Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FzqJyTk5UJYZqiBNQmIDdPLhEZo.roa
File: FzqJyTk5UJYZqiBNQmIDdPLhEZo.roa (raw, json)
Hash identifier: w7G4ep/8XPbOv51YPWgx81+QQks0/1gvOUz71BLH1y8=
Subject key identifier: 17:3A:89:C9:39:39:50:96:19:AA:20:4D:42:62:03:74:F2:E1:11:9A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01908232B1FC1A02BF07FDF2C6B2B4003203
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FzqJyTk5UJYZqiBNQmIDdPLhEZo.roa
Signing time: Fri 05 Jul 2024 09:21:18 +0000
ROA not before: Fri 05 Jul 2024 09:21:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 12:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:32:b1:fc:1a:02:bf:07:fd:f2:c6:b2:b4:00:32:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 09:21:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=173a89c93939509619aa204d42620374f2e1119a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:09:df:1d:84:9f:31:03:bf:d5:48:31:51:
8b:c5:e9:49:6e:60:72:a5:cd:4c:22:56:0d:a5:cb:
c1:27:9f:83:81:86:d4:6c:83:9e:15:42:f5:e3:72:
3f:27:2c:93:52:e7:70:5e:36:b2:e4:49:db:7a:8c:
b0:54:f9:d4:17:d9:20:31:5d:a9:3c:f6:f9:35:b5:
fa:27:73:65:bf:98:c5:1e:bb:77:11:4f:de:b0:1e:
e6:53:ff:9b:34:d8:d9:8f:7e:0e:98:91:a2:03:47:
20:bf:b9:5b:66:56:f0:aa:f4:fd:b4:07:cb:b5:85:
cd:fd:5a:5f:d3:08:74:66:34:44:2d:d1:4d:3a:8a:
b6:2c:f6:41:41:8a:40:08:9c:a3:dc:37:d5:c0:51:
8c:eb:a0:23:0e:0e:c9:ae:6e:ba:d1:7d:30:75:a2:
6d:ff:1e:db:8f:48:32:fb:e0:bf:19:3e:b7:82:e2:
57:6a:b7:33:57:0b:b5:71:68:b9:df:80:28:77:c6:
6e:02:eb:d2:73:c1:14:91:0a:cd:f8:73:17:a6:80:
ba:a4:36:3b:ac:c1:76:6d:9d:4f:d6:95:c3:4e:50:
9f:af:cd:85:bc:69:ab:3d:95:e6:55:43:17:e1:fc:
42:57:81:c1:68:58:65:04:94:73:f9:39:4d:f5:9f:
d1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:89:C9:39:39:50:96:19:AA:20:4D:42:62:03:74:F2:E1:11:9A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FzqJyTk5UJYZqiBNQmIDdPLhEZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.120.166.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
141.98.5.0/24
147.78.102.0/24
171.22.17.0/24
171.22.31.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ba:e0:71:fc:44:6b:84:68:17:be:be:c6:3a:74:c8:9e:16:
bb:80:9f:f9:e8:e4:f7:17:fe:15:1a:6e:cb:dd:34:33:9b:e7:
b1:78:45:c2:fa:d8:40:d8:56:bb:1f:37:ad:15:c1:8a:d9:4e:
07:49:dc:0d:51:12:64:e2:85:10:3c:4d:3c:d0:4e:dd:6b:95:
4a:83:d4:c5:8f:f6:15:92:56:ca:aa:c5:6c:b4:57:c8:d3:31:
27:cf:c3:3c:37:7e:b3:14:db:13:ec:ec:c5:b0:45:e2:e4:d1:
59:5a:56:08:84:b1:7e:4d:64:88:0e:1d:5e:05:b3:4b:95:d6:
f3:dc:0a:d6:17:ed:82:9c:85:6e:61:2b:0c:be:99:bb:11:7d:
c4:b1:98:5c:ad:5f:9e:58:57:87:6b:3b:de:7d:8d:16:48:af:
15:52:44:12:a7:fb:7d:5e:bb:b1:8f:09:4d:36:55:78:27:13:
42:32:2f:db:75:f5:53:01:45:3a:1e:40:bf:5d:b0:8e:78:a0:
1e:cf:ef:08:75:70:0f:c2:27:f5:67:12:62:a8:64:86:14:59:
0c:05:b5:39:03:9d:c0:9c:d6:e6:65:9e:17:28:d5:65:c9:76:
2a:35:a7:75:4d:a6:ea:88:10:8b:83:80:3f:4a:b9:eb:90:6e:
6b:e2:4d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 14:45:57 2024 by rpki-client on console-fra.rpki-client.org