Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0fCXFnuJzhSWZhZiv4AsfNUAG_A.roa
File: 0fCXFnuJzhSWZhZiv4AsfNUAG_A.roa (raw, json)
Hash identifier: YkcrjD3byP7hIav0DWRvP++6RnR34amaDki898e5iDM=
Subject key identifier: D1:F0:97:16:7B:89:CE:14:96:66:16:62:BF:80:2C:7C:D5:00:1B:F0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01907D0D410E544C8C657B15878ACC327F93
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0fCXFnuJzhSWZhZiv4AsfNUAG_A.roa
Signing time: Thu 04 Jul 2024 09:22:18 +0000
ROA not before: Thu 04 Jul 2024 09:22:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 13:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:0d:41:0e:54:4c:8c:65:7b:15:87:8a:cc:32:7f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 4 09:22:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1f097167b89ce1496661662bf802c7cd5001bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:07:da:1b:ce:a6:c6:a9:0d:e7:86:40:b3:
af:ad:96:f8:f5:c6:d8:82:4e:be:59:79:03:b6:85:
5f:18:1a:af:0b:ba:cf:74:13:a8:5b:c6:7a:ab:a1:
2a:2f:fe:c8:ac:e1:5f:ae:9c:1c:26:70:30:94:ae:
6a:c3:ea:4c:15:69:90:f6:1c:d7:65:eb:10:15:66:
b8:01:46:5c:8b:8d:fa:89:b0:62:24:76:6e:c8:a8:
c7:0a:48:7b:3f:f4:cc:70:ac:ea:c5:60:7a:2c:c5:
73:3a:73:13:cf:5f:a3:fb:5f:5d:08:8a:8e:15:b1:
37:94:97:fb:31:8d:a0:33:2f:31:92:fb:35:91:41:
05:fb:54:69:fd:00:bf:75:f4:fd:cd:d8:a8:2f:12:
f8:93:7f:ef:64:9f:a1:e7:b9:6d:f6:5f:75:07:a6:
0b:27:bb:95:a5:04:d4:47:44:3b:7f:55:87:e0:2e:
be:11:69:90:7e:37:76:f7:1b:da:00:14:c9:59:3b:
94:fc:86:40:af:0e:71:d3:24:01:eb:69:04:39:dc:
56:5c:f5:01:3b:b1:8f:ed:ff:7e:78:a5:17:e6:16:
fa:e3:9a:54:dd:84:ca:e4:5f:8a:0f:de:73:65:87:
f0:b0:c5:73:60:e0:d5:57:47:8a:ae:fb:f5:bd:86:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F0:97:16:7B:89:CE:14:96:66:16:62:BF:80:2C:7C:D5:00:1B:F0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0fCXFnuJzhSWZhZiv4AsfNUAG_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.31.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
05:93:34:99:e3:53:30:cd:55:5c:c3:1b:3f:ca:0f:15:73:d5:
01:5a:16:7b:a1:04:89:1b:94:41:16:e1:7c:83:3d:5f:e7:32:
17:35:99:c1:b3:51:86:30:8b:fc:c2:cd:ff:8d:86:8f:51:8d:
f5:09:e6:c9:ff:60:97:3d:92:31:76:9d:4f:e9:a4:9a:20:3e:
23:cf:32:0a:ce:1a:6e:a4:d8:1d:8d:0f:a2:d7:fc:67:20:cb:
41:e1:30:c0:e5:79:22:6b:63:95:a2:1b:bc:4f:f3:6c:71:26:
73:a6:14:f5:12:b9:06:e8:27:4a:4c:df:ef:b5:bf:39:8b:44:
bd:d1:e5:29:9d:03:df:ce:13:b1:f4:17:41:10:a1:2c:ff:d4:
6e:b2:cf:6f:ef:42:dc:1a:38:02:7c:36:12:b1:f7:ed:a2:c6:
8e:7f:1d:c9:eb:69:10:93:1b:f8:fe:20:9c:18:42:6d:db:66:
8f:dd:76:5b:5a:09:71:7a:29:32:be:c7:44:94:74:aa:d1:e2:
3f:71:43:b7:37:71:18:75:9e:61:8d:6b:9f:aa:92:a9:e9:9a:
5d:e4:d0:3e:94:10:35:d1:c1:d4:a6:67:55:bc:4b:75:ad:29:
eb:cd:51:90:25:d6:a5:91:10:0a:7c:4d:19:6a:be:1e:56:14:
4f:8e:13:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 15:56:53 2024 by rpki-client on console-ams.rpki-client.org