Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X00cqeTYWb5xY52dVqbcz5IFMFw.roa
File: X00cqeTYWb5xY52dVqbcz5IFMFw.roa (raw, json)
Hash identifier: i6/WytLPyd9HjLqwGeyDLZZULCG46EEXlr6538dZJio=
Subject key identifier: 5F:4D:1C:A9:E4:D8:59:BE:71:63:9D:9D:56:A6:DC:CF:92:05:30:5C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01902AF0FE092E349E5321AB07C2122A2480
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X00cqeTYWb5xY52dVqbcz5IFMFw.roa
Signing time: Tue 18 Jun 2024 10:42:34 +0000
ROA not before: Tue 18 Jun 2024 10:42:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.149.242.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jun 2024 05:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:f0:fe:09:2e:34:9e:53:21:ab:07:c2:12:2a:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 18 10:42:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f4d1ca9e4d859be71639d9d56a6dccf9205305c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:45:46:52:82:b7:bc:a2:64:54:81:46:3f:
26:2e:d6:53:bc:09:ec:4d:7a:bf:45:b5:ec:61:a9:
a8:1c:49:97:ba:38:ba:cc:df:52:51:94:7b:ab:da:
84:cf:8a:00:47:47:99:79:ae:59:ae:3d:79:1f:5c:
56:a0:cf:a0:9c:f6:3b:85:51:07:27:20:49:03:c6:
b3:be:4d:2d:dc:a7:be:97:8b:3b:36:d8:ee:4a:60:
f7:b1:ed:cc:f8:5a:b9:8e:cf:ec:99:6a:14:31:86:
f9:18:86:fa:ff:d2:d6:ce:67:ea:6b:67:d4:61:8f:
00:ef:39:5f:c6:80:67:ba:95:98:17:b6:90:6f:81:
7e:b9:c8:07:44:1f:07:50:93:f2:6b:23:aa:ce:46:
1e:87:e7:0b:cd:98:bd:dc:19:31:ad:6e:01:ee:95:
aa:91:02:3a:6f:2f:b7:49:05:03:68:8d:c5:93:bc:
01:b6:8a:95:69:37:75:ce:4d:af:1d:b6:eb:8b:31:
14:0d:74:e1:c4:d6:f8:e2:6c:34:c9:86:50:b0:52:
8f:62:f4:3b:d3:8c:1d:81:a9:6e:80:0e:82:ac:bb:
7f:80:71:07:3f:08:c9:f4:7c:04:be:38:b4:0e:be:
46:00:b1:64:a0:b6:9c:91:55:53:81:49:cf:79:e9:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4D:1C:A9:E4:D8:59:BE:71:63:9D:9D:56:A6:DC:CF:92:05:30:5C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X00cqeTYWb5xY52dVqbcz5IFMFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.149.242.0/23
45.151.88.0/23
82.115.211.0/24
83.219.97.0/24
84.21.174.0/23
87.120.33.0/24
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:51:e4:de:4f:fb:48:12:d9:8a:dc:74:42:3f:4a:b8:87:6c:
dd:93:d9:ad:cb:33:55:8e:db:d2:7d:1b:ff:f7:fa:09:cf:83:
4b:85:61:0a:da:ce:de:4f:d5:f6:a4:96:d4:a7:c8:de:c7:a9:
c3:3f:d6:a1:40:76:55:ac:c8:04:bd:76:57:f0:93:24:5d:05:
d9:23:36:cf:41:f6:02:4a:3e:d7:71:6f:71:9e:95:a2:16:3c:
1f:77:80:8f:7a:27:1c:91:fc:0d:f2:c2:73:3f:0f:15:d5:d6:
2f:eb:ba:8d:e7:5d:82:5e:58:91:27:2e:a2:9d:be:0a:2c:3b:
17:31:50:f8:bd:86:e2:4e:5d:ac:23:10:83:94:83:07:02:b9:
9b:07:0a:0d:28:9d:37:63:cc:9f:20:a4:d4:19:28:73:28:d7:
d4:26:bb:a3:0b:4e:47:10:31:1e:7d:e4:b3:8f:d3:73:d0:05:
1b:8c:9a:85:69:a1:f8:fc:0a:67:67:ad:56:c4:a7:7d:41:03:
e6:1c:34:b2:7a:df:07:10:f6:97:a8:9f:35:fa:09:fe:ea:6e:
65:cc:d3:ad:b6:92:d3:1b:22:d6:a1:d4:8d:fc:22:6a:a9:04:
4e:50:6b:b0:37:75:c7:30:66:06:fd:34:5a:bb:97:f9:5f:f6:
94:3a:3f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 07:20:46 2024 by rpki-client on console-fra.rpki-client.org