Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ppwnHMhkGZ5PhUjxp-5SIySYT2Y.roa
File: ppwnHMhkGZ5PhUjxp-5SIySYT2Y.roa (raw, json)
Hash identifier: MIwn25Ig3DFVjgyxnwkmiI1ky2FU1m+7DZrp9Ua5p4s=
Subject key identifier: A6:9C:27:1C:C8:64:19:9E:4F:85:48:F1:A7:EE:52:23:24:98:4F:66
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01896401E1A096CEC8C40D8D22749FA7A28B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ppwnHMhkGZ5PhUjxp-5SIySYT2Y.roa
Signing time: Mon 17 Jul 2023 13:19:52 +0000
ROA not before: Mon 17 Jul 2023 13:19:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.218.84.0/22 maxlen: 24
94.156.236.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
194.113.36.0/22 maxlen: 24
178.215.236.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.252.176.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
45.95.0.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
87.121.45.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
194.169.174.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
185.219.126.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:01:e1:a0:96:ce:c8:c4:0d:8d:22:74:9f:a7:a2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 17 13:19:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a69c271cc864199e4f8548f1a7ee522324984f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:9b:02:36:c6:ac:4a:e0:9b:89:9f:70:1d:
fe:06:5b:f4:25:7d:b2:77:59:85:2c:57:e8:50:c0:
cc:4b:e7:6e:fc:e8:df:66:98:76:f4:ff:dc:1e:dc:
04:ac:3b:05:72:7e:c2:a6:c6:8d:85:b7:c6:4a:f7:
fc:de:74:92:24:76:02:b9:48:87:d9:b3:77:a5:a4:
54:3a:e3:1a:ca:5d:f4:6f:35:a4:a1:2f:9a:3f:86:
54:81:b5:45:b0:11:67:d3:4d:2d:4c:a3:9d:27:37:
80:5b:52:7c:c7:63:69:be:a8:eb:7f:ef:a7:41:0d:
e3:18:d0:e4:67:c5:f2:f0:46:ef:2a:7a:d5:39:e3:
8b:d1:2e:00:b3:64:e4:e1:8f:8e:50:d1:a2:2a:d3:
e3:35:e5:31:f7:53:46:12:99:16:90:ff:95:f2:cc:
f0:1e:ac:c7:fb:5c:ac:6c:28:3b:03:b4:9c:05:c6:
81:59:9f:d4:1c:8a:bb:35:ce:ae:9d:11:8b:b3:25:
ab:28:f7:3a:04:78:f5:f7:3a:8f:e1:1a:da:c4:6d:
44:1e:07:44:5c:a3:9a:84:21:89:32:ae:67:62:f1:
70:e9:20:07:70:b7:ea:95:2f:f4:77:ed:14:b7:78:
3f:db:70:91:9a:22:ea:af:dd:ff:6b:06:e3:86:4e:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9C:27:1C:C8:64:19:9E:4F:85:48:F1:A7:EE:52:23:24:98:4F:66
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ppwnHMhkGZ5PhUjxp-5SIySYT2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.0.0/22
45.151.89.0/24
87.121.45.0/24
92.119.196.0/23
94.154.161.0-94.154.163.255
94.156.236.0/24
94.156.239.0/24
147.78.100.0-147.78.102.255
171.22.72.0/22
178.215.236.0/24
178.215.239.0/24
185.216.84.0/22
185.218.84.0/22
185.218.137.0/24
185.219.126.0/24
185.252.176.0/24
194.113.36.0/22
194.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:e9:d6:cf:78:c0:ad:32:8e:92:98:a5:bb:30:3d:47:50:ff:
8f:e3:44:60:f4:44:1c:9f:f4:57:6b:c6:9b:52:01:b3:f1:54:
31:d9:02:e1:51:36:d3:e3:04:dc:15:ae:e6:af:bf:80:80:e4:
72:fd:ea:00:a0:59:1d:c5:10:1e:4a:c6:2e:6e:41:9d:bf:b4:
c8:91:e0:86:16:19:4f:00:88:2b:59:dd:71:46:83:d6:48:75:
1e:ed:59:82:1a:d2:9b:d1:b9:02:37:35:f2:ff:51:a5:b9:b4:
4d:c6:5d:34:7e:ee:30:55:eb:5a:b9:06:1a:e6:87:62:e9:a5:
6c:23:09:f4:34:e3:fb:82:c2:77:c1:85:39:90:91:e7:0a:c4:
bc:17:87:76:1d:5e:1e:cb:45:c9:bc:a6:c6:47:07:ef:43:e8:
d1:97:ff:d8:98:32:69:e7:82:31:d1:54:f0:f8:fd:75:99:ff:
1d:97:e8:a0:d6:74:b9:af:35:24:72:28:15:53:8d:0b:2d:f7:
68:15:cd:5f:dd:93:f4:46:81:ee:8e:2e:ba:70:eb:19:e0:d4:
18:ec:25:9f:32:68:37:aa:65:fa:cc:f5:c4:35:74:f0:31:fd:
89:5b:ae:f2:cf:88:e1:14:03:f3:9a:3c:0f:27:2e:67:b0:98:
71:d2:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 06:29:45 2023 by rpki-client on console-ams.rpki-client.org