Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lkR3p5xE21Rgz9pObSMrK1vIXjU.roa
File: lkR3p5xE21Rgz9pObSMrK1vIXjU.roa (raw, json)
Hash identifier: XhV4fDxgb1N1XNQkX58annIX4ygqwwljHFVxSijYKjI=
Subject key identifier: 96:44:77:A7:9C:44:DB:54:60:CF:DA:4E:6D:23:2B:2B:5B:C8:5E:35
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01909B6DFBB78B7B5BEC57336C708F2D23BD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lkR3p5xE21Rgz9pObSMrK1vIXjU.roa
Signing time: Wed 10 Jul 2024 06:56:34 +0000
ROA not before: Wed 10 Jul 2024 06:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 19:10:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:6d:fb:b7:8b:7b:5b:ec:57:33:6c:70:8f:2d:23:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 10 06:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=964477a79c44db5460cfda4e6d232b2b5bc85e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:6a:2d:20:2f:94:01:22:e9:c7:9e:30:55:
11:1c:7c:33:e2:fb:04:1c:7f:1a:e3:54:32:9f:08:
e6:9b:d2:aa:7a:07:0f:fc:e2:6e:4e:34:57:6d:c8:
15:97:12:a9:d3:d0:12:36:5b:3c:1e:12:6d:06:03:
d5:ef:7e:79:10:cc:71:43:91:56:54:8c:3a:ef:c7:
b9:6c:5d:1b:d0:25:dd:e7:92:8d:75:36:c0:72:00:
cb:07:4d:39:d3:77:c6:81:13:0f:9e:3e:23:58:4b:
31:ae:6a:bf:3a:11:a6:72:80:b0:ea:0a:7b:62:c2:
02:b3:f1:11:16:c9:3c:d6:fd:ff:a2:44:32:20:3c:
d3:32:77:b2:69:d7:44:f3:d8:38:45:1c:d0:06:5e:
87:99:96:90:bc:74:ab:50:af:74:ce:75:89:86:da:
71:5a:ea:aa:de:cf:cd:4e:d8:79:e6:00:e7:23:d2:
5b:f2:2f:4b:e4:54:58:51:83:0a:da:95:84:3a:3b:
cf:13:7a:5a:2c:b9:95:d5:eb:53:f2:b4:9a:1f:1c:
98:b0:29:df:a3:6b:88:83:c9:17:67:70:7e:d0:0e:
2e:97:24:46:3a:04:03:66:8b:c1:58:ba:da:00:1d:
12:28:9e:4d:8b:5a:40:64:70:38:f7:9a:c7:21:f8:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:44:77:A7:9C:44:DB:54:60:CF:DA:4E:6D:23:2B:2B:5B:C8:5E:35
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lkR3p5xE21Rgz9pObSMrK1vIXjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:76:2a:aa:d2:03:0b:ab:14:66:08:0d:b1:c1:71:fb:eb:f5:
04:cb:3d:27:30:6b:5e:f7:a9:bd:ab:4b:96:e5:34:14:ec:ca:
d0:9b:39:1e:20:44:ef:e9:7c:60:53:53:d6:1a:8b:de:75:09:
62:f0:56:d1:82:b3:aa:3a:05:1b:7c:4c:44:19:e8:06:fc:fe:
bc:9e:de:8d:08:ad:b3:e3:ce:16:fb:cd:7e:16:c3:2b:5c:45:
14:5a:f1:fb:42:95:9e:3c:89:37:e2:5c:ae:9b:39:1c:37:1f:
21:ca:54:68:5b:90:a7:6c:73:40:ac:17:4d:40:0d:f2:1d:1d:
34:6f:9e:b1:90:57:94:97:59:b4:13:08:84:89:47:25:fb:78:
5b:fe:25:49:8f:1d:72:ea:88:0e:f4:97:77:65:4a:45:93:96:
88:05:f6:ae:6a:6e:0f:8d:f3:f9:aa:54:ab:bc:e9:a6:cc:89:
9f:8a:89:91:07:e2:e8:6b:e0:b8:3e:86:11:0e:2e:25:d6:3b:
4e:7e:dc:a6:3e:ee:fa:74:13:19:07:f4:cf:4b:9a:66:e6:21:
7f:15:1c:cf:17:cd:8d:85:f8:a8:8a:ff:28:b6:65:c1:d8:65:
67:52:5d:84:53:82:5a:08:40:74:0e:b2:3b:b4:4a:f9:d6:f8:
eb:19:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 20:25:26 2024 by rpki-client on console-fra.rpki-client.org