Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aIJk7C2GNZca7pXR-cMSkc2yyjs.roa
File: aIJk7C2GNZca7pXR-cMSkc2yyjs.roa (raw, json)
Hash identifier: OCwca9rsGexzpuYQiQiwmk1FNR7iAqvimILMZAYPhwY=
Subject key identifier: 68:82:64:EC:2D:86:35:97:1A:EE:95:D1:F9:C3:12:91:CD:B2:CA:3B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190341254F702C390F2A3FB3003323B0E9E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aIJk7C2GNZca7pXR-cMSkc2yyjs.roa
Signing time: Thu 20 Jun 2024 05:15:34 +0000
ROA not before: Thu 20 Jun 2024 05:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.149.242.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 06:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:12:54:f7:02:c3:90:f2:a3:fb:30:03:32:3b:0e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 20 05:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=688264ec2d8635971aee95d1f9c31291cdb2ca3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:37:e5:8d:c4:d9:69:57:6e:4f:b7:1f:8b:
9a:f0:99:5c:1f:fa:3b:60:b7:d1:58:f3:14:8e:c6:
90:e6:3f:61:9c:d2:0a:0e:b1:4c:2b:23:5f:c2:84:
c2:52:b4:c4:91:09:6c:bd:a0:4a:5f:77:4b:8e:52:
7b:09:83:03:59:12:ae:74:21:b7:c1:64:60:79:1b:
ea:49:8b:a7:0f:2d:af:39:98:49:80:94:3f:d4:7e:
c8:48:b5:ff:6f:96:d8:82:4a:28:b3:29:bf:b0:4d:
62:e5:e0:97:f8:29:d6:aa:b2:b7:8d:c6:2a:e9:d8:
e6:6b:38:4f:23:95:20:17:c7:89:02:94:9f:3e:ab:
2d:9e:bd:9f:e8:4b:dd:f8:86:5d:31:80:0f:1e:a8:
12:4e:12:b5:1b:a0:59:c0:5e:ce:89:22:2c:4e:00:
b4:0d:db:b1:7e:3d:0c:01:89:df:12:95:5b:73:64:
3a:e5:26:ad:89:2d:55:ed:cc:54:99:37:fb:06:dc:
94:eb:af:45:35:f3:49:e5:a9:90:ff:61:00:bb:04:
be:83:26:9d:ec:af:67:a7:a6:a9:d3:d1:d4:63:8b:
1a:72:10:fa:72:18:af:6a:37:38:79:91:73:ca:f5:
10:75:f2:6c:4d:0a:c5:92:0b:84:ae:d4:41:6b:d8:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:82:64:EC:2D:86:35:97:1A:EE:95:D1:F9:C3:12:91:CD:B2:CA:3B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aIJk7C2GNZca7pXR-cMSkc2yyjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.149.242.0/23
45.151.88.0/23
82.115.211.0/24
83.219.97.0/24
84.21.174.0/23
87.120.33.0/24
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:fc:5a:34:87:a2:4f:69:95:ac:c7:2f:8b:c6:95:fa:58:d6:
c3:56:37:fd:aa:04:e5:07:75:6d:11:a9:6c:d8:45:d7:3a:d0:
87:4b:65:86:19:10:bd:1f:c6:30:b2:be:78:ab:d9:59:46:a5:
1f:23:b7:f3:c8:17:50:1d:9f:34:49:24:74:00:be:ff:0b:1a:
0e:28:3c:48:7e:a7:ee:01:e0:d7:34:29:fe:e0:04:bd:53:2f:
1f:8d:35:fc:0a:a5:9c:13:14:04:a5:bd:c3:ad:42:d5:b4:c7:
54:1a:c9:6d:0b:1a:f9:5f:51:77:db:7e:6c:84:06:bf:ca:01:
fb:a9:33:d7:20:ed:9a:7e:a6:f6:a6:73:82:38:d6:aa:93:03:
39:a5:0d:06:35:22:e4:08:dd:a9:bc:1d:b1:7f:65:6f:d4:9e:
75:cf:40:e1:85:d3:c9:4a:4f:d7:f5:6b:07:c7:eb:77:48:af:
f3:32:7b:b4:f5:89:a9:83:b0:c7:3c:22:f7:da:63:2a:93:b6:
2e:69:84:bc:c6:ff:10:cc:49:bf:73:fb:04:67:12:f2:47:b7:
73:e9:1a:6d:87:24:51:62:dc:e4:b1:bb:ac:c0:b6:12:79:96:
8b:08:70:ed:d7:c0:7f:85:7c:cf:94:5c:84:38:98:86:a7:ca:
49:d7:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 09:13:20 2024 by rpki-client on console-ams.rpki-client.org