Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3B73R0J0a4C8zl3N_r7Q_CYygiQ.roa
File: 3B73R0J0a4C8zl3N_r7Q_CYygiQ.roa (raw, json)
Hash identifier: GKrRNGH6/Ql+q/xe2hkytr5Q8Fj2ONcBjZSCwogatdU=
Subject key identifier: DC:1E:F7:47:42:74:6B:80:BC:CE:5D:CD:FE:BE:D0:FC:26:32:82:24
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190BA457D2FDCFCFE522DD0AED4E1272A94
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3B73R0J0a4C8zl3N_r7Q_CYygiQ.roa
Signing time: Tue 16 Jul 2024 06:40:34 +0000
ROA not before: Tue 16 Jul 2024 06:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 06:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:45:7d:2f:dc:fc:fe:52:2d:d0:ae:d4:e1:27:2a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 16 06:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc1ef74742746b80bcce5dcdfebed0fc26328224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:89:1a:80:ce:95:69:9f:95:74:e4:2e:a2:
e2:7c:04:ea:fe:d2:04:a6:d1:b3:39:e3:9f:4d:0d:
84:5a:b1:c4:27:1f:29:92:a7:9e:6c:85:2e:5f:8d:
e4:5c:8b:39:b8:b7:9b:51:ee:f4:0c:88:42:ca:9e:
19:fa:b2:43:92:b6:27:dc:c1:b8:f7:2a:82:02:49:
a7:98:73:c0:e6:43:e3:8b:3b:be:e3:93:79:e2:ca:
97:e9:56:46:83:b1:59:bd:30:95:f5:cd:26:3c:99:
18:76:95:bb:82:43:c5:9e:39:80:f8:db:70:eb:dd:
30:81:f5:d6:ee:08:a1:c0:31:a7:90:6d:dc:e1:41:
75:08:8d:a9:e1:23:82:43:c0:dd:87:75:43:98:ea:
1f:f2:b2:0a:f4:91:2f:cb:48:dd:f5:9b:8a:8c:47:
ac:c4:ed:3e:5b:3c:b7:92:7a:18:6f:e7:bc:5c:d3:
d6:f6:d9:0c:a9:2e:44:41:6b:57:a3:dd:b6:f6:29:
49:0f:f1:bd:2a:14:d1:34:31:f9:c8:b7:fd:c9:4c:
14:13:12:f0:43:f7:f1:83:a8:37:29:f8:50:c1:61:
67:18:f4:52:6b:78:86:ef:0a:13:7f:1f:2d:e6:9e:
72:08:d0:4d:6a:43:3d:39:93:2f:30:82:89:3b:58:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1E:F7:47:42:74:6B:80:BC:CE:5D:CD:FE:BE:D0:FC:26:32:82:24
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3B73R0J0a4C8zl3N_r7Q_CYygiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ba:19:2a:9d:8d:9c:8c:83:1a:41:ff:f8:35:2e:db:bd:83:
67:7c:84:b3:1c:72:90:bf:ad:df:32:70:79:0a:73:fc:0b:8b:
b1:0e:86:0f:28:3d:e6:3f:1c:e7:95:21:be:c1:3b:da:73:e5:
ad:5c:40:ad:93:34:be:32:ca:5a:0f:1f:eb:9b:12:55:7b:aa:
b2:de:d7:f9:6a:bf:21:b4:fc:3c:e1:91:b3:a2:cd:3b:1c:f4:
8c:9e:10:73:67:63:81:c3:b2:06:2c:a3:68:fa:b1:9f:8a:cf:
b1:4e:6b:d5:5d:cb:98:de:6d:5a:fd:b5:dc:64:9a:6d:98:8f:
1d:70:fa:ac:76:61:9e:03:53:dc:93:f5:3f:a4:a2:80:47:4f:
8e:b9:1f:4a:53:f5:da:b6:8b:08:eb:d8:60:5d:89:91:f7:df:
1f:c1:c2:c1:28:b2:03:fd:0e:73:81:7e:26:67:d3:49:9e:c8:
1b:e0:f9:89:da:dd:46:00:42:e5:46:dd:b4:16:db:1d:43:48:
04:17:fa:8a:d3:15:aa:6a:5f:09:fb:c8:47:b3:71:b5:db:61:
9b:f0:5d:f4:b9:90:c7:9f:99:f3:bc:c5:d3:86:e3:35:25:92:
9e:a9:62:81:f5:20:71:6c:dc:bf:27:db:4d:74:a1:f4:44:b6:
b4:a4:db:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 09:18:05 2024 by rpki-client on console-fra.rpki-client.org