d:4e:db:6e:10:56:db:cc:a1:6d:50:cb:aa:00:ff:bb:
8b:52:1d:cd:f1:75:e7:52:2a:09:db:60:77:b2:26:41:c3:f5:
6b:2f:89:43:1c:66:b7:ff:7a:be:d5:96:c8:50:69:49:98:66:
d5:ff:96:91:d4:ac:52:82:96:29:d9:63:4b:93:3d:93:9f:88:
eb:36:1c:be:48:16:65:e6:50:67:37:86:52:58:f4:24:f3:f7:
ab:3d:46:56
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYx722rEjG+Ow3NO5he/JxJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMjE4MDczNzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODFjNmUwYjMzZTc0MDI1NmQxZTU4YTliZGVjNDA0ZmRlNThlYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLdbf+Wdm0hNBhB50ZCyoUdpd5l7
goyivEg2mOLGkldTwRfuPIUbr9xR1li4M4nM1vh3y/0J7vmmShYLu5+XCDsrTbzn
MWLnXj7Tab9bHnkxB++/sQjOGtLkkrfIXgQlkxVRmpSTXTbCVIyjkO5baNNh5ybr
eB6a8hmT//suPTyf1zKJiOjcHv/8eRY3mtO/IWQCOno/Uo+y4ObdZ6IzSHbnFoZe
32gnb4f660WSGPGBZbErnkzC1LugVwIi0wrqI6n7VlPODBC5MCDdAlLxTaGksPVF
0MJeoPhXlGyAeeNpm0hQh2YX+EX3diVIddc7cexIfTEScpBJzHz8KeSmLQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJgcbgsz50AlbR5Yqb3sQE/eWOwLMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbUJ4dUN6UG5RQ1Z0SGxpcHZleEFUOTVZN0FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAV3hUAwQA
XXtUAwQAX9YYAwQAbc7tAwQAk05nAwQAudhFAwQAueKtMA0GCSqGSIb3DQEBCwUA
A4IBAQBCIXJfbRjEQwrU+EAR25OyMqiIQVhZ8LpY85aq1DenRKUMq96uv6Um9xzx
R3cJBqoaTKNbBcUMOT6GEFdT2a9M9+yINjJUDr44E4BS0mv040eCq59McuI7KRjV
ds2gRxX60MsVIkYhlSEJgu7xUTihRuEVIPrgw0XqV8IPjb796TK7cNllvy58V7BU
nbfzyhOGOalGxctIaUcf6SGzDGY/vCesxT1O224QVtvMoW1Qy6oA/7uLUh3N8XXn
UioJ22B3siZBw/VrL4lDHGa3/3q+1ZbIUGlJmGbV/5aR1KxSgpYp2WNLkz2Tn4jr
Nhy+SBZl5lBnN4ZSWPQk8/erPUZW
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:13 2024 by rpki-client on console-ams.rpki-client.org