Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_Ljjogl4DkzEvHmIAab4h5zlenw.roa
File: _Ljjogl4DkzEvHmIAab4h5zlenw.roa (raw, json)
Hash identifier: Qz8sRcYuz+om9Kc5df9XXzrnJQT7KkHLYVdkJ/gT7Hc=
Subject key identifier: FC:B8:E3:A2:09:78:0E:4C:C4:BC:79:88:01:A6:F8:87:9C:E5:7A:7C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F965EC7F506386DB483CDF9B693EDF924
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_Ljjogl4DkzEvHmIAab4h5zlenw.roa
Signing time: Mon 20 May 2024 14:19:04 +0000
ROA not before: Mon 20 May 2024 14:19:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.59.252.0/24 maxlen: 24
37.221.120.0/22 maxlen: 24
45.9.157.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 06:56:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:5e:c7:f5:06:38:6d:b4:83:cd:f9:b6:93:ed:f9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 20 14:19:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcb8e3a209780e4cc4bc798801a6f8879ce57a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:6e:7b:b8:38:31:eb:af:12:e0:1d:7a:e3:
f8:af:89:85:c3:7b:60:4a:89:76:11:1d:84:0d:03:
ce:f4:8c:a3:5b:e9:3f:03:f4:f6:5c:eb:0a:57:72:
d9:fa:4f:10:97:eb:03:28:0c:a5:24:4f:99:04:93:
f9:e5:4c:52:3b:04:2b:a4:91:38:35:de:86:65:c3:
8e:23:46:39:3c:40:06:5a:62:5b:40:c9:9e:1d:ce:
c9:22:53:8d:c0:61:39:5a:f2:ba:6f:f6:76:55:90:
51:c9:13:9d:10:b6:8c:88:d0:e1:b4:35:59:d1:50:
92:ce:9e:91:43:83:95:98:7c:19:27:67:9d:97:a8:
99:18:ee:4e:f2:f0:fb:3b:6b:6f:f3:2d:71:94:d4:
93:e8:c7:c2:12:08:da:7f:2d:2f:40:3d:a9:08:69:
a1:79:3f:06:5f:11:cc:4d:34:a9:3d:60:28:db:ee:
6d:01:88:59:e4:59:dc:67:f6:fa:71:00:6c:e7:20:
24:63:0a:5c:f4:b8:e4:fe:11:9e:b0:1f:80:2a:f3:
5b:62:39:d1:e1:f9:68:9d:28:82:93:40:af:02:1d:
96:03:3c:59:b5:72:33:fc:0c:da:7a:f3:24:3d:2e:
50:fb:0f:f6:cc:14:a9:64:2f:8d:6f:1b:ac:0e:fb:
60:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B8:E3:A2:09:78:0E:4C:C4:BC:79:88:01:A6:F8:87:9C:E5:7A:7C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_Ljjogl4DkzEvHmIAab4h5zlenw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/24
37.221.120.0/22
45.9.157.0/24
45.81.241.0/24
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:81:f9:76:a5:6f:56:e3:bc:d1:4f:d4:cd:95:97:90:08:44:
5c:26:64:09:f0:98:c6:b8:98:04:f2:68:95:46:76:84:ae:c3:
a3:b2:8a:bc:f6:3d:9f:ed:03:11:14:74:a9:7c:e5:e7:c2:87:
65:50:6a:95:41:b8:99:20:13:fb:d1:07:be:5c:76:7f:be:18:
a6:aa:1b:13:e4:e1:fb:9f:e5:3b:10:47:48:9b:02:a6:93:e6:
84:2e:78:46:3b:8a:51:67:e8:ad:77:08:26:58:7a:18:f0:83:
e6:28:00:f4:e5:e8:d7:a6:fe:db:a8:98:2e:fb:6e:cc:73:c7:
6a:32:65:19:07:f3:e4:46:08:a0:a9:8a:7b:28:4d:39:6c:9b:
67:fe:c6:d5:3f:0c:63:05:fa:6a:bd:bb:2a:72:b1:4f:d1:ae:
0b:c0:6b:41:a3:0c:ea:27:e7:49:2e:52:85:71:63:d1:37:90:
ac:ee:a1:31:1a:c5:17:31:40:c0:0d:d1:dc:31:da:4f:f4:2c:
56:0e:29:6c:68:9d:23:32:f2:71:0f:f5:a7:23:64:51:ed:af:
6f:d1:59:c2:22:d4:dc:4e:a3:8b:4c:3d:f0:4f:fa:d2:1b:55:
30:d6:e3:7b:66:16:06:37:19:42:86:ff:9d:5f:88:38:7c:1a:
98:dc:db:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:14 2024 by rpki-client on console-fra.rpki-client.org