Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8m39AGbQmgd4vK5m1DkbTDUT7Jg.roa
File: 8m39AGbQmgd4vK5m1DkbTDUT7Jg.roa (raw, json)
Hash identifier: oHxrhRvdrmynZ97HWKREAZmNcRkbIKHQmA6C0px+XQU=
Subject key identifier: F2:6D:FD:00:66:D0:9A:07:78:BC:AE:66:D4:39:1B:4C:35:13:EC:98
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192B956A9DF90147AAB93B3C9595B807895
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8m39AGbQmgd4vK5m1DkbTDUT7Jg.roa
Signing time: Wed 23 Oct 2024 12:25:17 +0000
ROA not before: Wed 23 Oct 2024 12:25:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 31.169.124.0/22 maxlen: 24
37.139.128.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.95.0.0/22 maxlen: 24
45.128.97.0/24 maxlen: 24
45.128.99.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.16.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 16:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:56:a9:df:90:14:7a:ab:93:b3:c9:59:5b:80:78:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 12:25:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f26dfd0066d09a0778bcae66d4391b4c3513ec98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b0:cc:dc:df:85:cd:df:59:44:86:1f:6e:3f:
fd:64:bf:b5:f5:95:0d:8e:04:ba:0d:cd:ec:6e:79:
e8:60:52:25:a4:78:aa:e2:1e:cc:22:85:a0:92:01:
53:d7:44:d3:31:5c:dc:c6:30:10:df:27:b2:7e:6e:
2d:e2:63:fb:4e:e3:e0:10:53:b1:87:bf:40:54:dd:
12:e0:a1:62:c4:e7:30:3a:41:3d:b7:40:dc:25:ac:
95:34:fc:50:0f:d3:00:82:df:7a:c3:15:93:18:98:
8f:c2:c9:0f:da:b6:e6:49:42:ab:81:8a:04:94:47:
df:17:b0:c9:45:0d:52:7e:2c:1e:c9:49:8e:a0:40:
55:dd:4d:08:af:6d:76:73:74:1c:01:55:9c:ce:e6:
6f:88:65:20:65:e3:94:fb:b7:b0:4f:02:c0:4e:82:
55:1e:70:dc:03:a8:48:aa:23:50:9c:11:d6:a1:9a:
8f:4a:b8:45:27:c4:02:e6:fd:b3:bd:99:86:09:39:
69:37:0c:de:c5:86:0e:bc:1a:00:ac:27:e1:b4:88:
79:7a:1c:49:2c:d7:ca:22:c4:22:f7:ea:e6:25:16:
e6:98:a9:0e:ac:69:82:8e:97:3d:ea:b8:df:e5:e1:
13:23:11:7d:b7:eb:97:7c:b4:a2:d0:bd:71:09:8a:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6D:FD:00:66:D0:9A:07:78:BC:AE:66:D4:39:1B:4C:35:13:EC:98
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8m39AGbQmgd4vK5m1DkbTDUT7Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
37.139.128.0/24
45.88.66.0/24
45.95.0.0/22
45.128.97.0/24
45.128.99.0/24
45.128.234.0/23
45.149.235.0/24
79.110.63.0/24
83.143.113.0/24
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
85.208.139.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
91.92.21.0/24
94.156.236.0/24
109.206.240.0/24
109.206.243.0/24
171.22.16.0/24
171.22.19.0/24
171.22.30.0/24
185.207.14.0/23
185.218.138.0/24
185.246.220.0/23
185.252.179.0/24
193.47.60.0/23
193.148.56.0/22
Signature Algorithm: sha256WithRSAEncryption
39:f1:03:1d:42:b1:b0:25:6e:fd:75:c0:ce:a1:5d:4a:e8:59:
f3:e8:9b:9a:9b:4b:14:ed:33:de:73:6c:9b:94:8f:87:73:1c:
63:dd:66:c0:eb:26:da:1e:71:6f:c3:37:68:99:75:a0:d0:9d:
35:31:b5:cc:aa:6b:f8:91:de:89:e7:7c:4a:c3:44:8e:7d:26:
26:b1:2e:f1:36:30:e5:dc:51:90:22:cb:43:51:2f:cc:36:eb:
c6:f4:28:98:90:70:bb:2d:36:3a:3b:75:b9:97:54:37:02:74:
37:e5:06:27:35:bc:7b:94:12:c5:27:6f:6a:cc:5d:4a:c0:f3:
54:21:c2:1f:38:e2:22:c5:34:91:f5:38:61:17:f7:29:0d:4d:
51:d9:6b:7e:7d:e8:dd:93:93:83:a4:7b:68:77:51:ac:56:3a:
0f:6b:81:ba:80:20:97:b9:16:a6:5c:91:03:82:51:b3:5c:3e:
ac:09:d5:f9:cb:36:fb:3f:e7:94:31:cf:22:62:0f:a8:c2:57:
e4:89:a7:37:f8:5f:80:ef:d1:5b:8a:d8:68:05:52:b5:d5:cb:
ff:aa:e3:68:f9:10:2c:10:42:b2:9d:a8:d3:e6:6d:37:d1:b4:
4e:cf:1e:5e:93:a5:48:38:f9:f8:f1:ab:4b:5c:53:cb:63:43:
25:bf:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 17:39:20 2024 by rpki-client on console-fra.rpki-client.org