Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fChB2DU9YpN1xNk-w_vSeRbysfU.roa
File: fChB2DU9YpN1xNk-w_vSeRbysfU.roa (raw, json)
Hash identifier: 9MD5jeAcBwTFbM9ZJPVD0LdM3n5BGWyxWoW9xddn/94=
Subject key identifier: 7C:28:41:D8:35:3D:62:93:75:C4:D9:3E:C3:FB:D2:79:16:F2:B1:F5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DCD5E097232869061CADCA52DC83AD332
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fChB2DU9YpN1xNk-w_vSeRbysfU.roa
Signing time: Wed 21 Feb 2024 20:31:48 +0000
ROA not before: Wed 21 Feb 2024 20:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204843
IP address blocks: 37.221.120.0/22 maxlen: 24
45.81.241.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 18:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cd:5e:09:72:32:86:90:61:ca:dc:a5:2d:c8:3a:d3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 21 20:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c2841d8353d629375c4d93ec3fbd27916f2b1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:7b:62:e6:70:23:69:f3:d6:d9:57:6a:5c:
5e:16:0c:56:4e:cf:c7:4e:fd:b9:4e:89:fb:9c:93:
bc:a1:74:b0:f7:88:74:2b:8a:9b:f4:6c:b4:d5:95:
34:2c:22:99:e4:62:34:83:4f:c1:61:1e:cf:b4:1f:
bf:98:6d:c2:d0:ac:73:a1:10:45:12:1b:11:c8:4a:
60:61:fe:af:7c:ba:5a:40:6d:d9:d4:58:60:b2:82:
40:11:9f:07:9c:c1:7b:ef:97:f7:73:48:58:06:0d:
90:50:a8:a1:3f:75:c4:2b:b6:dc:33:57:fb:ae:9d:
d4:3a:e2:89:2d:85:4b:9c:ec:ef:74:e5:0e:c0:2b:
ba:41:9f:27:21:e1:6d:4e:e3:39:18:59:e7:5a:b1:
95:c0:f9:36:2d:10:2a:b4:98:f0:54:20:a4:99:ca:
75:c0:34:ce:a7:f1:46:2f:8f:4b:ed:de:c9:0b:e1:
5d:2e:71:f6:51:e4:b9:fa:f1:ba:19:f6:fb:15:07:
4a:ff:22:30:db:f0:80:9c:dc:62:d4:1b:58:e8:83:
f8:2f:a1:35:5c:e4:cb:f5:31:a8:24:3a:bf:29:d1:
8e:18:9d:70:ea:ea:6a:2d:35:e4:e2:f8:fa:af:b4:
1c:fc:d7:d3:ad:8a:03:ba:a1:f1:1a:d0:e7:62:ca:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:28:41:D8:35:3D:62:93:75:C4:D9:3E:C3:FB:D2:79:16:F2:B1:F5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fChB2DU9YpN1xNk-w_vSeRbysfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.81.241.0/24
45.144.153.0/24
94.156.11.0/24
141.98.1.0/24
193.149.2.0/23
Signature Algorithm: sha256WithRSAEncryption
94:fd:89:30:75:7c:d2:20:26:8e:83:1c:8a:55:e8:8a:f6:e9:
6f:e2:8e:38:d7:ec:5d:23:6c:f2:09:c5:a0:e8:ee:00:34:c6:
48:86:8b:d2:be:4d:e2:9c:83:78:ee:52:29:52:d1:1f:2f:94:
f5:ba:fc:e4:e5:9e:00:1b:54:d3:73:95:cf:4a:db:19:d3:8d:
62:22:bb:f7:70:02:50:69:c5:12:10:29:c4:18:0f:b2:b6:01:
e1:37:29:40:22:98:33:ac:28:59:22:f9:f1:fd:90:ac:7e:3a:
8e:23:e0:d6:6a:d2:f5:16:b5:bf:da:95:d2:9d:d3:66:07:36:
3e:fd:8d:5b:40:21:c0:af:47:10:54:e6:13:e2:82:ac:d1:e2:
45:a5:2e:85:73:a5:97:a6:d2:d7:0d:44:b2:ce:45:dd:93:3e:
0a:53:37:3c:ba:da:b9:1b:d1:19:c0:81:9a:de:60:af:2e:0e:
6a:fc:53:b9:e8:76:11:20:d0:92:a0:6b:6a:05:43:13:48:09:
6c:cb:b6:33:81:15:dc:22:58:b1:2d:19:7e:8a:09:33:ab:67:
d6:58:6e:66:bd:bd:d0:01:5e:b5:4c:7e:3a:cc:84:d7:77:eb:
68:fa:39:be:bb:b4:e7:94:9d:dd:f9:00:93:5b:97:45:58:fd:
eb:e1:89:32
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAY3NXglyMoaQYcrcpS3IOtMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMjIxMjAzMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzI4NDFkODM1M2Q2MjkzNzVjNGQ5M2VjM2ZiZDI3OTE2ZjJiMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWV7YuZwI2nz1tlXalxeFgxWTs/H
Tv25Ton7nJO8oXSw94h0K4qb9Gy01ZU0LCKZ5GI0g0/BYR7PtB+/mG3C0KxzoRBF
EhsRyEpgYf6vfLpaQG3Z1FhgsoJAEZ8HnMF775f3c0hYBg2QUKihP3XEK7bcM1f7
rp3UOuKJLYVLnOzvdOUOwCu6QZ8nIeFtTuM5GFnnWrGVwPk2LRAqtJjwVCCkmcp1
wDTOp/FGL49L7d7JC+FdLnH2UeS5+vG6Gfb7FQdK/yIw2/CAnNxi1BtY6IP4L6E1
XOTL9TGoJDq/KdGOGJ1w6upqLTXk4vj6r7Qc/NfTrYoDuqHxGtDnYsoVtwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFHwoQdg1PWKTdcTZPsP70nkW8rH1MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZkNoQjJEVTlZcE4xeE5rLXdfdlNlUmJ5c2ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCJd14AwQA
LVHxAwQALZCZAwQAXpwLAwQAjWIBAwQBwZUCMA0GCSqGSIb3DQEBCwUAA4IBAQCU
/YkwdXzSICaOgxyKVeiK9ulv4o441+xdI2zyCcWg6O4ANMZIhovSvk3inIN47lIp
UtEfL5T1uvzk5Z4AG1TTc5XPStsZ041iIrv3cAJQacUSECnEGA+ytgHhNylAIpgz
rChZIvnx/ZCsfjqOI+DWatL1FrW/2pXSndNmBzY+/Y1bQCHAr0cQVOYT4oKs0eJF
pS6Fc6WXptLXDUSyzkXdkz4KUzc8utq5G9EZwIGa3mCvLg5q/FO56HYRINCSoGtq
BUMTSAlsy7YzgRXcIlixLRl+igkzq2fWWG5mvb3QAV61TH46zITXd+to+jm+u7Tn
lJ3d+QCTW5dFWP3r4Yky
-----END CERTIFICATE-----
Generated at Fri Mar 8 21:08:31 2024 by rpki-client on console-ams.rpki-client.org