Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Uek5rRR17QdgmHRprRjOTL2UTcg.roa
File: Uek5rRR17QdgmHRprRjOTL2UTcg.roa (raw, json)
Hash identifier: gmid70tk4Lmltfu0VbDos4VtWc4xXRgCy/LcRFYbswU=
Subject key identifier: 51:E9:39:AD:14:75:ED:07:60:98:74:69:AD:18:CE:4C:BD:94:4D:C8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01904A7CDA71B910C29511B932904396746E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Uek5rRR17QdgmHRprRjOTL2UTcg.roa
Signing time: Mon 24 Jun 2024 13:43:34 +0000
ROA not before: Mon 24 Jun 2024 13:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.149.242.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 05:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:7c:da:71:b9:10:c2:95:11:b9:32:90:43:96:74:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 24 13:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51e939ad1475ed0760987469ad18ce4cbd944dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:ac:66:08:83:fc:1e:ca:96:8d:e2:2b:b4:
81:21:e4:c7:7e:6b:1b:c8:91:d3:28:5c:78:27:7b:
87:bf:4f:3e:32:b8:28:ec:6a:9d:8e:fb:3a:64:e8:
65:32:96:3c:c4:0e:77:ac:c0:b7:f2:34:6e:dd:db:
34:25:ad:73:06:d0:5b:90:1d:5a:0e:30:6e:2d:0c:
58:20:ae:51:27:b9:87:46:ec:46:f9:81:82:61:b2:
81:51:7f:b2:11:4e:66:81:77:24:c1:bf:24:38:ac:
e0:62:ed:54:bb:4d:ff:1a:09:d9:48:56:18:3c:c2:
79:08:da:c8:e5:90:2c:19:71:78:aa:84:11:a8:b6:
d7:af:83:d7:27:42:0e:02:ce:63:e7:41:55:52:e6:
1c:22:9f:5a:8e:af:30:76:4f:cf:7d:a7:19:ce:7c:
b1:df:3c:8c:ca:f0:88:c6:24:c8:67:22:da:bd:fd:
7a:42:53:f7:c6:2f:5c:30:b9:87:e5:e6:c5:e9:a3:
65:cd:ca:60:59:70:ae:0f:ab:e5:91:a2:e4:29:81:
15:2c:f5:1e:8e:89:56:2a:aa:2f:f6:76:16:41:86:
0d:77:25:cc:60:da:d1:e0:03:7b:58:3e:93:34:45:
6b:7b:ac:94:68:0b:ce:58:04:9d:81:a3:42:ef:2b:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E9:39:AD:14:75:ED:07:60:98:74:69:AD:18:CE:4C:BD:94:4D:C8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Uek5rRR17QdgmHRprRjOTL2UTcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.149.242.0/23
45.151.88.0/23
82.115.211.0/24
83.219.97.0/24
84.21.174.0/23
87.120.33.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:bb:1a:ac:96:e3:a2:e2:18:82:9f:1c:98:34:41:f4:60:55:
29:e3:4f:dd:e0:d0:2d:77:0d:e5:ee:ee:b7:e4:46:11:5e:14:
40:52:50:ee:a3:05:19:95:73:08:2f:09:cf:46:fa:0a:67:03:
a6:4d:d3:75:a3:22:19:50:a9:6a:81:2c:f5:d0:3c:74:fe:58:
d6:73:06:6f:6d:7b:9d:a3:6a:87:bd:94:2f:73:9b:85:e9:df:
f2:2a:c6:91:10:f1:2e:a9:f6:5e:68:ff:fb:ec:24:06:05:30:
ab:60:ec:c4:b0:56:dc:d1:53:ac:22:5b:4d:f8:13:02:17:bf:
46:d2:06:bc:c0:a5:b7:f0:b2:77:c5:4d:d6:4b:df:bc:f9:02:
d1:7a:69:1d:9f:28:26:25:85:58:60:6b:bb:77:5e:9b:2a:fb:
f5:2b:a2:7c:41:d9:d2:af:84:67:2d:2b:6c:c9:73:20:48:84:
69:de:c5:90:96:f7:89:1b:09:ec:3b:be:f4:66:17:0b:a5:73:
96:bc:dc:1c:73:6d:47:38:1f:c7:a5:be:27:fd:a7:18:a2:36:
e2:3e:cf:47:f6:f8:2d:45:35:6b:dc:4b:d1:ee:81:f2:d6:de:
07:4b:da:d9:92:34:bc:e8:58:1e:b7:6c:23:98:68:fc:95:18:
0d:44:e5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 09:14:31 2024 by rpki-client on console-fra.rpki-client.org