Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/feSSs0ULSM4Q4roRhWLhG0znatg.roa
File: feSSs0ULSM4Q4roRhWLhG0znatg.roa (raw, json)
Hash identifier: S/jcEYs3XNfxKR2wg9P7LvYS5nYoWD4NCLKXTVnUcfM=
Subject key identifier: 7D:E4:92:B3:45:0B:48:CE:10:E2:BA:11:85:62:E1:1B:4C:E7:6A:D8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193297BA8F3A087C4CCF1F58AA60DB625DB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/feSSs0ULSM4Q4roRhWLhG0znatg.roa
Signing time: Thu 14 Nov 2024 07:03:10 +0000
ROA not before: Thu 14 Nov 2024 07:03:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 31.169.124.0/22 maxlen: 24
37.139.128.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.16.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:7b:a8:f3:a0:87:c4:cc:f1:f5:8a:a6:0d:b6:25:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 14 07:03:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7de492b3450b48ce10e2ba118562e11b4ce76ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:35:f3:d7:b7:b5:51:71:f8:85:7f:21:2f:c6:
81:bf:dc:00:07:39:cf:ac:fd:d5:20:2f:b4:5a:f6:
50:90:9a:e4:ce:9e:da:08:87:cd:f8:7e:b3:17:5a:
a3:83:1f:ad:c8:42:d5:cb:9e:23:2a:4e:18:db:cd:
b9:cf:75:49:f3:9a:c2:2f:e6:04:7e:74:e9:65:1a:
6b:5e:5d:f6:80:5d:ab:a3:e3:98:f4:21:ba:56:92:
d4:30:3c:8e:12:70:b7:5c:5e:18:b6:a4:e1:e0:d3:
57:7a:be:9c:9e:0e:21:b5:0d:d6:bb:98:a5:ba:f4:
e2:fe:e4:f6:8a:41:fa:d2:7e:9a:66:55:fc:01:01:
a7:97:b6:77:36:75:a4:a7:85:a2:ff:7d:c5:dd:83:
73:8e:86:3e:b1:be:0f:69:cf:7a:63:11:21:b9:dc:
4f:a1:a9:8c:34:31:9f:78:9c:d7:f7:e2:4e:52:ff:
9a:ba:85:28:2e:93:b1:fb:b3:51:77:e1:07:4e:c4:
a3:4d:74:90:2b:65:40:af:2e:c7:78:10:6a:69:c6:
cc:40:2e:ad:7f:f9:aa:3c:cc:55:c6:77:bb:bc:ad:
48:eb:90:28:9b:90:47:2c:d0:f7:f9:e8:e7:ac:a7:
49:9b:49:1b:38:46:a6:74:80:b8:2b:56:9c:49:bd:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E4:92:B3:45:0B:48:CE:10:E2:BA:11:85:62:E1:1B:4C:E7:6A:D8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/feSSs0ULSM4Q4roRhWLhG0znatg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
37.139.128.0/24
45.88.66.0/24
45.128.234.0/23
79.110.63.0/24
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
91.92.21.0/24
94.156.236.0/24
109.206.240.0/24
109.206.243.0/24
171.22.16.0/24
171.22.19.0/24
171.22.30.0/24
185.207.14.0/23
185.218.138.0/24
185.246.220.0/23
185.252.179.0/24
193.47.60.0/23
193.148.56.0/22
Signature Algorithm: sha256WithRSAEncryption
32:9c:ab:f9:05:90:c8:ce:fb:63:12:5a:53:7c:52:dd:b8:48:
62:8f:74:86:2d:29:ee:cb:bd:ba:5e:6e:fd:d6:b6:dd:58:94:
c4:1e:7e:ea:ff:51:40:ea:16:62:a5:8c:aa:09:54:d9:00:4c:
70:4f:14:81:dc:8d:54:ce:ba:c6:19:9e:eb:63:0b:d2:93:70:
f5:2c:bb:7b:54:1a:67:29:fd:89:a6:b8:8a:d7:18:c9:b8:30:
01:55:82:b3:4e:84:00:77:50:8d:27:ce:1b:a0:73:22:19:a4:
fd:17:06:9b:55:ae:9e:85:05:71:75:96:23:20:ed:20:c2:54:
25:14:25:30:97:2a:ff:9b:34:00:92:4e:73:32:38:10:c1:fc:
ae:3d:0b:8f:f6:f2:fb:36:bc:74:ef:00:85:91:8a:e4:78:a4:
f0:2e:da:ef:ac:be:45:46:20:fc:b2:0b:b3:ad:95:16:d6:c9:
2b:79:ea:de:f1:ee:60:57:e7:be:dd:08:a8:4e:c0:0c:48:59:
9a:82:28:a7:2c:24:bc:91:d9:80:61:ec:6a:16:0b:f5:e4:a0:
72:40:4e:54:cf:d1:c1:f0:a2:63:c5:0e:a1:43:49:7c:d4:d6:
1d:9b:20:8b:ed:6b:75:2d:50:c3:ec:36:8a:e0:ed:ce:00:74:
3f:a3:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:37 2025 by rpki-client