Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/PtpMzuR_fnzMSvbrIS_XL7XcHDE.roa
File: PtpMzuR_fnzMSvbrIS_XL7XcHDE.roa (raw, json)
Hash identifier: Vgle+bcsvWYkDlGwPY0af4IkgsFFRbmADSKF7eyGEvE=
Subject key identifier: 3E:DA:4C:CE:E4:7F:7E:7C:CC:4A:F6:EB:21:2F:D7:2F:B5:DC:1C:31
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 01856B00C3AC03FABB779521449C37305D4B
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/PtpMzuR_fnzMSvbrIS_XL7XcHDE.roa
Signing time: Sun 01 Jan 2023 01:44:50 +0000
ROA not before: Sun 01 Jan 2023 01:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201739
IP address blocks: 185.22.252.0/22 maxlen: 22
185.22.252.0/24 maxlen: 24
185.22.253.0/24 maxlen: 24
185.22.255.0/24 maxlen: 24
185.22.254.0/24 maxlen: 24
45.152.2.0/24 maxlen: 24
45.152.3.0/24 maxlen: 24
45.152.0.0/22 maxlen: 22
45.152.0.0/24 maxlen: 24
45.152.1.0/24 maxlen: 24
185.65.111.0/24 maxlen: 24
185.65.109.0/24 maxlen: 24
185.65.110.0/24 maxlen: 24
185.65.108.0/22 maxlen: 22
185.65.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:00:c3:ac:03:fa:bb:77:95:21:44:9c:37:30:5d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Jan 1 01:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eda4ccee47f7e7ccc4af6eb212fd72fb5dc1c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a6:5b:94:57:54:d1:9c:dc:42:07:26:4f:dd:
b2:0b:95:82:86:48:3f:b1:dd:72:8e:1f:72:47:22:
26:e5:85:d3:10:7b:5f:b8:ce:e4:ac:e3:1f:be:6b:
c7:b9:12:bd:5b:86:ba:09:6e:ca:5a:42:bb:9e:d3:
e3:21:30:a6:6b:b4:41:58:66:a0:82:4d:d2:f1:ae:
2f:a9:38:3b:83:fd:f4:a4:8e:8e:a3:2a:35:01:d3:
5d:a1:b8:40:c2:d1:e8:88:79:ec:25:5d:96:a9:b4:
2c:bd:72:64:aa:c2:b4:ea:ad:81:9d:e6:35:60:e8:
70:cd:9c:af:f8:b4:7b:6e:27:a3:73:1d:a3:c4:42:
a7:4c:c1:52:f2:a0:ad:dc:02:dc:c2:18:0e:dc:f0:
db:48:25:92:ea:a1:14:f0:53:08:78:83:d2:a1:b8:
09:31:36:1c:3b:1f:98:de:a4:9d:a7:0c:ee:a9:59:
d3:51:5c:bd:ce:72:d8:1a:72:3e:b2:4d:0b:d6:a9:
85:84:74:fd:ce:af:03:16:02:36:1d:56:fa:89:8c:
57:8a:f0:13:e3:3f:ac:71:da:9d:41:ac:df:88:d4:
8b:3b:9e:0f:d7:24:a8:1a:88:ad:2e:cd:89:22:2e:
e9:96:b4:a2:2c:c8:69:36:b5:6d:5e:4c:9d:2e:fb:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DA:4C:CE:E4:7F:7E:7C:CC:4A:F6:EB:21:2F:D7:2F:B5:DC:1C:31
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/PtpMzuR_fnzMSvbrIS_XL7XcHDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.0.0/22
185.22.252.0/22
185.65.108.0/22
Signature Algorithm: sha256WithRSAEncryption
87:ec:2c:6c:f8:c7:c8:95:80:e0:cb:c8:ab:1a:2e:1a:be:01:
8f:30:1d:ce:bc:f7:20:64:f9:2e:89:2a:6a:43:e4:17:a2:ca:
66:07:39:a5:f9:ef:e6:51:5d:60:cd:61:4c:d5:2a:7b:7b:8a:
5f:c0:43:d8:31:c3:e0:27:3e:cb:71:4c:5b:29:d0:61:3b:e6:
60:59:6d:ad:7a:ea:b3:d1:36:c7:19:b7:59:6c:f7:6c:c9:d9:
4a:41:8f:bc:88:5c:59:e6:e2:f0:1c:d1:36:90:70:87:91:21:
b6:b9:fd:96:fe:ce:21:36:bc:a5:f3:29:5d:78:3a:e2:d9:ec:
7f:57:53:6e:1c:ad:66:d3:37:e2:4a:31:8f:c8:bc:2d:d3:54:
df:c2:70:97:22:35:80:c4:4b:02:6c:0c:d2:c4:c7:ff:85:1e:
07:51:9f:2e:ef:a8:50:2d:de:6f:ac:22:57:51:1e:db:b8:e7:
48:90:ef:36:10:1b:41:93:35:b9:43:f2:86:2b:0f:7b:cc:f2:
23:44:91:6f:23:d8:14:25:a2:c1:50:e0:50:90:8b:c4:d0:3c:
6d:27:0e:26:28:32:0c:e0:a3:9d:dd:52:6d:52:ca:40:d3:eb:
02:84:2f:a9:d9:c9:ad:b7:b0:7e:0e:bc:b1:a6:f2:91:f8:3a:
a9:20:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:08 2024 by rpki-client on console-ams.rpki-client.org