Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B1bDViGie3H2n1bBwIHFYX2XZjM.roa
File: B1bDViGie3H2n1bBwIHFYX2XZjM.roa (raw, json)
Hash identifier: nMBA7zfXXy8WrABK7Cz4NbC5DBtiSlL9gMKLAZpiEuo=
Subject key identifier: 07:56:C3:56:21:A2:7B:71:F6:9F:56:C1:C0:81:C5:61:7D:97:66:33
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01908183D636C9162A3236513B64D0600298
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B1bDViGie3H2n1bBwIHFYX2XZjM.roa
Signing time: Fri 05 Jul 2024 06:10:19 +0000
ROA not before: Fri 05 Jul 2024 06:10:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 09:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:81:83:d6:36:c9:16:2a:32:36:51:3b:64:d0:60:02:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 06:10:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0756c35621a27b71f69f56c1c081c5617d976633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:37:7c:84:c4:8f:d5:18:41:cd:03:ac:9f:
7f:1e:43:9e:d0:11:51:10:2b:c1:96:03:0c:1a:13:
26:14:19:c9:31:c4:ec:34:10:c8:5b:bb:cc:95:30:
19:19:82:55:88:05:04:3b:bb:80:b7:2c:1b:5d:b7:
15:27:96:c1:46:53:04:05:ad:f3:68:68:0f:ac:02:
ad:1a:65:c6:83:eb:42:fa:1e:5a:52:a6:80:f9:65:
9d:c8:27:c4:0a:eb:83:ba:49:4c:e0:bc:b9:32:4f:
4f:c8:8e:f7:83:cd:59:a4:8d:76:03:95:67:6b:3f:
d6:0a:03:70:05:59:59:16:6e:44:64:5c:8b:48:9a:
36:a1:eb:33:18:33:ea:b6:8f:b7:13:ce:ce:fb:42:
26:18:c5:85:da:ad:c9:b5:07:f6:32:e9:96:6e:3c:
ff:6e:cf:00:29:fc:aa:b4:c3:2e:36:1e:32:e8:e6:
ab:2f:43:72:83:04:bd:84:b9:27:11:85:7d:cf:45:
a7:bb:7d:10:17:c0:f9:84:1a:5f:9d:9b:53:1b:6a:
a6:ac:1a:94:a7:82:43:94:ef:39:94:a0:37:45:20:
c0:92:7d:3d:c8:1d:a6:f7:1d:fe:d0:27:85:86:29:
e7:75:f0:eb:77:8b:3e:62:a0:d6:09:8b:f8:a1:68:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:56:C3:56:21:A2:7B:71:F6:9F:56:C1:C0:81:C5:61:7D:97:66:33
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B1bDViGie3H2n1bBwIHFYX2XZjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
141.98.5.0/24
147.78.102.0/24
171.22.17.0/24
171.22.31.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:27:86:1c:87:17:2e:91:7c:8e:00:7d:7b:10:8b:87:8a:dc:
9b:e4:0b:46:d4:f0:9c:5e:23:77:61:1d:46:8d:3f:10:df:e9:
57:26:c9:e8:5e:80:ea:ee:b0:ea:ea:7c:8f:45:31:9d:de:48:
48:29:5f:66:05:9e:a8:2b:d2:9a:49:65:4f:67:93:5e:23:d5:
df:fd:63:5c:e1:6e:7a:cb:33:35:57:bb:87:ac:f6:34:0b:92:
f1:74:bc:90:81:a5:8d:5d:3b:9d:f2:bf:96:04:5e:33:70:84:
e0:cd:93:f1:88:4a:ad:c0:ac:30:3f:8a:73:8b:85:83:26:4b:
58:38:01:34:41:78:b2:48:46:c8:c3:f1:cd:91:93:67:11:3e:
cd:61:00:a0:6c:a0:b0:36:ec:a4:46:0b:65:d3:76:67:7b:36:
e3:a0:67:aa:b1:dd:69:2b:43:43:29:8a:64:62:b6:42:40:c6:
bd:12:02:a3:25:f4:02:a9:62:3e:7b:5d:75:e1:ee:ac:d2:b7:
31:15:c3:29:32:55:6f:5b:22:ae:fd:e6:73:ff:03:75:9f:2b:
6e:bd:75:c2:af:48:ee:2c:2e:b3:08:22:e9:99:c0:07:8a:88:
bd:9d:36:88:a3:99:d1:7f:0e:21:c1:bf:fe:3f:99:9a:45:bf:
d3:f5:2e:d0
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZCBg9Y2yRYqMjZRO2TQYAKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNzA1MDYxMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzU2YzM1NjIxYTI3YjcxZjY5ZjU2YzFjMDgxYzU2MTdkOTc2NjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyA3fITEj9UYQc0DrJ9/HkOe0BFR
ECvBlgMMGhMmFBnJMcTsNBDIW7vMlTAZGYJViAUEO7uAtywbXbcVJ5bBRlMEBa3z
aGgPrAKtGmXGg+tC+h5aUqaA+WWdyCfECuuDuklM4Ly5Mk9PyI73g81ZpI12A5Vn
az/WCgNwBVlZFm5EZFyLSJo2oeszGDPqto+3E87O+0ImGMWF2q3JtQf2MumWbjz/
bs8AKfyqtMMuNh4y6OarL0NygwS9hLknEYV9z0Wnu30QF8D5hBpfnZtTG2qmrBqU
p4JDlO85lKA3RSDAkn09yB2m9x3+0CeFhinndfDrd4s+YqDWCYv4oWgd4QIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFAdWw1Yhontx9p9WwcCBxWF9l2YzMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQjFiRFZpR2llM0gybjFiQndJSEZZWDJYWmpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHPBggrBgEFBQcBBwEB/wSBvzCBvDCBuQQCAAEwgbIDBAIl
3XgDBAAtQuUwDAMEAC1R8QMEAC1R8jAMAwQDLZCYAwQALZCaAwQALZXpAwQBLZdY
AwQAU9thAwQBVBWuAwQAV3hXAwQAV3ktAwQAV3ndAwQBXHfEAwQCXpqgAwQAXpwL
AwQAXpxOAwQAjWIBAwQAjWIFAwQAk05mAwQAqxYRAwQAqxYfAwQCqxZIAwQAstfg
AwQCudhUAwQCudpUAwQBwSogAwQBwZUCAwQAwjfgMA0GCSqGSIb3DQEBCwUAA4IB
AQAKJ4YchxcukXyOAH17EIuHityb5AtG1PCcXiN3YR1GjT8Q3+lXJsnoXoDq7rDq
6nyPRTGd3khIKV9mBZ6oK9KaSWVPZ5NeI9Xf/WNc4W56yzM1V7uHrPY0C5LxdLyQ
gaWNXTud8r+WBF4zcITgzZPxiEqtwKwwP4pzi4WDJktYOAE0QXiySEbIw/HNkZNn
ET7NYQCgbKCwNuykRgtl03ZnezbjoGeqsd1pK0NDKYpkYrZCQMa9EgKjJfQCqWI+
e1114e6s0rcxFcMpMlVvWyKu/eZz/wN1nytuvXXCr0juLC6zCCLpmcAHioi9nTaI
o5nRfw4hwb/+P5maRb/T9S7Q
-----END CERTIFICATE-----
Generated at Fri Jul 5 10:24:40 2024 by rpki-client on console-fra.rpki-client.org