Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2PYaFA8PWqN8T4JTXtfPNEMfP6g.roa
File: 2PYaFA8PWqN8T4JTXtfPNEMfP6g.roa (raw, json)
Hash identifier: 7wrvTwrbF1nb6iA2I3BqvZBNxo938cmg8FLEKYCYemg=
Subject key identifier: D8:F6:1A:14:0F:0F:5A:A3:7C:4F:82:53:5E:D7:CF:34:43:1F:3F:A8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01909E0DFC6AB40E612A48542A15C8BE3C30
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2PYaFA8PWqN8T4JTXtfPNEMfP6g.roa
Signing time: Wed 10 Jul 2024 19:10:35 +0000
ROA not before: Wed 10 Jul 2024 19:10:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.59.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 08:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9e:0d:fc:6a:b4:0e:61:2a:48:54:2a:15:c8:be:3c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 10 19:10:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8f61a140f0f5aa37c4f82535ed7cf34431f3fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:41:e3:15:36:5a:81:d3:39:a2:11:58:40:
13:a4:c2:df:77:b3:3b:1c:c5:52:b8:a5:0f:c3:41:
f8:2d:ef:d7:41:9c:c5:fd:6f:23:76:f8:1a:a5:61:
f6:78:0c:14:f4:a3:d7:db:1a:09:90:d3:07:47:77:
fd:ed:37:d2:e1:07:6b:b8:f4:29:7e:f7:8e:08:f6:
c9:77:83:0b:cd:9d:68:45:6d:8d:71:22:32:d6:b3:
ef:f3:d7:19:c0:be:c4:40:0d:5e:54:cc:c2:1a:2f:
61:14:dd:8d:82:0d:20:42:66:b4:19:ec:e5:91:43:
92:a0:a7:5b:97:f4:d0:73:ab:86:b5:07:c4:41:86:
16:6f:98:ae:8d:94:fc:68:86:66:fe:8a:1d:9d:2d:
ce:01:ec:ce:69:39:ef:67:bc:60:69:d7:01:80:cd:
29:61:e2:19:61:59:73:85:5c:21:a4:b5:a3:7f:2d:
6a:0f:ae:73:b8:2f:8a:ea:86:1a:ce:9d:b3:72:53:
cc:b9:b0:bf:72:71:e7:58:4b:e6:c7:8f:9d:c4:53:
2d:c5:28:f4:43:bc:61:8a:df:aa:12:39:a7:54:fe:
83:9b:ec:1e:5d:e6:34:f2:b5:e3:28:f6:26:8e:af:
43:fa:77:8d:66:75:e3:b2:b4:51:af:ff:f4:8e:f7:
dc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F6:1A:14:0F:0F:5A:A3:7C:4F:82:53:5E:D7:CF:34:43:1F:3F:A8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2PYaFA8PWqN8T4JTXtfPNEMfP6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.55.224.0/24
194.59.30.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6e:82:cc:8e:f4:5c:75:b8:65:5e:99:8e:ac:e0:42:bf:d6:
c4:e2:ae:b5:04:2a:6a:3f:79:30:3f:f0:3d:59:7e:e5:dc:c8:
4b:2d:6c:dd:fb:da:80:c8:51:2b:b7:5c:f1:55:84:7a:a9:86:
73:7a:2a:29:b5:dd:b7:5d:7f:04:29:04:a7:14:9f:40:fc:77:
ee:5e:cd:0c:03:f3:49:fb:cb:c6:de:9c:ac:31:3a:11:54:6d:
90:c4:e1:6e:85:91:02:ab:91:3b:4a:41:c1:32:6e:ce:09:f2:
17:b7:a4:9c:f0:cf:a9:91:ad:25:58:e0:ec:d9:07:00:de:cc:
57:d8:89:9d:d7:68:d6:ee:16:cc:64:ac:a5:59:d8:7d:01:d6:
e8:e7:37:15:22:8d:60:11:6a:9e:ef:73:19:90:1a:e7:0b:5b:
d7:6d:fe:df:d3:39:2e:71:45:ac:ce:e3:44:27:9c:a1:bf:71:
86:ae:4a:f0:0b:b1:c0:8f:26:73:6b:ff:df:4a:59:d4:09:1b:
39:63:19:ce:17:08:19:50:d1:d8:a4:ad:ef:0a:4e:0f:1b:c9:
7e:1b:a4:aa:eb:a8:70:06:d6:e5:13:da:37:8f:5a:9b:13:27:
74:36:a7:91:9c:7d:cf:bf:1e:96:88:12:8f:fa:84:13:c1:36:
be:9f:6c:ab
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZCeDfxqtA5hKkhUKhXIvjwwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNzEwMTkxMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGY2MWExNDBmMGY1YWEzN2M0ZjgyNTM1ZWQ3Y2YzNDQzMWYzZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs35B4xU2WoHTOaIRWEATpMLfd7M7
HMVSuKUPw0H4Le/XQZzF/W8jdvgapWH2eAwU9KPX2xoJkNMHR3f97TfS4QdruPQp
fveOCPbJd4MLzZ1oRW2NcSIy1rPv89cZwL7EQA1eVMzCGi9hFN2Ngg0gQma0Gezl
kUOSoKdbl/TQc6uGtQfEQYYWb5iujZT8aIZm/oodnS3OAezOaTnvZ7xgadcBgM0p
YeIZYVlzhVwhpLWjfy1qD65zuC+K6oYazp2zclPMubC/cnHnWEvmx4+dxFMtxSj0
Q7xhit+qEjmnVP6Dm+weXeY08rXjKPYmjq9D+neNZnXjsrRRr//0jvfcuQIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFNj2GhQPD1qjfE+CU17XzzRDHz+oMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMlBZYUZBOFBXcU44VDRKVFh0ZlBORU1mUDZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjCBswQCAAEwgawDBAIl
3XgDBAAtQuUwDAMEAC1R8QMEAC1R8jAMAwQDLZCYAwQALZCaAwQALZXpAwQBLZdY
AwQAU9thAwQBVBWuAwQAV3hXAwQAV3ktAwQAV3ndAwQBXHfEAwQCXpqgAwQAXpwL
AwQAXpxOAwQAjWIBAwQAk05mAwQAqxYRAwQCqxZIAwQAstfgAwQCudhUAwQCudpU
AwQBwSogAwQBwZUCAwQAwjfgAwQAwjseMA0GCSqGSIb3DQEBCwUAA4IBAQCaboLM
jvRcdbhlXpmOrOBCv9bE4q61BCpqP3kwP/A9WX7l3MhLLWzd+9qAyFErt1zxVYR6
qYZzeioptd23XX8EKQSnFJ9A/HfuXs0MA/NJ+8vG3pysMToRVG2QxOFuhZECq5E7
SkHBMm7OCfIXt6Sc8M+pka0lWODs2QcA3sxX2Imd12jW7hbMZKylWdh9Adbo5zcV
Io1gEWqe73MZkBrnC1vXbf7f0zkucUWszuNEJ5yhv3GGrkrwC7HAjyZza//fSlnU
CRs5YxnOFwgZUNHYpK3vCk4PG8l+G6Sq66hwBtblE9o3j1qbEyd0NqeRnH3Pvx6W
iBKP+oQTwTa+n2yr
-----END CERTIFICATE-----
Generated at Thu Jul 11 10:27:33 2024 by rpki-client on console-fra.rpki-client.org