Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y6q8YUQSuA0dvxVH15ef95nZ58Y.roa
File: Y6q8YUQSuA0dvxVH15ef95nZ58Y.roa (raw, json)
Hash identifier: 7mVr+1JxLLK7wV8pf/RYbU0nCQdm/P/qmi6jXp8QQPg=
Subject key identifier: 63:AA:BC:61:44:12:B8:0D:1D:BF:15:47:D7:97:9F:F7:99:D9:E7:C6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192C476DDF2AF1BC9194EDD1C089B75EF6F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y6q8YUQSuA0dvxVH15ef95nZ58Y.roa
Signing time: Fri 25 Oct 2024 16:16:17 +0000
ROA not before: Fri 25 Oct 2024 16:16:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 31.169.124.0/22 maxlen: 24
37.139.128.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.128.97.0/24 maxlen: 24
45.128.99.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.16.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 14:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c4:76:dd:f2:af:1b:c9:19:4e:dd:1c:08:9b:75:ef:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 25 16:16:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63aabc614412b80d1dbf1547d7979ff799d9e7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4f:d6:be:07:46:19:1c:76:b5:61:fa:d9:d5:
7d:87:9c:34:44:17:7a:8c:19:94:dd:00:c9:26:72:
56:69:32:06:0a:83:03:85:2a:ae:6a:f6:43:d2:05:
7b:4c:cc:1e:b2:6f:73:6a:ef:a1:fb:7d:08:0f:54:
27:0d:36:f5:20:70:11:fb:9d:ec:cb:4f:88:ce:c3:
97:8f:d9:3c:1a:76:8a:87:b3:cd:00:0c:a2:d5:5e:
60:ab:33:db:65:97:6a:d1:6f:39:b5:19:a4:8a:c2:
b5:bf:16:60:99:82:90:93:dc:5b:03:5a:56:eb:1a:
28:27:42:27:08:45:36:d0:ea:47:e5:bf:4a:8f:5c:
6d:63:c4:fc:b6:3b:ea:6f:4a:c4:6b:ed:24:0f:50:
0c:9e:ed:9f:04:04:91:0d:d2:69:cd:ef:8d:de:ae:
b4:ff:15:d4:14:7f:b9:e1:45:ca:30:a2:44:cf:0d:
69:8d:9f:3b:d2:e0:c9:2e:8c:5f:b7:f1:84:4a:23:
fb:3a:7c:70:4e:60:05:69:18:5f:30:40:29:27:6d:
42:f3:87:cf:d5:27:7a:2c:91:6e:1b:42:f6:57:fa:
0d:57:08:97:93:26:25:f4:17:2c:3c:89:c0:02:72:
75:4a:59:26:a7:cb:86:92:5f:f8:d7:47:95:be:26:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AA:BC:61:44:12:B8:0D:1D:BF:15:47:D7:97:9F:F7:99:D9:E7:C6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y6q8YUQSuA0dvxVH15ef95nZ58Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
37.139.128.0/24
45.88.66.0/24
45.128.97.0/24
45.128.99.0/24
45.128.234.0/23
45.149.235.0/24
79.110.63.0/24
83.143.113.0/24
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
85.208.139.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
91.92.21.0/24
94.156.236.0/24
109.206.240.0/24
109.206.243.0/24
171.22.16.0/24
171.22.19.0/24
171.22.30.0/24
185.207.14.0/23
185.218.138.0/24
185.246.220.0/23
185.252.179.0/24
193.47.60.0/23
193.148.56.0/22
Signature Algorithm: sha256WithRSAEncryption
98:f8:1b:1c:b5:77:0b:e5:ff:17:0d:7b:69:e5:68:4b:45:62:
20:6d:bc:3a:dd:01:01:9e:ff:81:5d:30:8b:fc:51:aa:a4:fa:
f2:04:a3:75:c8:1a:3c:d3:cb:49:7b:f2:cf:94:2d:a8:66:12:
42:e3:87:e8:c9:fc:d0:5a:62:a6:30:18:c6:12:74:e7:d6:87:
08:5f:93:2a:2b:3a:ad:e4:a3:51:51:2a:e1:50:12:93:56:74:
e5:e4:3f:cd:c0:ff:28:78:e6:13:96:f7:7b:6c:16:84:92:c3:
ad:5f:fc:f5:38:1a:d8:b0:9a:a5:0e:28:23:44:54:c2:a0:5e:
b5:a0:ea:81:43:95:db:d1:07:42:96:70:db:ff:a6:27:7c:04:
24:4d:e3:21:8b:2c:63:88:5a:a5:6c:9f:36:05:86:bc:8c:b9:
07:b8:f2:f9:83:3c:06:2b:d2:9c:31:03:49:f2:09:ab:90:7d:
ad:80:16:ca:3a:90:3d:8a:4d:d0:06:38:e8:67:46:4d:c5:a6:
4d:ce:3e:86:08:fb:a9:bc:a7:36:37:c3:b1:a3:f8:36:8e:cc:
44:eb:9b:6c:f2:f2:02:91:96:23:4e:67:16:dd:f1:10:42:f4:
6f:50:62:37:09:47:38:fa:92:35:17:4b:ef:71:ae:86:c6:4c:
f5:65:14:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 16:41:12 2024 by rpki-client on console-ams.rpki-client.org