Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fju3r3JbKHfC_5l5SdH5codpct8.roa
File: fju3r3JbKHfC_5l5SdH5codpct8.roa (raw, json)
Hash identifier: ocL2OI1mWIcjuG2BtxVjkjU31gj8RbH3V6Jhybiq4rk=
Subject key identifier: 7E:3B:B7:AF:72:5B:28:77:C2:FF:99:79:49:D1:F9:72:87:69:72:DF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192D6CF86075AAF436744C2E628AC86749D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fju3r3JbKHfC_5l5SdH5codpct8.roa
Signing time: Tue 29 Oct 2024 05:46:17 +0000
ROA not before: Tue 29 Oct 2024 05:46:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 31.169.124.0/22 maxlen: 24
37.139.128.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.128.99.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.16.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 07:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d6:cf:86:07:5a:af:43:67:44:c2:e6:28:ac:86:74:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 29 05:46:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e3bb7af725b2877c2ff997949d1f972876972df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:38:0e:04:92:b1:42:9a:66:00:10:4e:2d:
9c:ec:8f:68:ad:15:28:26:31:0a:07:72:29:31:30:
58:80:ba:63:40:72:7c:b4:7e:fb:2a:3d:eb:9e:d3:
98:99:bf:fc:0f:e2:4e:3f:81:ef:f5:f0:98:16:4b:
5e:bd:55:05:50:6a:a9:97:c9:13:f8:22:1e:a3:85:
77:59:ff:68:11:eb:93:4f:38:82:e0:ef:c4:b3:98:
88:e4:2e:1c:3a:01:cc:c9:2f:dd:ec:7a:83:88:64:
0b:54:19:0b:7c:59:5d:fc:ae:45:e3:ab:b8:75:81:
fc:4d:a9:51:d2:b1:48:19:c6:35:5d:55:67:8a:08:
67:60:3f:d3:ac:ad:95:1e:1c:f4:41:2d:b8:c0:3c:
ab:ea:99:e6:46:ae:d7:40:31:7c:6b:9b:a9:c0:4e:
56:7b:a4:69:60:10:04:1a:e1:47:ea:b8:96:f9:d4:
78:b6:5b:cd:22:2a:f7:53:40:8a:72:68:14:1c:c4:
94:37:48:85:cf:ae:c8:04:46:01:70:61:d7:e5:42:
ed:09:ae:cf:37:b6:7d:24:d6:70:f8:7f:a2:89:98:
83:8e:2b:37:9a:8b:98:35:f2:e3:19:61:a5:e3:23:
e0:08:c9:06:d0:f5:72:2a:bc:ef:c2:2d:1b:fe:57:
69:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3B:B7:AF:72:5B:28:77:C2:FF:99:79:49:D1:F9:72:87:69:72:DF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fju3r3JbKHfC_5l5SdH5codpct8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
37.139.128.0/24
45.88.66.0/24
45.128.99.0/24
45.128.234.0/23
79.110.63.0/24
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
91.92.21.0/24
94.156.236.0/24
109.206.240.0/24
109.206.243.0/24
171.22.16.0/24
171.22.19.0/24
171.22.30.0/24
185.207.14.0/23
185.218.138.0/24
185.246.220.0/23
185.252.179.0/24
193.47.60.0/23
193.148.56.0/22
Signature Algorithm: sha256WithRSAEncryption
38:3e:0e:7f:60:97:f8:02:a4:91:2b:47:7d:7c:43:26:b4:ef:
ee:d9:8e:a4:0d:28:c0:55:e1:88:14:44:3f:4b:e0:03:a5:ef:
f2:95:02:62:b2:66:b1:2b:84:19:76:d9:62:47:43:4f:a2:1a:
c4:6d:bf:82:b2:1b:76:1e:85:0c:9d:dc:a9:bb:17:25:18:24:
e1:eb:20:e0:5c:8e:d0:19:b2:2a:d6:28:f1:6c:c7:f6:a1:f0:
50:1d:bc:88:f8:ee:ec:82:e2:b4:0a:26:e7:59:06:fb:3e:c7:
00:8a:61:df:ed:b4:57:33:ab:76:5d:96:ae:44:de:91:3d:7e:
43:91:62:d0:08:d7:80:37:7d:56:c1:0f:ee:a3:06:9e:87:6e:
14:4b:ef:fb:1c:d8:a6:9b:85:61:17:29:5a:73:b4:5b:92:09:
28:26:98:55:ac:a6:17:ec:de:f6:cf:29:5f:ec:9e:99:33:74:
34:d7:4b:04:18:a9:7d:d9:89:10:cc:e2:2b:b5:ad:51:c9:b2:
74:60:47:9c:43:b7:c5:de:8b:47:5a:cf:db:43:0a:f9:49:41:
7c:ff:e1:90:91:08:b9:07:16:66:c1:67:a1:06:7c:fc:9c:90:
7f:b4:2f:52:a4:ba:52:ee:03:20:8a:83:8d:d3:66:b8:8d:4b:
83:85:00:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 08:42:07 2024 by rpki-client on console-ams.rpki-client.org