Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OJvD3_KdgjQLutfBjBKY8kfEJfc.roa
File: OJvD3_KdgjQLutfBjBKY8kfEJfc.roa (raw, json)
Hash identifier: CIDALgdUZZ+PosYo05ZdO+qnytc0E2vei7I2SKuho+M=
Subject key identifier: 38:9B:C3:DF:F2:9D:82:34:0B:BA:D7:C1:8C:12:98:F2:47:C4:25:F7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019076FA9BF14D2E8623AEA974A50C4ED23D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OJvD3_KdgjQLutfBjBKY8kfEJfc.roa
Signing time: Wed 03 Jul 2024 05:04:13 +0000
ROA not before: Wed 03 Jul 2024 05:04:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.12.255.0/24 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 06:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:76:fa:9b:f1:4d:2e:86:23:ae:a9:74:a5:0c:4e:d2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 3 05:04:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=389bc3dff29d82340bbad7c18c1298f247c425f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:28:b1:6c:74:15:ae:a7:d3:dc:a5:d6:4e:
3e:e8:d2:16:11:bc:02:30:38:3a:df:00:75:94:fe:
0d:89:ed:a0:b6:d5:a7:79:c1:aa:86:c7:06:eb:58:
7e:6c:03:1a:36:c6:02:6c:75:8e:6e:84:49:86:76:
ea:99:b7:d9:57:58:75:13:cb:1d:57:6b:ce:20:d4:
18:69:ff:80:b8:7e:4b:77:32:1d:50:1b:0a:69:e2:
7b:1b:55:e5:ab:9a:c0:69:f5:37:e2:8c:7e:7a:21:
b8:91:39:7a:89:05:68:c9:c7:46:d5:5f:4a:58:65:
e5:30:02:b8:52:91:41:9a:fd:af:8a:9f:6a:18:13:
2d:af:46:02:7b:eb:60:d6:93:e1:14:9e:b8:db:fb:
86:52:6b:65:21:e7:58:a1:ba:7a:c8:b3:8a:67:0f:
b8:e4:dd:f4:ce:a6:38:bd:38:91:45:9a:41:e9:65:
1f:e5:e8:f7:60:53:4b:81:04:c1:cf:01:a3:13:73:
bc:b8:1c:5f:67:ef:19:0d:25:bc:fc:58:ca:9b:50:
0e:46:f6:27:5c:d5:6d:0a:d4:d7:ca:a3:88:89:59:
9a:55:f3:66:96:0c:ce:79:dd:18:57:c4:b3:07:b8:
bc:cc:29:12:ae:c0:4b:d4:53:89:e8:5d:a5:aa:53:
0a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:C3:DF:F2:9D:82:34:0B:BA:D7:C1:8C:12:98:F2:47:C4:25:F7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OJvD3_KdgjQLutfBjBKY8kfEJfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.12.255.0/24
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.33.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.31.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.48.250.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
54:4d:cc:c7:8d:2c:4d:ba:a4:3a:0f:dc:f2:6b:2d:8c:af:86:
d3:9f:7b:14:5f:85:40:86:9e:bd:2f:44:cf:9a:b6:ce:85:3d:
66:16:40:82:ac:62:ff:54:67:43:04:4f:7f:2d:41:14:09:44:
e2:bd:72:42:c3:e3:ce:8c:3c:e5:e4:48:99:a9:5d:45:8c:64:
7e:5b:65:d4:0d:31:82:f7:66:d1:57:7b:bc:fe:59:05:d8:e2:
72:98:e1:7a:1c:9e:8d:af:08:1d:01:a6:a6:07:00:9b:7e:38:
a8:fc:f5:03:e1:1e:6f:f5:4d:b7:a0:91:06:53:0d:af:c5:e8:
79:17:46:00:28:44:f7:b0:e1:ab:f2:60:d2:5a:d0:e3:87:cb:
83:95:48:c0:af:ee:2c:33:ca:16:20:3f:02:3d:25:f9:62:e6:
b2:e4:e2:58:f9:a6:b0:63:4d:6c:a8:c5:f0:24:94:f3:5f:1a:
e8:a1:1c:24:11:25:40:35:8d:4b:49:4e:1f:c1:1b:92:b0:53:
47:79:45:e5:fb:e3:bb:fb:80:60:df:21:6d:b2:93:de:ac:23:
b5:dc:35:4d:40:a6:a9:9a:09:df:46:66:57:8b:8a:5b:23:93:
2f:0c:6f:ed:17:64:6b:8e:74:5f:34:80:51:2b:de:8e:15:a0:
9a:45:10:b7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgISAZB2+pvxTS6GI66pdKUMTtI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNzAzMDUwNDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODliYzNkZmYyOWQ4MjM0MGJiYWQ3YzE4YzEyOThmMjQ3YzQyNWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4YosWx0Fa6n09yl1k4+6NIWEbwC
MDg63wB1lP4Nie2gttWnecGqhscG61h+bAMaNsYCbHWOboRJhnbqmbfZV1h1E8sd
V2vOINQYaf+AuH5LdzIdUBsKaeJ7G1Xlq5rAafU34ox+eiG4kTl6iQVoycdG1V9K
WGXlMAK4UpFBmv2vip9qGBMtr0YCe+tg1pPhFJ642/uGUmtlIedYobp6yLOKZw+4
5N30zqY4vTiRRZpB6WUf5ej3YFNLgQTBzwGjE3O8uBxfZ+8ZDSW8/FjKm1AORvYn
XNVtCtTXyqOIiVmaVfNmlgzOed0YV8SzB7i8zCkSrsBL1FOJ6F2lqlMKhwIDAQAB
o4ICzDCCAsgwHQYDVR0OBBYEFDibw9/ynYI0C7rXwYwSmPJHxCX3MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvT0p2RDNfS2RnalFMdXRmQmpCS1k4a2ZFSmZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHhBggrBgEFBQcBBwEB/wSB0TCBzjCBywQCAAEwgcQDBAIl
3XgDBAAtDP8DBAAtQuUwDAMEAC1R8QMEAC1R8jAMAwQDLZCYAwQALZCaAwQALZXp
AwQBLZdYAwQAU9thAwQBVBWuAwQAV3ghAwQAV3hXAwQAV3ktAwQAV3ndAwQBXHfE
AwQCXpqgAwQAXpwLAwQAXpxOAwQAjWIBAwQAk05mAwQAqxYRAwQAqxYfAwQCqxZI
AwQAstfgAwQCudhUAwQCudpUAwQBwSogAwQBwZUCAwQAwjD4AwQAwjD6AwQAwjfg
MA0GCSqGSIb3DQEBCwUAA4IBAQBUTczHjSxNuqQ6D9zyay2Mr4bTn3sUX4VAhp69
L0TPmrbOhT1mFkCCrGL/VGdDBE9/LUEUCUTivXJCw+POjDzl5EiZqV1FjGR+W2XU
DTGC92bRV3u8/lkF2OJymOF6HJ6NrwgdAaamBwCbfjio/PUD4R5v9U23oJEGUw2v
xeh5F0YAKET3sOGr8mDSWtDjh8uDlUjAr+4sM8oWID8CPSX5Yuay5OJY+aawY01s
qMXwJJTzXxrooRwkESVANY1LSU4fwRuSsFNHeUXl++O7+4Bg3yFtspPerCO13DVN
QKapmgnfRmZXi4pbI5MvDG/tF2RrjnRfNIBRK96OFaCaRRC3
-----END CERTIFICATE-----
Generated at Wed Jul 3 08:36:45 2024 by rpki-client on console-fra.rpki-client.org