Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hDbnsJ96YZo9NrtVeY5QS_4vfPc.roa
File: hDbnsJ96YZo9NrtVeY5QS_4vfPc.roa (raw, json)
Hash identifier: ayAOXY+cO2Sh6r3VaSEwiOjtdvJ8BJ9xyiE7F1VJrW4=
Subject key identifier: 84:36:E7:B0:9F:7A:61:9A:3D:36:BB:55:79:8E:50:4B:FE:2F:7C:F7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F587422B00C48D55E1186C187423484F4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hDbnsJ96YZo9NrtVeY5QS_4vfPc.roa
Signing time: Wed 08 May 2024 13:45:57 +0000
ROA not before: Wed 08 May 2024 13:45:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.59.252.0/24 maxlen: 24
37.221.120.0/22 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.149.241.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 14:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:58:74:22:b0:0c:48:d5:5e:11:86:c1:87:42:34:84:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 8 13:45:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8436e7b09f7a619a3d36bb55798e504bfe2f7cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:6b:94:73:1d:aa:97:2f:08:42:15:c5:55:
65:9f:94:61:5f:22:d3:26:dd:7c:ae:18:60:53:4c:
79:04:3a:ef:91:5a:53:03:02:ad:89:91:7c:ab:94:
0d:b2:1a:38:d4:02:53:f6:17:cc:df:05:18:0f:9f:
b4:02:d0:9f:3e:c7:18:50:c9:58:c1:1b:81:6d:29:
2a:2e:34:4b:f5:9d:5d:07:2d:35:35:e6:86:89:65:
c2:cf:0f:0d:98:5e:e1:1c:42:cd:48:0b:96:a0:a4:
5b:34:7e:78:d7:24:aa:9e:0f:f1:88:ef:5e:34:11:
06:e4:99:85:f9:e3:74:84:4d:07:1d:d8:48:de:0e:
80:ef:a6:af:ff:41:de:3a:b4:43:2f:11:ff:fb:b9:
97:3c:8e:ea:a1:e6:d2:a9:12:e4:01:ab:e5:f1:cb:
18:ee:fb:9c:b1:06:bb:e7:3e:05:6c:76:48:ae:9e:
53:92:64:d4:d8:ae:0a:36:be:3b:e9:27:8d:4f:e9:
92:e4:e7:2b:88:7f:b7:f7:64:87:f3:28:8a:76:76:
59:a2:19:b9:fe:fe:2f:d2:2e:69:67:34:f0:eb:c3:
0f:96:23:1f:32:33:65:f5:ac:7a:dc:cc:bf:c5:74:
9a:6d:1c:8c:0a:c0:4e:9e:5e:65:af:53:4d:fa:5b:
9a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:36:E7:B0:9F:7A:61:9A:3D:36:BB:55:79:8E:50:4B:FE:2F:7C:F7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hDbnsJ96YZo9NrtVeY5QS_4vfPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/24
37.221.120.0/22
45.9.156.0/23
45.14.164.0/24
45.81.241.0/24
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.149.241.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a2:e2:64:b5:c5:94:dd:ca:90:09:39:d3:99:f1:54:54:76:
32:d0:e7:2e:2a:77:90:d6:48:e5:91:97:44:80:0e:6d:53:04:
1f:57:b1:80:b9:81:2f:70:0c:16:a2:d7:52:a1:7e:b0:95:0d:
b8:4f:6b:b3:77:dd:28:4e:9d:9a:2b:3b:67:69:d9:a6:0e:19:
30:dc:18:71:6e:d2:82:ec:c3:97:86:21:40:55:45:b2:dd:61:
eb:4b:82:b6:1a:45:1c:25:2f:86:45:32:a0:b3:cb:44:f7:17:
f2:63:66:2e:41:ae:87:3e:9f:9a:f0:30:c0:38:a2:06:78:66:
41:b0:67:1d:7f:94:3a:b8:4f:d0:ef:f1:b9:57:75:9e:84:67:
9e:41:f8:e8:fb:58:c4:31:c8:b3:ce:31:0b:eb:3e:ee:ac:c1:
7a:c7:ab:ac:13:24:3b:80:b4:ff:33:af:0e:ac:af:2c:03:2d:
c3:80:0b:7c:df:22:c1:53:73:86:b2:b1:64:b5:c5:6a:4c:a2:
36:9d:dc:41:d1:29:c3:2c:d4:ee:6c:f9:40:61:b9:74:64:bf:
5b:a8:ee:df:2b:8f:cf:b3:c4:d5:c7:a5:f0:3d:ae:1b:ec:e3:
45:08:74:8a:f0:25:c6:aa:8c:67:3a:06:cc:92:fb:37:2f:eb:
f0:c6:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 18:20:39 2024 by rpki-client on console-ams.rpki-client.org