Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gqilWbX_vDkzGpcHJ6luEqUpHxI.roa
File: gqilWbX_vDkzGpcHJ6luEqUpHxI.roa (raw, json)
Hash identifier: Y1usTC9gimnDHz8yxXwShXmH9wVDmBieWsPdrSi5MHw=
Subject key identifier: 82:A8:A5:59:B5:FF:BC:39:33:1A:97:07:27:A9:6E:12:A5:29:1F:12
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FF1FEF106EE4B4A325C9639DF40756C88
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gqilWbX_vDkzGpcHJ6luEqUpHxI.roa
Signing time: Fri 07 Jun 2024 09:19:27 +0000
ROA not before: Fri 07 Jun 2024 09:19:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 07:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f1:fe:f1:06:ee:4b:4a:32:5c:96:39:df:40:75:6c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 7 09:19:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82a8a559b5ffbc39331a970727a96e12a5291f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:64:83:1c:fa:85:5d:ce:2f:45:b3:b7:f3:
15:88:76:f4:5f:d0:6e:1b:19:ee:82:31:36:3d:f7:
41:4f:13:0e:7e:95:e3:d1:8f:1f:8c:16:b6:35:85:
3f:da:b8:3c:2b:e7:2a:fe:1b:a0:c1:8f:b5:ac:38:
04:e7:c1:df:93:80:39:e4:f8:17:f8:84:d8:2f:63:
5b:4e:ca:15:39:72:51:ce:3a:ba:2c:14:7a:97:1a:
4c:b2:ff:f2:5b:16:ef:96:1d:69:68:88:26:11:01:
86:af:b1:ae:4d:d6:7c:1e:a1:97:17:78:c9:64:3f:
09:29:8f:f1:31:0b:1a:03:2d:fb:1c:8f:4b:46:18:
74:ae:15:40:d9:08:af:bc:0f:e2:b8:da:e3:d1:ce:
51:12:04:50:79:1e:aa:5b:ad:e8:d0:be:c9:4b:0f:
7e:ce:9b:30:c8:27:f9:25:de:0f:2f:61:b8:28:34:
98:3d:5b:cb:6b:22:f1:be:53:0f:35:ac:01:76:84:
1c:ec:68:c9:76:59:ad:97:30:0c:3c:97:86:0d:97:
a2:e9:55:27:e3:2b:73:69:47:5f:47:24:82:57:d8:
a2:e6:99:fe:29:9d:29:b0:74:8f:31:59:20:05:e8:
c1:6a:ac:ba:d6:a2:4c:c3:7d:99:f3:2a:a0:84:df:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A8:A5:59:B5:FF:BC:39:33:1A:97:07:27:A9:6E:12:A5:29:1F:12
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gqilWbX_vDkzGpcHJ6luEqUpHxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.81.241.0-45.81.242.255
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
84:56:07:4f:d1:5d:b7:73:4b:30:18:8e:d3:88:4a:a6:c7:8f:
0d:1e:de:f8:8e:3e:aa:f9:4e:b5:48:24:38:4a:79:a7:cb:9b:
2a:3d:45:57:fd:1a:05:e7:bf:bc:d7:bf:4e:e4:87:71:16:45:
6a:ab:8d:f6:94:fe:1e:fd:89:80:e4:27:cf:48:01:e5:ac:ed:
0d:6f:e0:cd:06:26:cd:3b:a2:61:af:a9:01:b0:e2:d5:5a:b8:
b6:7d:81:c1:f8:d4:4b:0d:8f:91:a7:57:34:83:20:92:da:04:
a6:33:80:e1:03:d6:f3:43:34:f0:17:a1:cd:8f:2e:e2:0d:ab:
c4:a9:a2:2d:2d:29:91:8f:8f:c7:d9:89:91:98:6d:08:27:f2:
51:9c:ef:fe:6f:ab:4d:fb:ae:ed:c8:28:af:d5:b2:a5:a6:f1:
63:5d:18:a7:8f:1d:38:00:a5:cf:c8:8b:07:50:ed:dc:fe:07:
89:3e:3a:c2:da:91:24:03:03:fb:4a:f5:c8:36:e6:a4:d8:99:
bb:67:86:72:62:3e:10:35:50:4c:01:7b:91:67:26:5f:19:81:
d4:6f:c6:34:56:c9:4a:40:52:fa:8f:41:71:5f:e1:b4:22:6a:
f9:b0:a3:17:a4:4a:17:88:16:25:e8:9c:8e:8d:76:8b:d8:82:
46:ef:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 10:55:56 2024 by rpki-client on console-fra.rpki-client.org