Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y7djWzsR08Q1C6cvy5R2dLOu5Lo.roa
File: y7djWzsR08Q1C6cvy5R2dLOu5Lo.roa (raw, json)
Hash identifier: G+HDrgubo4JGmAc1IK+yvsTvpKoDeK2oBqq+VjAn3RE=
Subject key identifier: CB:B7:63:5B:3B:11:D3:C4:35:0B:A7:2F:CB:94:76:74:B3:AE:E4:BA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A661C57EB94556B86611695DEC2408FB1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y7djWzsR08Q1C6cvy5R2dLOu5Lo.roa
Signing time: Tue 05 Sep 2023 16:10:48 +0000
ROA not before: Tue 05 Sep 2023 16:10:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 2.59.254.0/24 maxlen: 24
94.156.6.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
194.180.48.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
185.225.75.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
87.121.3.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
212.87.204.0/24 maxlen: 24
95.214.27.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
85.217.144.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
94.156.253.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
94.156.161.0/24 maxlen: 24
193.42.33.0/24 maxlen: 24
193.42.32.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
185.216.68.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
93.123.118.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:66:1c:57:eb:94:55:6b:86:61:16:95:de:c2:40:8f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 5 16:10:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbb7635b3b11d3c4350ba72fcb947674b3aee4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:93:e4:86:8b:6a:e9:97:4e:1d:5b:0d:b6:
9c:e7:66:61:92:17:e5:e9:02:de:05:5d:23:03:d5:
0e:59:48:72:5a:cb:e1:60:b5:94:ea:f5:e7:7d:43:
55:74:c1:6b:76:c0:f7:c7:94:62:64:a4:7c:a1:40:
d1:3c:9b:64:e6:ea:1c:b1:b6:c3:cd:e5:e1:ef:43:
e2:b0:b3:6f:13:6a:9f:b1:27:2e:c0:0b:0c:b5:b8:
61:4f:44:c5:73:64:c8:50:3a:b8:ef:fa:50:1e:7e:
82:47:a7:95:b6:2f:cc:38:a3:fd:57:d9:bd:2e:40:
3f:ae:f2:73:ad:eb:34:d0:6e:1e:1c:60:7b:fe:c2:
d1:d7:d5:c7:0e:e6:f6:ca:20:c3:5e:15:eb:0e:8b:
29:24:98:d8:db:6e:60:9e:7c:ad:e4:47:f8:48:8b:
92:10:07:fc:0d:85:b9:fd:7b:2c:c0:7f:23:ca:8f:
11:e0:13:44:42:c1:7e:fa:8f:7b:0b:a2:2a:bc:3e:
b2:2d:f2:3a:16:d6:d3:da:94:bc:74:81:9d:2f:14:
88:ba:01:96:51:94:89:73:fd:a8:38:07:91:7f:e9:
ea:3d:5b:fe:1b:2e:10:c3:d2:57:d2:90:d5:14:5c:
03:eb:f4:83:95:2c:77:a1:93:53:dc:d6:94:4f:99:
46:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B7:63:5B:3B:11:D3:C4:35:0B:A7:2F:CB:94:76:74:B3:AE:E4:BA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y7djWzsR08Q1C6cvy5R2dLOu5Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.254.0/24
37.139.128.0/23
45.12.253.0/24
45.66.230.0/24
45.81.39.0/24
79.110.48.0/24
79.110.62.0/23
80.76.51.0/24
84.21.172.0/24
84.54.50.0/24
85.31.45.0/24
85.217.144.0/24
87.121.3.0/24
87.121.221.0/24
93.123.118.0/24
94.156.6.0/24
94.156.102.0/24
94.156.161.0/24
94.156.253.0/24
95.214.27.0/24
109.206.240.0/24
185.216.68.0/24
185.216.71.0/24
185.225.73.0-185.225.75.255
185.246.220.0/23
185.254.37.0/24
193.42.32.0/23
193.47.61.0/24
194.55.224.0/24
194.180.48.0/23
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:15:0a:19:7c:63:36:b3:6e:54:40:fb:cf:47:85:39:40:52:
85:50:4d:4b:aa:1a:08:bb:e7:74:de:a5:9a:70:ae:e3:8f:37:
7d:a3:97:7f:04:4e:c0:b6:d4:ec:af:a9:be:37:46:37:b6:f5:
87:74:51:ae:11:3c:5f:9d:2a:0d:a7:29:78:14:88:ff:55:bc:
59:48:2e:2f:68:ce:b0:b9:7e:c0:99:38:e2:6c:45:81:82:2e:
8a:19:43:02:86:bf:e6:6a:92:35:8d:83:85:63:b0:b5:8f:9d:
63:0b:96:3a:d6:7e:23:e2:83:b6:7e:2b:b5:b3:ea:b5:01:e2:
5f:2a:47:fb:45:43:2b:8b:70:16:c7:72:f2:c1:62:41:32:9f:
62:17:8e:e7:e4:0b:c1:59:2b:f0:d8:4e:cd:86:c8:c7:ec:79:
05:de:7e:0d:30:4d:eb:2d:96:cb:ed:42:0e:56:53:f2:04:e7:
ca:43:01:30:b3:b6:c6:bf:9f:94:ca:70:91:86:5a:f1:1a:80:
fc:34:ec:40:1d:b3:f1:41:31:91:69:2b:b9:1b:2b:0a:4a:55:
2d:28:b5:bd:d2:51:c6:6d:40:f2:f5:81:7d:34:13:53:c0:15:
72:e6:97:f1:da:14:24:8b:7f:4e:ec:c1:09:d0:46:28:fd:0c:
6b:66:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 17:10:55 2023 by rpki-client on console-ams.rpki-client.org