Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bWdv8gJF8qhen1lU4-mqo7Lf2cg.roa
File: bWdv8gJF8qhen1lU4-mqo7Lf2cg.roa (raw, json)
Hash identifier: KUjNXX6U8wPd8lNTy212OmmYwlCc3oSHu0AFMeafxhc=
Subject key identifier: 6D:67:6F:F2:02:45:F2:A8:5E:9F:59:54:E3:E9:AA:A3:B2:DF:D9:C8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01905E6D98D5F8FA85AC012400380D2596E5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bWdv8gJF8qhen1lU4-mqo7Lf2cg.roa
Signing time: Fri 28 Jun 2024 10:39:19 +0000
ROA not before: Fri 28 Jun 2024 10:39:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.12.255.0/24 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 17:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:6d:98:d5:f8:fa:85:ac:01:24:00:38:0d:25:96:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 28 10:39:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d676ff20245f2a85e9f5954e3e9aaa3b2dfd9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:fd:d7:58:a3:10:5b:3e:91:60:bf:7a:04:
9b:f2:71:5a:d5:82:6c:21:54:aa:91:5e:7d:0d:a7:
0a:2b:aa:55:5e:19:2f:c5:63:11:29:0d:85:ba:6b:
05:d5:e5:9b:0d:de:cf:9a:99:a2:b9:21:08:15:9c:
35:18:a8:e5:df:97:ad:d8:22:94:e5:a7:92:0c:45:
75:17:42:33:00:9a:a7:7f:88:16:1c:5d:1d:ed:67:
19:e5:24:d3:8b:c0:fc:fb:9e:25:38:4f:e9:32:15:
8a:fb:c6:35:91:7e:41:d8:14:27:52:bf:1d:2d:f4:
7d:8b:d2:6a:d0:b5:b7:35:e0:00:77:0a:5e:05:fd:
51:93:5e:53:b4:60:ba:6d:3b:bf:bd:4f:3d:74:da:
c9:5a:a6:f2:b0:85:d3:10:f8:8f:20:1f:c5:9f:12:
e9:ad:86:65:ce:80:b5:bc:1e:f7:6a:74:97:92:ea:
54:d0:9e:06:32:a8:41:9d:57:b5:ec:e6:e9:1d:6a:
4c:11:77:3b:46:82:83:70:0e:fa:8d:b2:fe:40:47:
83:26:31:e5:7f:0d:20:16:73:84:46:a3:af:6f:ba:
43:50:a8:7a:97:1e:5b:a4:66:c8:11:32:f4:64:4a:
d2:01:ff:eb:fa:17:b4:ca:39:9d:93:d5:02:ed:14:
d9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:6F:F2:02:45:F2:A8:5E:9F:59:54:E3:E9:AA:A3:B2:DF:D9:C8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bWdv8gJF8qhen1lU4-mqo7Lf2cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.12.255.0/24
45.66.229.0/24
45.81.241.0-45.81.242.255
45.88.64.0/24
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.33.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.31.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:4f:1d:df:84:48:10:08:f5:a2:7c:c9:1b:f8:2d:45:a2:18:
fa:9c:e0:a9:77:d5:97:c1:75:a7:0b:d2:d1:6a:92:72:b7:78:
0c:6e:31:37:8b:f7:99:81:47:4f:0d:57:50:ed:ea:d3:3b:7e:
77:56:6b:ec:89:7e:cf:e4:c0:2d:05:1f:8a:3f:ec:b5:89:51:
30:8b:b7:ef:f0:5a:ec:52:78:e1:c1:68:ae:f4:3c:72:53:f4:
17:7c:cf:27:ab:c9:85:69:23:c4:4d:f5:a8:67:65:7c:67:ea:
3c:f7:a4:06:ac:ac:46:0e:48:84:3b:c3:f7:ca:65:80:d9:06:
55:19:e2:8f:9a:fc:be:ac:0c:59:f9:44:36:a8:5c:d5:b6:1c:
af:b6:34:91:b3:d9:21:5a:21:68:1e:9b:15:63:2b:6c:b7:a9:
66:5b:12:a4:25:9e:4f:f3:be:39:1a:e8:b2:c3:15:7e:9c:ce:
28:da:7b:d9:b2:c3:1e:23:da:fa:b8:45:18:47:2c:a4:fa:94:
69:2e:a0:fb:32:31:c2:c9:89:08:d6:21:8a:e7:80:2f:0c:42:
b9:6c:29:63:2b:8b:aa:d2:29:f3:ed:ce:b7:c1:94:de:55:d3:
87:38:09:71:d2:c1:20:59:0b:47:ce:13:90:67:b0:12:9a:2a:
9e:91:79:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:42:11 2024 by rpki-client on console-fra.rpki-client.org