Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pFzWPZHJwnGyiywLEbYZASqkuws.roa
File: pFzWPZHJwnGyiywLEbYZASqkuws.roa (raw, json)
Hash identifier: 0qSYNwuvBJTY4NHfsi+bmVmrz4kD2PISU26rzjcusK0=
Subject key identifier: A4:5C:D6:3D:91:C9:C2:71:B2:8B:2C:0B:11:B6:19:01:2A:A4:BB:0B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D0DC74B513A5188D53DF28CB3983AB54A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pFzWPZHJwnGyiywLEbYZASqkuws.roa
Signing time: Mon 15 Jan 2024 15:39:41 +0000
ROA not before: Mon 15 Jan 2024 15:39:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61302
IP address blocks: 171.22.31.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
81.161.239.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
94.156.248.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
37.139.130.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 11:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:c7:4b:51:3a:51:88:d5:3d:f2:8c:b3:98:3a:b5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 15 15:39:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a45cd63d91c9c271b28b2c0b11b619012aa4bb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:73:8b:8b:ab:8a:bb:0c:38:8f:07:72:9e:c8:
5a:aa:fa:18:5a:58:13:ff:00:45:40:74:5a:c6:d3:
6b:72:ff:11:8e:f7:d8:38:ee:47:08:1a:9f:90:2d:
e5:da:3d:65:f0:69:86:c7:75:c3:32:eb:98:41:d1:
9c:0e:94:96:6e:34:20:56:c7:e5:8a:07:a6:98:ea:
e5:82:1c:5e:02:00:21:7a:0b:4e:6f:2a:b5:b0:9b:
aa:a9:a7:d5:eb:ee:63:6b:d3:54:02:1e:a3:d4:60:
e5:ff:c5:b5:ef:e6:79:75:bd:ae:9e:0f:70:97:5f:
be:d0:b1:dd:f1:fb:33:1a:b8:6a:d8:88:60:c1:ca:
c2:f7:54:91:92:fe:65:f6:d9:c2:5c:d5:ed:34:ed:
fa:9d:d5:29:63:ee:3b:cc:30:1e:61:3f:88:1c:76:
c4:6d:c8:fb:cb:ca:a3:2c:f0:49:d9:3f:ed:bb:78:
d0:9e:1c:82:92:be:60:2d:70:28:7e:4e:33:48:b3:
15:ad:c4:fe:68:f8:ed:57:06:73:57:f6:aa:7a:aa:
b2:95:73:dd:6b:e8:85:20:87:cc:3c:fe:3c:2d:59:
2a:25:ad:f2:bf:70:fb:92:3c:57:17:40:b3:8b:8f:
91:84:96:94:19:76:28:06:ae:a2:a1:2b:5f:cf:fb:
4e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5C:D6:3D:91:C9:C2:71:B2:8B:2C:0B:11:B6:19:01:2A:A4:BB:0B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pFzWPZHJwnGyiywLEbYZASqkuws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.129.84.0/24
45.141.158.0/24
79.110.61.0/24
81.161.239.0/24
82.115.210.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
94.156.248.0/24
147.78.100.0/24
171.22.17.0/24
171.22.31.0/24
193.25.216.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d1:5e:77:51:45:d5:41:3f:94:31:72:db:89:e0:a6:46:77:
d9:df:82:30:37:62:50:d3:ec:24:e7:4f:02:6d:4f:bd:1e:9c:
b0:7b:43:92:1c:fe:42:03:a9:00:41:6e:1e:2e:53:41:28:3a:
43:e7:4c:02:55:2a:27:ad:d2:3d:3e:18:a8:1d:44:ee:6e:3e:
a7:5c:16:7d:6a:e7:6d:b1:c9:25:18:ed:ca:0e:9c:24:8c:2e:
33:92:43:e6:fa:c4:c4:ed:aa:cd:58:ee:29:6f:f7:d4:3b:16:
49:7a:16:58:c9:87:f0:8a:07:0d:bc:29:1c:2a:57:a5:26:95:
61:d7:bd:ed:1b:53:6a:69:3c:97:13:8d:52:a0:62:b0:05:b6:
6d:01:22:09:5f:a2:d0:5c:72:d2:2e:7e:2c:11:9b:40:49:ef:
99:6a:7c:16:90:e2:1c:97:f7:b5:a2:c5:41:0c:97:57:38:70:
02:55:3a:c7:ea:f2:50:05:66:ef:3d:c9:02:56:62:fa:ce:3e:
57:60:ec:31:36:c1:7e:cc:3d:15:18:2a:5a:f8:7e:f5:2c:f9:
11:5e:d5:06:cb:c9:7d:68:1f:97:e6:02:92:0e:76:78:2d:2f:
57:c7:24:38:c2:3b:31:ee:80:a4:60:49:84:11:34:61:f0:a7:
33:a6:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 15:15:05 2024 by rpki-client on console-ams.rpki-client.org