Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7WaaT-BJhT6hUTVUggEwwr2gVdg.roa
File: 7WaaT-BJhT6hUTVUggEwwr2gVdg.roa (raw, json)
Hash identifier: LvdaKWhFc6rsnIVzY2o9SvXEbrQid5fW3fvuteV0LtE=
Subject key identifier: ED:66:9A:4F:E0:49:85:3E:A1:51:35:54:82:01:30:C2:BD:A0:55:D8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190852E3F032F66E321457591C0A1F77255
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7WaaT-BJhT6hUTVUggEwwr2gVdg.roa
Signing time: Fri 05 Jul 2024 23:15:18 +0000
ROA not before: Fri 05 Jul 2024 23:15:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.161.0/24 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 07:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:85:2e:3f:03:2f:66:e3:21:45:75:91:c0:a1:f7:72:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 23:15:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed669a4fe049853ea1513554820130c2bda055d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:5d:dc:3b:51:6b:40:39:ae:93:96:1c:44:
92:4e:6b:a6:a7:4a:3e:28:48:f0:20:f2:0d:d9:cb:
1c:d5:46:2d:22:df:de:29:86:54:43:70:b4:4b:d2:
0d:7e:5b:31:51:04:cd:ef:0a:3f:17:ce:10:20:4a:
64:a5:79:31:02:c2:00:fc:26:66:0a:b0:5f:ca:84:
72:c7:c0:a2:3b:1f:c9:09:b3:4c:1c:eb:2e:01:8a:
72:9a:ce:b9:59:d1:51:ae:8c:54:e5:2c:ba:51:85:
66:bb:92:ea:c0:50:ee:92:ca:43:52:65:5d:96:e7:
73:57:f0:ef:b6:0a:b7:a0:66:b9:14:e2:23:00:8a:
d1:e0:50:a2:f5:dc:e0:f5:f3:68:8e:3e:0f:36:18:
34:ef:1a:c8:74:33:80:e0:9a:8d:f2:79:d4:5d:62:
92:33:d6:b5:20:8a:fc:6c:0a:e9:b9:97:77:73:d7:
22:0d:ae:c7:46:6d:35:44:e2:11:ef:82:e1:50:3d:
d1:15:3a:a0:49:60:87:96:d4:ae:39:e2:8b:29:0d:
af:af:77:13:9c:cb:0d:52:8a:e4:6f:b6:51:8e:72:
af:7b:21:5d:00:ca:70:f0:aa:25:85:21:a8:a2:79:
cc:9e:32:ea:e1:74:92:6c:aa:31:0b:4c:5a:4c:6f:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:66:9A:4F:E0:49:85:3E:A1:51:35:54:82:01:30:C2:BD:A0:55:D8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7WaaT-BJhT6hUTVUggEwwr2gVdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
185.222.161.0/24
193.42.32.0/23
193.149.2.0/23
194.55.224.0/23
Signature Algorithm: sha256WithRSAEncryption
13:0e:90:42:76:93:8e:77:93:a5:5f:8a:28:5e:4f:8c:93:a2:
b4:ad:ce:b6:a8:6d:c3:e2:a0:04:a0:5d:ba:9b:43:09:35:60:
04:c7:be:b5:89:23:3d:c2:dd:50:c7:ed:67:15:82:94:d6:36:
24:43:c7:6e:69:5c:6b:8d:9c:8f:cc:e1:14:42:52:72:9c:7e:
ec:2e:5f:35:7b:8b:a7:ef:1d:37:d7:9e:21:a2:6e:81:26:1b:
86:8f:80:81:71:03:90:c2:51:34:8c:06:95:bb:82:4d:8a:3f:
0e:47:d3:ed:19:3f:71:ce:27:cd:62:a7:3a:6a:82:68:68:41:
ab:e7:ea:82:12:8f:89:c6:4f:42:04:31:14:d5:6a:8f:2d:a3:
20:64:66:6f:31:b2:31:d1:94:fc:10:23:5b:af:13:2b:55:94:
4b:83:91:89:cb:95:0b:50:e6:49:9e:49:0f:0f:b0:bf:52:cf:
b2:60:f6:3e:dd:df:f1:13:eb:d6:d7:0d:eb:c2:de:7e:da:bc:
dc:41:2f:b3:36:e8:8c:66:1e:e3:55:c3:93:de:65:ec:d3:73:
fc:8f:c4:95:19:e4:bc:24:11:bb:d4:6e:5c:1e:3d:d6:dc:43:
c3:14:30:45:65:63:3c:02:da:22:a1:03:ef:19:de:67:ee:47:
a4:11:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 08:59:44 2024 by rpki-client on console-ams.rpki-client.org