Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c0L61eSpzLpAn29gCDAZfBlxY68.roa
File: c0L61eSpzLpAn29gCDAZfBlxY68.roa (raw, json)
Hash identifier: mlMYnjRXe6FU3DzWgLWzKrFsLYrz/xg0Js3fMmaREBI=
Subject key identifier: 73:42:FA:D5:E4:A9:CC:BA:40:9F:6F:60:08:30:19:7C:19:71:63:AF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01907E3063CC9EA0334BE8404D7068F1CB5A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c0L61eSpzLpAn29gCDAZfBlxY68.roa
Signing time: Thu 04 Jul 2024 14:40:18 +0000
ROA not before: Thu 04 Jul 2024 14:40:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.246.223.0/24 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 06:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:30:63:cc:9e:a0:33:4b:e8:40:4d:70:68:f1:cb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 4 14:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7342fad5e4a9ccba409f6f600830197c197163af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:1d:3a:4f:17:1f:f8:e5:0a:ba:70:34:fe:
b4:f4:d8:e6:55:8e:7d:99:06:77:ce:ff:ed:dc:bd:
c9:1f:47:a3:d7:89:57:71:ba:a4:d8:fe:3e:73:73:
52:ef:c4:1c:1f:d8:31:b9:2f:d9:f7:71:0d:b3:52:
7f:bf:50:56:61:15:4e:db:57:91:af:6d:58:4f:ff:
28:5a:2c:47:aa:e7:0e:0e:85:cd:17:ab:66:e8:03:
08:dd:74:d7:e3:d9:31:ee:bb:7f:d0:50:8c:02:a0:
0e:44:44:27:56:4b:a1:ae:d6:cf:56:f5:3b:86:2c:
6f:a1:e0:9a:ba:17:9e:0d:ca:68:e5:39:56:d7:60:
8c:fa:ce:af:74:ca:2e:00:df:e3:12:87:24:22:72:
34:4d:62:23:06:a4:ea:82:01:5f:3a:3d:d7:87:b1:
f9:44:23:5b:df:ef:6e:d2:62:78:c5:d9:12:00:76:
3a:14:e3:cc:4a:c9:aa:1a:d4:1a:b9:15:da:57:e0:
65:1d:20:b0:d9:35:cd:25:02:58:7b:9a:1b:d6:f3:
28:eb:64:f7:2f:c2:ee:86:51:6d:11:1e:10:62:0e:
45:30:ee:99:c1:d5:76:11:ae:1f:0c:50:7d:5e:78:
cd:f3:b1:66:52:4a:bc:24:20:2d:e5:13:ba:65:4c:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:42:FA:D5:E4:A9:CC:BA:40:9F:6F:60:08:30:19:7C:19:71:63:AF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c0L61eSpzLpAn29gCDAZfBlxY68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
141.98.5.0/24
147.78.102.0/24
171.22.17.0/24
171.22.31.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
185.246.223.0/24
193.42.32.0/23
193.149.2.0/23
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:29:8f:74:72:4f:71:a4:5c:21:78:0f:e2:db:9f:39:58:da:
e6:1b:2f:bc:bb:ef:b2:de:1a:30:11:5f:f2:48:ca:e1:cd:11:
5b:14:a4:4d:3c:92:49:67:26:34:ff:e9:51:bd:99:90:f0:13:
cd:27:41:8c:35:08:db:d9:09:0b:92:b7:4d:55:c7:99:e8:84:
65:4d:ad:c1:69:df:8c:2a:70:7f:c5:74:00:32:48:3e:c6:04:
28:a4:18:fd:e0:1c:e6:06:71:1b:8a:24:80:04:38:c3:6c:78:
74:22:e1:72:f5:68:6d:de:dd:7b:d0:b4:d3:71:bb:49:67:23:
af:ed:b5:21:f8:ec:fd:50:cc:a0:4f:41:cf:f4:36:10:4f:2c:
ec:f5:d7:83:21:6a:55:f7:73:2a:86:d9:54:3d:a6:1a:d9:3e:
f2:b9:77:cc:47:80:49:61:ba:30:8e:4e:cb:ce:fe:8a:62:a5:
a4:0b:4d:e2:7d:fc:81:b9:07:5c:0a:8f:b6:af:11:e0:fa:bd:
63:a5:2f:cf:3d:c2:d9:3d:4b:ed:b8:61:c4:e3:05:ee:cf:32:
87:ea:a6:1a:62:8b:97:dc:e1:4e:0b:97:41:3b:78:99:2b:e7:
74:04:0d:a4:ba:62:16:56:93:44:d6:a1:e5:73:bc:c7:39:0c:
2c:30:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 06:55:11 2024 by rpki-client on console-fra.rpki-client.org