Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v6JKiMwJswYU6WlRGMhtTsK8XTA.roa
File: v6JKiMwJswYU6WlRGMhtTsK8XTA.roa (raw, json)
Hash identifier: 0TD8djr175xh+5N9ZAz2mvRwZgEn8OqzppS6FM6nKD4=
Subject key identifier: BF:A2:4A:88:CC:09:B3:06:14:E9:69:51:18:C8:6D:4E:C2:BC:5D:30
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CB4939023B44A48F493EC81C35DDA1E80
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v6JKiMwJswYU6WlRGMhtTsK8XTA.roa
Signing time: Fri 29 Dec 2023 07:56:58 +0000
ROA not before: Fri 29 Dec 2023 07:56:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 194.169.172.0/24 maxlen: 24
2.59.253.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
185.222.161.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
193.222.97.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
193.37.42.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.37.40.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
194.55.187.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
45.88.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:93:90:23:b4:4a:48:f4:93:ec:81:c3:5d:da:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 29 07:56:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfa24a88cc09b30614e9695118c86d4ec2bc5d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:56:4b:71:c6:6c:a0:98:6c:45:cb:fb:a6:
a5:52:fc:d5:45:c8:98:d2:85:6b:94:a3:29:9a:30:
1b:e3:c5:3a:02:07:2d:f2:64:50:c3:ad:6e:7a:ac:
b4:d1:ab:38:b6:cb:d8:d4:e3:76:51:65:e5:95:96:
bb:96:ad:7d:8c:b8:b9:25:12:e9:5d:3a:81:08:43:
10:af:1a:7c:2f:e1:38:e1:05:7b:b0:de:b9:ef:99:
2c:61:34:18:f3:ae:29:3b:09:26:cf:26:a8:56:00:
2a:b5:5e:b3:01:5c:80:9e:b5:9b:a8:dc:d2:af:87:
8e:ab:d4:f4:09:68:8a:cc:da:a0:7c:63:c1:18:00:
79:2b:d8:5e:b1:e5:06:46:25:14:e9:52:dd:e3:d3:
cb:66:3e:3b:89:e3:c7:cb:e8:9c:3c:32:90:54:f1:
22:2e:e7:60:0a:a7:2d:d3:48:18:e0:25:3c:9d:1d:
87:89:a6:f5:1e:5a:0b:14:05:2f:dc:09:a8:b0:43:
93:92:34:f4:73:65:b6:e0:29:4f:c7:46:e0:81:11:
9b:fb:f7:25:cc:44:7a:bd:5b:52:95:52:d0:85:c9:
63:a7:9e:cd:0c:1c:91:e3:f2:d9:e7:20:ea:5e:77:
13:7b:a5:73:71:be:99:c4:ef:0c:d4:dd:bc:f5:04:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A2:4A:88:CC:09:B3:06:14:E9:69:51:18:C8:6D:4E:C2:BC:5D:30
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v6JKiMwJswYU6WlRGMhtTsK8XTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.253.0/24
45.84.91.0/24
45.88.64.0/24
45.88.91.0/24
79.110.51.0/24
83.219.97.0/24
92.119.198.0/24
92.249.50.0/24
94.154.162.0/24
109.206.239.0/24
178.215.225.0/24
178.215.227.0/24
178.215.236.0/24
185.222.160.0-185.222.162.255
193.25.217.0/24
193.37.40.0/24
193.37.42.0/24
193.37.44.0/24
193.222.97.0/24
193.222.99.0/24
194.31.205.0/24
194.48.248.0/24
194.55.186.0/23
194.55.224.0/23
194.169.172.0/24
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:05:ad:cd:8d:a4:11:b1:f5:99:09:5d:eb:6d:3d:04:93:33:
81:d2:68:60:ce:e6:1a:19:8f:b1:69:64:34:08:31:1e:f8:96:
69:3d:11:96:fd:15:60:e7:30:07:76:c0:47:08:1c:05:96:ad:
e3:25:37:2f:ae:83:74:64:92:10:4e:2d:da:bb:06:70:fe:18:
ee:82:76:e8:9e:a4:96:da:2a:0a:6b:96:a4:b0:c3:d7:87:96:
60:d0:5d:1f:a2:b7:91:5b:e7:5c:e7:dd:69:72:2c:4a:cf:d6:
c8:13:23:ae:7c:e4:e6:d9:d1:1c:6a:6b:b0:86:85:c6:a2:67:
1a:0f:07:e2:4f:5b:77:37:ef:de:42:c9:07:b3:8b:6d:c0:65:
d9:51:94:ba:77:08:ba:de:db:12:dd:3e:6d:c7:a0:90:f5:48:
cb:64:5d:1a:bb:92:32:ae:fa:d7:6a:6e:cd:ba:7e:29:9e:ac:
04:b8:4f:e7:01:67:34:fd:19:b2:3e:6f:63:f0:ea:5e:97:d8:
2e:99:0c:b2:ce:ad:a0:8f:65:c7:f1:93:4b:39:c3:33:26:c0:
1b:e4:05:99:52:b6:f9:8f:5c:8b:13:7b:b6:12:6d:30:27:8c:
01:49:89:dc:e0:34:8d:7d:89:c2:12:fb:4c:74:e5:58:a6:86:
7d:08:6a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:14 2024 by rpki-client on console-ams.rpki-client.org