Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JAoRywY_IxqDri4V_JtofRAlh80.roa
File: JAoRywY_IxqDri4V_JtofRAlh80.roa (raw, json)
Hash identifier: hwjmTrzhAa1QDzexmCfNoEY+dq2z8bqyR5tXnWY5SZM=
Subject key identifier: 24:0A:11:CB:06:3F:23:1A:83:AE:2E:15:FC:9B:68:7D:10:25:87:CD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01907329D1EA4F0C0E02CFB40CDF39C92858
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JAoRywY_IxqDri4V_JtofRAlh80.roa
Signing time: Tue 02 Jul 2024 11:17:18 +0000
ROA not before: Tue 02 Jul 2024 11:17:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.12.255.0/24 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 13:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:73:29:d1:ea:4f:0c:0e:02:cf:b4:0c:df:39:c9:28:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 2 11:17:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=240a11cb063f231a83ae2e15fc9b687d102587cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:90:e7:04:0e:ff:cf:8b:45:51:5e:c0:f8:
8f:6e:99:a7:0b:75:fd:a9:a3:8c:fc:c9:c8:ca:5b:
48:35:b9:cf:27:e3:bc:04:b5:40:bb:fa:8a:a6:44:
af:97:42:56:59:e4:8a:30:80:20:8c:e0:67:c5:dc:
d6:21:9f:d9:1d:26:59:ca:86:b8:4b:ed:4e:fc:36:
03:e6:ae:0f:07:d8:dc:96:9d:34:23:e4:c2:92:d8:
27:34:b4:58:a5:6c:ef:08:19:d6:68:02:23:5b:a4:
b4:c9:00:6c:4b:05:e9:0d:b7:b9:cf:3a:38:a7:57:
b8:4d:f3:6e:d7:cb:a7:f7:46:20:77:e6:f2:82:15:
5c:19:23:df:50:03:f5:17:59:80:d5:e2:ab:9f:50:
89:98:08:ba:65:6a:a0:2e:da:29:71:80:30:d9:40:
c7:9b:06:25:52:e9:0b:d8:0d:8f:f8:5b:ad:36:d4:
3b:8e:5d:8d:24:1c:86:10:14:4b:1a:4a:ff:a7:34:
6a:d3:6a:39:be:de:f5:09:f9:2a:32:58:ab:22:da:
64:2e:a2:2b:17:f1:5e:5a:42:1c:5a:05:ab:8c:d4:
d2:4b:13:fc:61:01:7e:0a:e2:f5:a6:53:c0:12:96:
08:d8:4f:99:09:82:7b:38:7b:69:b6:2c:73:8a:68:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0A:11:CB:06:3F:23:1A:83:AE:2E:15:FC:9B:68:7D:10:25:87:CD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JAoRywY_IxqDri4V_JtofRAlh80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.12.255.0/24
45.66.229.0/24
45.81.241.0-45.81.242.255
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.33.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.31.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e7:c2:88:17:38:34:16:3d:a3:8b:cf:1e:d2:6e:df:89:75:
4d:13:bb:98:69:76:d8:6a:b3:c6:a1:00:c2:6d:3f:5f:31:fb:
9c:54:93:72:54:ea:f3:d1:00:a3:da:b2:55:8d:29:85:ca:5c:
fa:0d:07:85:d8:d0:bd:15:d8:a5:9b:bb:42:ec:6f:b4:41:fa:
ac:da:6c:d5:db:85:0f:c0:da:4c:4f:f8:5e:cd:56:ed:b4:51:
a0:c6:bc:7e:71:df:8f:80:f6:4e:6d:41:ee:c6:3e:ca:31:42:
1f:f8:69:8e:4e:5c:62:63:4f:fb:5b:2b:93:65:97:ff:d8:c9:
e5:7b:f8:ab:05:b4:e3:db:af:22:ec:bc:75:14:7c:1e:c2:d4:
e2:e5:2a:6b:d3:51:7a:4b:37:97:c3:e3:82:e5:24:b3:67:6a:
88:e3:18:20:73:9a:12:70:97:ad:99:12:d5:06:b0:42:bf:75:
30:af:e7:e8:14:d6:70:70:58:81:f1:5e:ab:6f:53:7f:24:6f:
e4:c5:d7:f3:85:d2:93:72:f2:68:91:59:a6:03:fa:22:a4:d2:
e2:b0:88:7e:1d:86:97:24:6c:f0:ab:3a:eb:88:df:6b:10:e2:
e3:d5:40:ea:76:49:0e:1a:6c:ec:7e:f7:cb:ef:01:0b:ae:33:
1a:47:3b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 14:30:22 2024 by rpki-client on console-fra.rpki-client.org