Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fo-5w0ImuOPO2R9I8uOXjY15g6g.roa
File: Fo-5w0ImuOPO2R9I8uOXjY15g6g.roa (raw, json)
Hash identifier: eFl0iOVzrpQSjjA8DGw8x3PwSxLNsNIX7jZHkgIuYr8=
Subject key identifier: 16:8F:B9:C3:42:26:B8:E3:CE:D9:1F:48:F2:E3:97:8D:8D:79:83:A8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192C92ACC095E24F42441FF59D11CEA2690
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fo-5w0ImuOPO2R9I8uOXjY15g6g.roa
Signing time: Sat 26 Oct 2024 14:11:18 +0000
ROA not before: Sat 26 Oct 2024 14:11:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 31.169.124.0/22 maxlen: 24
37.139.128.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.128.99.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.16.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 05:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c9:2a:cc:09:5e:24:f4:24:41:ff:59:d1:1c:ea:26:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 26 14:11:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=168fb9c34226b8e3ced91f48f2e3978d8d7983a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:17:fe:5b:4b:29:4d:13:9a:86:73:d1:bd:
cf:ab:1b:c6:d0:0d:b6:0e:a9:76:74:63:44:f4:2e:
4c:30:61:ec:48:c1:bb:bb:6a:e9:42:c1:d5:1e:f9:
11:d7:a3:dd:a3:32:fb:20:cc:57:d5:aa:16:34:ba:
bb:60:c8:0f:cc:0c:51:a8:63:cd:c9:ba:fb:75:a3:
54:75:2a:c9:51:cd:88:a4:75:58:e9:14:6a:5e:54:
b2:fe:cd:fd:5d:10:ed:43:00:be:b8:31:93:84:34:
13:ce:a2:a9:7b:82:cd:da:4b:2f:6f:38:24:1d:ae:
af:e4:75:f5:1e:62:b7:60:02:10:35:08:62:60:47:
d0:ef:af:21:36:9b:6b:ea:6f:33:ec:bb:c4:54:ff:
e8:29:26:62:46:e7:6b:d9:06:c9:2f:e7:f0:c4:4e:
06:8f:8a:e1:21:b0:2a:b1:ce:58:44:ea:57:9f:f7:
07:4a:1f:3d:50:63:8e:74:b1:5f:5f:fc:cf:33:45:
6f:53:3f:1e:cd:46:a8:2b:df:c9:7c:dd:ac:7b:1f:
c7:bb:8d:3d:de:0f:49:51:d4:22:5a:90:12:d5:c2:
c1:1f:4f:14:69:e2:c4:32:80:69:d6:64:ad:a3:31:
ba:3c:7c:0a:de:3b:e9:6a:6c:42:da:84:92:32:44:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8F:B9:C3:42:26:B8:E3:CE:D9:1F:48:F2:E3:97:8D:8D:79:83:A8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fo-5w0ImuOPO2R9I8uOXjY15g6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
37.139.128.0/24
45.88.66.0/24
45.128.99.0/24
45.128.234.0/23
45.149.235.0/24
79.110.63.0/24
83.143.113.0/24
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
85.208.139.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
91.92.21.0/24
94.156.236.0/24
109.206.240.0/24
109.206.243.0/24
171.22.16.0/24
171.22.19.0/24
171.22.30.0/24
185.207.14.0/23
185.218.138.0/24
185.246.220.0/23
185.252.179.0/24
193.47.60.0/23
193.148.56.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:2b:8e:0d:32:c2:db:ea:27:3e:ae:41:9e:5f:79:66:d1:47:
28:cb:61:b7:1c:04:7a:81:bc:77:60:54:46:c3:cb:d8:c0:00:
c5:52:4b:03:f5:2c:9c:2a:59:61:5d:e0:1b:ca:06:a5:9f:1e:
21:67:57:7a:95:76:df:0e:fc:f3:be:a8:1a:ea:10:5e:c8:03:
a2:79:57:8e:b3:b5:2b:38:ec:99:b2:fe:a2:d6:eb:ab:65:46:
0a:7e:d0:7d:4a:56:95:d8:c3:26:1a:a6:a7:a6:90:b4:1b:88:
57:be:6b:90:b8:0b:18:70:37:c1:90:86:e7:84:1e:3f:a8:41:
62:aa:0f:93:ee:d6:02:99:15:04:90:6c:72:aa:e3:55:86:b4:
c9:85:1b:ae:9c:78:49:4c:e6:7e:cd:44:03:27:cd:98:34:85:
54:95:ae:98:02:af:7f:db:9c:bd:61:37:b6:f5:71:06:1f:71:
2d:42:91:e1:b4:4d:a5:19:a2:b8:b8:c9:31:81:db:5a:c8:52:
dd:54:2d:24:8e:6f:fa:97:63:42:f8:a4:80:78:3a:82:e4:7e:
cf:53:91:69:17:2c:a7:1a:43:62:ff:a4:7d:45:1e:a1:bb:1b:
4e:73:35:02:1f:55:88:37:2a:8c:fe:aa:c8:ed:6c:ae:a3:3d:
04:93:e4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 07:38:38 2024 by rpki-client on console-fra.rpki-client.org