Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0MK_h1Xi_y5VUFacsiRknNOMjGc.roa
File: 0MK_h1Xi_y5VUFacsiRknNOMjGc.roa (raw, json)
Hash identifier: yfF+KV3zQongdItZ6pIgHy6ggwXTzE861qiZwpfDPb0=
Subject key identifier: D0:C2:BF:87:55:E2:FF:2E:55:50:56:9C:B2:24:64:9C:D3:8C:8C:67
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01907E00C8560874328888D8C6DBCF947BE6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0MK_h1Xi_y5VUFacsiRknNOMjGc.roa
Signing time: Thu 04 Jul 2024 13:48:18 +0000
ROA not before: Thu 04 Jul 2024 13:48:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 14:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:00:c8:56:08:74:32:88:88:d8:c6:db:cf:94:7b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 4 13:48:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0c2bf8755e2ff2e5550569cb224649cd38c8c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:9c:a6:96:e0:84:32:67:a0:34:c7:74:2d:
c5:cf:1c:e2:5e:1c:08:fe:f3:c3:88:13:55:a1:8e:
61:76:93:95:2b:bf:18:cc:a8:41:ce:43:55:91:a9:
89:ad:2c:77:bd:52:6b:2b:99:80:87:60:ec:b0:60:
c7:4e:d4:a9:76:d8:97:1c:dd:2f:f0:23:98:45:8b:
f5:7c:42:36:b9:52:49:bb:9b:1f:6b:30:d1:56:cd:
55:2a:b3:d3:18:66:1e:ad:c4:dc:57:bf:a5:fa:e1:
cd:34:59:29:32:07:f8:a5:a2:af:39:b2:f0:09:ab:
9d:85:11:de:e7:46:9e:6e:b0:ec:8c:f2:a3:8d:ae:
56:d6:3e:0e:bc:7a:3e:f7:c3:87:61:3d:85:c4:ce:
34:e9:67:86:00:93:5d:e7:5d:26:37:2c:1d:1e:94:
cf:3e:bd:61:02:bd:c8:01:76:d3:7c:0a:ab:16:13:
b6:64:5f:00:a7:22:bd:cd:2c:1d:68:3d:78:37:42:
6f:05:cb:64:6f:99:c7:88:2e:5d:46:1c:4d:f7:65:
75:b8:9d:36:6d:c7:f9:a6:ee:6d:55:ed:35:79:dc:
5a:a6:8e:e7:91:2b:7e:90:44:b0:00:39:d1:d1:7b:
ab:47:70:d3:79:90:67:f5:80:c1:97:28:fd:d8:4a:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C2:BF:87:55:E2:FF:2E:55:50:56:9C:B2:24:64:9C:D3:8C:8C:67
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0MK_h1Xi_y5VUFacsiRknNOMjGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
141.98.5.0/24
147.78.102.0/24
171.22.17.0/24
171.22.31.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1a:a6:5a:b1:3d:7f:38:e1:ec:d6:29:ef:db:bd:a9:fb:fe:
52:0f:20:f2:5b:ab:fd:f1:57:f5:4c:25:19:fd:ed:20:54:80:
92:1e:ef:8c:a0:8c:98:a4:2c:45:40:c1:fb:83:42:2a:da:d9:
65:0a:e2:cb:6e:6f:34:1f:6b:d9:11:c4:01:5a:56:fb:7a:36:
62:7b:c0:6a:04:d7:ea:bd:1e:fe:a9:6c:2c:93:0c:3d:42:31:
65:5e:cd:20:90:81:13:8d:a3:ce:db:62:ee:a7:c4:39:d2:eb:
eb:da:c1:ce:5d:e1:3d:a3:3b:3e:1f:ea:23:13:d5:10:b4:20:
ac:6a:19:5e:2c:73:79:07:87:7a:b0:56:08:a9:63:1e:df:9f:
5f:ba:a3:e3:a9:32:ab:86:68:b1:6b:24:cb:75:5b:62:ce:ed:
65:b0:65:6e:03:ce:ce:12:23:27:43:89:70:bf:2e:2f:5f:cb:
39:3a:f7:83:46:0e:4b:88:b6:60:18:51:49:ee:95:c7:36:d0:
0d:86:22:5d:63:d3:22:28:6d:2b:0a:eb:83:d3:a9:4e:66:a7:
d8:41:38:40:96:63:19:35:ac:63:36:38:ff:56:6c:80:fd:e3:
1b:5d:35:3a:f5:12:93:7c:1a:d8:45:df:fc:f7:0b:fc:5b:2a:
e1:9c:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 16:48:15 2024 by rpki-client on console-fra.rpki-client.org