Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D4ST4fUaHqNXor9EoFPW65Dslls.roa
File: D4ST4fUaHqNXor9EoFPW65Dslls.roa (raw, json)
Hash identifier: hS7/HkjHvZg2NklDDQd5B/WFuAamyPMFs5d1PGQFbf4=
Subject key identifier: 0F:84:93:E1:F5:1A:1E:A3:57:A2:BF:44:A0:53:D6:EB:90:EC:96:5B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190C1703617928B07F75C7C60E8AF0EFE10
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D4ST4fUaHqNXor9EoFPW65Dslls.roa
Signing time: Wed 17 Jul 2024 16:04:34 +0000
ROA not before: Wed 17 Jul 2024 16:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 19:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:70:36:17:92:8b:07:f7:5c:7c:60:e8:af:0e:fe:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 17 16:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f8493e1f51a1ea357a2bf44a053d6eb90ec965b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:de:c8:13:c0:6b:4d:73:b1:ce:c9:fd:12:
ca:aa:25:79:79:e8:5a:18:f9:64:19:22:f1:69:a7:
3c:c4:4b:d3:51:e2:7c:c7:87:16:41:75:1b:35:2f:
f0:3e:91:1b:06:98:86:33:68:e2:a4:f7:93:57:4b:
f1:7b:62:42:c3:97:a7:23:bc:b0:1f:f4:6f:7c:ba:
69:4e:e1:9a:d0:82:7d:4e:fa:a9:12:5b:85:fd:58:
0e:70:bc:07:a9:ab:1b:4f:47:8c:ee:e7:ad:1d:44:
25:5b:b0:47:07:41:3c:d8:4c:73:ed:2a:22:cb:fd:
83:c6:1e:0b:1b:73:ba:67:af:4b:b3:74:f2:65:48:
d9:d1:0c:30:8e:75:af:51:b5:ab:c7:18:55:c5:24:
45:2b:91:97:4b:f2:77:ab:39:3a:a4:57:51:d3:13:
5d:0f:81:20:d1:b4:0d:e7:97:42:d3:14:2d:67:04:
1b:ce:e4:71:9b:d4:70:3b:b5:3c:57:28:8d:69:f5:
78:d9:ad:ff:87:23:61:e2:f1:21:9a:12:ad:d6:50:
9d:8a:0e:81:90:b8:3b:00:99:b6:52:74:9f:08:f2:
30:3b:2c:f5:56:16:81:cc:4a:e1:b0:53:52:ea:32:
9c:96:28:e2:6a:f0:de:24:f5:20:46:c2:6e:76:e1:
43:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:84:93:E1:F5:1A:1E:A3:57:A2:BF:44:A0:53:D6:EB:90:EC:96:5B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D4ST4fUaHqNXor9EoFPW65Dslls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.121.38.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:72:b8:66:a5:75:3d:5b:19:8d:a0:ec:47:14:bb:25:81:3a:
04:a9:35:b9:5c:4c:19:1a:00:4d:a8:7e:cf:92:1f:58:a7:1a:
91:66:db:af:f1:fd:65:d8:8a:78:d9:91:e4:da:6b:23:f2:d6:
f4:04:df:9b:a7:a6:2f:10:0d:d4:ba:37:64:18:91:3f:c0:f0:
c4:dc:d5:ce:3d:75:8f:40:7f:db:07:17:54:09:ca:2d:61:e8:
26:b1:ba:a8:02:e1:4b:50:ef:98:ce:99:36:17:a2:08:c7:71:
b4:cb:ab:20:61:cb:08:1d:40:eb:1c:c8:3e:bc:14:82:ca:9d:
9d:68:22:be:64:4f:bf:81:f1:4a:a7:81:48:0d:d2:e2:e0:2b:
86:1b:ca:85:7e:1d:5d:89:08:42:c2:49:78:9a:d0:1d:29:c7:
07:2e:a4:68:9a:01:2d:c7:c8:f4:a8:df:5b:61:95:5f:1a:71:
60:81:34:04:b3:a0:d2:e1:fe:fb:3b:2b:29:ea:8c:00:2e:dd:
b6:80:d5:cf:83:73:a6:34:7f:ff:b0:1d:8b:d7:2c:05:70:9c:
a7:24:82:59:6b:fc:8c:9e:65:e8:3e:4b:a5:0e:d2:19:e2:dd:
76:11:64:9e:cc:29:a7:21:8d:f3:e5:96:8b:ae:8f:40:07:7a:
66:a6:9c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 20:57:34 2024 by rpki-client on console-fra.rpki-client.org