Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ab70hmnkAd9HUILJK8wkNbkkQLU.roa
File: ab70hmnkAd9HUILJK8wkNbkkQLU.roa (raw, json)
Hash identifier: r+g50J3e0xLLJemKTJhvVtiw13ETyZDih1JL9v8yogI=
Subject key identifier: 69:BE:F4:86:69:E4:01:DF:47:50:82:C9:2B:CC:24:35:B9:24:40:B5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01906D7936B40173D8C60E385F9822C2D083
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ab70hmnkAd9HUILJK8wkNbkkQLU.roa
Signing time: Mon 01 Jul 2024 08:46:18 +0000
ROA not before: Mon 01 Jul 2024 08:46:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.12.255.0/24 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 11:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:79:36:b4:01:73:d8:c6:0e:38:5f:98:22:c2:d0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 1 08:46:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69bef48669e401df475082c92bcc2435b92440b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:6f:6f:96:f6:73:6e:d5:15:1e:be:a3:0c:
b4:42:f3:60:1a:4d:be:d3:83:0d:60:57:e1:58:6e:
e5:f9:16:76:4d:ab:27:5d:7d:c5:3d:62:74:0b:d9:
6e:bb:e7:1f:4c:13:68:91:e6:8c:30:f2:ad:62:e6:
23:69:ca:ae:33:24:34:c5:c0:fb:5a:42:44:cf:5f:
ef:be:38:4b:88:5e:8a:22:30:82:ff:c4:64:cb:08:
c2:5f:86:4a:69:e8:6b:4e:a0:6e:5e:96:3c:38:ac:
50:cc:42:e1:1c:e4:8f:34:67:77:15:b5:d3:25:ad:
b5:3c:ae:1b:d5:7f:d9:b4:73:9d:d5:b5:8b:f4:92:
9e:80:99:45:5f:f8:38:56:67:79:c2:1e:5d:98:04:
63:86:49:2a:9a:62:7b:de:1b:8c:c2:80:4a:02:44:
42:be:81:ec:a7:ec:7d:13:79:50:57:76:c2:78:c2:
55:42:cf:f9:57:47:56:5f:3b:67:fc:6e:8a:cc:32:
67:88:b1:4f:b0:80:5d:11:e9:be:e3:ce:35:75:5c:
1b:2f:8e:70:be:a8:f3:59:2d:9a:24:f5:eb:fd:56:
64:fc:f6:c0:68:82:f5:41:f2:05:e0:8a:74:88:2b:
72:e9:25:c7:e6:89:5f:b1:0d:fc:10:98:67:cc:cd:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BE:F4:86:69:E4:01:DF:47:50:82:C9:2B:CC:24:35:B9:24:40:B5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ab70hmnkAd9HUILJK8wkNbkkQLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.12.255.0/24
45.66.229.0/24
45.81.241.0-45.81.242.255
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.33.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.31.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ce:40:fc:ae:b4:83:f6:08:cf:16:0d:df:8e:78:e0:fd:d7:
d1:4c:0c:1a:46:9d:4a:89:04:28:33:3d:06:c2:d1:72:17:28:
b8:52:53:ce:8c:3e:cd:a6:1b:01:67:ec:0c:07:e2:f6:e0:b5:
ab:5f:30:5e:2d:a3:de:3a:73:46:74:cb:e5:a3:c8:a0:ed:9c:
36:1a:c9:25:d3:e1:fc:67:77:3b:ea:17:4b:c7:f1:6e:49:d5:
ca:8e:19:1b:f1:2b:79:f2:a6:ba:55:3f:b7:26:b5:76:b7:e3:
c1:e6:44:03:45:a3:30:07:64:0d:f4:8d:62:13:91:c4:7e:2d:
e9:1a:e4:de:19:00:a4:0f:ff:77:a0:49:d9:bc:3e:8d:87:cf:
26:ba:a2:5f:db:2c:bf:ae:71:04:91:5a:36:a0:cf:20:d5:c9:
f0:5d:50:36:38:d0:4c:36:91:5a:88:96:06:9c:e4:a0:e9:61:
26:3f:d8:0d:7d:16:7d:e7:db:41:03:68:eb:64:83:c7:45:b6:
c8:4e:e4:18:bd:2e:36:bb:b7:d7:aa:ef:9f:66:cd:79:8e:27:
8e:bc:d5:a8:5e:c1:b0:f5:49:af:e0:ea:de:47:12:7a:49:00:
96:0e:45:0f:64:a3:ba:eb:c0:7e:91:38:64:1b:95:67:17:e3:
5b:8f:7d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 13:05:47 2024 by rpki-client on console-fra.rpki-client.org