Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I2Ap4HAGpmrbBaj_gfiNEASk4fI.roa
File: I2Ap4HAGpmrbBaj_gfiNEASk4fI.roa (raw, json)
Hash identifier: V11AkqKAfw6XxkKLXlMoP8eA//MY4H+WuMkGGD5LLeY=
Subject key identifier: 23:60:29:E0:70:06:A6:6A:DB:05:A8:FF:81:F8:8D:10:04:A4:E1:F2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190A0E1401FF81CEDE0BB5BC8036AFEE741
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I2Ap4HAGpmrbBaj_gfiNEASk4fI.roa
Signing time: Thu 11 Jul 2024 08:20:34 +0000
ROA not before: Thu 11 Jul 2024 08:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 09:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a0:e1:40:1f:f8:1c:ed:e0:bb:5b:c8:03:6a:fe:e7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 11 08:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=236029e07006a66adb05a8ff81f88d1004a4e1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:fc:40:95:06:d8:67:c7:fe:0c:6c:38:8d:
4c:67:a0:6a:9d:09:75:c8:08:d9:46:b8:74:26:8d:
f4:c1:9c:c8:08:73:0c:58:94:15:97:cb:f3:e1:98:
25:20:ed:ad:78:ef:ee:67:15:03:be:b0:2d:c1:56:
da:d9:52:23:f6:3d:f7:d6:c3:05:55:29:a1:ab:98:
fa:79:db:65:51:87:5c:71:4d:09:b5:c5:77:c0:32:
56:f4:45:8b:1e:05:ab:a2:d9:60:a7:19:dc:63:4e:
95:aa:b8:7e:92:07:ed:28:a9:0e:d6:96:8c:51:6b:
4e:c6:fc:d5:32:a0:17:b2:53:19:05:4a:3d:27:3f:
0d:52:53:cc:80:61:c1:ec:a3:17:58:e9:07:f0:7c:
8d:8b:44:37:85:a4:73:61:43:6d:ff:c7:74:d4:84:
97:ef:9e:dd:bb:dc:6f:28:c2:c7:73:3f:9f:12:62:
d1:31:8d:ed:e5:06:4b:da:f1:1f:55:ad:46:42:dc:
c8:3d:be:82:bf:b6:f4:d6:88:3d:1c:e6:f2:c4:af:
9d:29:c4:2e:f7:66:22:7e:8d:f0:37:f5:17:23:95:
88:84:12:a7:d5:ca:c3:80:de:e3:aa:82:22:10:08:
81:43:19:08:ba:57:e3:99:19:29:bc:f6:4c:7c:1b:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:60:29:E0:70:06:A6:6A:DB:05:A8:FF:81:F8:8D:10:04:A4:E1:F2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I2Ap4HAGpmrbBaj_gfiNEASk4fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
35:38:fe:85:90:fa:20:a5:8f:7b:49:db:ee:0c:d1:f5:14:95:
30:03:d8:21:39:05:4a:34:f1:fc:8d:05:62:d3:8d:62:b9:72:
e1:ae:30:57:96:2c:7c:27:19:8e:d6:cb:07:01:0a:77:5a:c7:
36:1f:de:44:4f:70:a2:a7:af:29:d1:cb:85:02:7f:76:db:6d:
ed:04:ba:8c:fc:a4:3d:4f:47:28:f6:7b:64:20:19:7b:b4:88:
2d:70:a8:20:61:89:64:c9:ec:02:ce:b5:46:c9:c8:46:6d:22:
fb:8b:9d:09:59:70:1d:85:61:c7:55:69:94:62:0f:43:1c:02:
f8:76:20:4c:65:75:ec:df:f5:5f:ad:39:df:3c:6c:f9:d4:0a:
7c:5a:45:54:45:2f:57:91:5a:1c:fa:47:db:41:f2:d2:89:e3:
0a:eb:f7:3d:08:6e:6b:48:0e:db:ef:64:ae:b5:1e:5b:c2:bb:
84:21:67:70:f4:33:35:40:7c:aa:72:87:32:2a:bc:75:c1:f7:
01:7e:c1:20:fc:64:47:7c:8e:34:66:50:e1:36:b2:f7:f2:1f:
ab:5b:57:fa:4e:e3:de:8f:a9:4b:a8:26:68:3f:72:7b:e4:8e:
bc:23:a0:37:14:0a:20:41:e1:48:5b:a5:11:ea:54:67:cc:ba:
42:00:a0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 10:42:06 2024 by rpki-client on console-ams.rpki-client.org