Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qc01WxUwljWYj2awwt7B3kEa0x0.roa
File: qc01WxUwljWYj2awwt7B3kEa0x0.roa (raw, json)
Hash identifier: genAOU7JTqpp+/J9XaIafAFfxNDkEjy6Cj0B6962Tpg=
Subject key identifier: A9:CD:35:5B:15:30:96:35:98:8F:66:B0:C2:DE:C1:DE:41:1A:D3:1D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190C0F0090B987ABB3B7F760B8559A4EE49
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qc01WxUwljWYj2awwt7B3kEa0x0.roa
Signing time: Wed 17 Jul 2024 13:44:34 +0000
ROA not before: Wed 17 Jul 2024 13:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.16.0/24 maxlen: 24
93.123.22.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 16:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:f0:09:0b:98:7a:bb:3b:7f:76:0b:85:59:a4:ee:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 17 13:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9cd355b15309635988f66b0c2dec1de411ad31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:39:a4:62:e1:03:55:b6:aa:a1:5b:9c:2b:
4a:94:bf:48:68:97:ad:af:4e:2b:14:b1:56:85:2a:
7c:97:d7:b1:fa:dd:63:7b:fb:de:5d:5b:f0:a8:3f:
85:52:76:71:ba:b2:ea:67:76:4b:40:a7:8d:8a:a5:
71:10:f4:84:3c:85:39:59:66:ed:19:d6:3b:41:fa:
1b:6e:87:66:29:27:2c:ae:30:8b:34:04:54:4d:8f:
1d:b6:e5:d8:03:87:4e:33:c0:47:3a:34:15:32:1c:
3d:df:57:64:46:64:04:5d:ea:b1:3e:dd:b3:19:b5:
73:f5:ee:3f:8c:bc:c4:c5:38:24:9a:de:9c:cd:33:
a4:8d:38:52:40:17:0c:6f:7c:cf:42:ff:28:23:ce:
7f:49:7e:b9:15:71:d4:c8:1d:34:09:ea:f9:72:1f:
e1:65:65:0a:e8:ca:5f:15:43:83:66:c7:2c:23:79:
25:41:f1:df:e7:bd:6e:21:01:03:90:78:25:54:d8:
98:c9:c6:a3:0b:18:e5:75:60:00:69:60:f7:0d:87:
9d:0d:95:b6:5a:88:c9:ce:60:0f:3c:cb:bc:88:b0:
e2:af:e6:3e:a6:6b:67:59:fc:39:e8:7c:11:3e:bb:
f4:16:d3:f7:f0:be:c3:7d:71:12:79:be:ac:55:04:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CD:35:5B:15:30:96:35:98:8F:66:B0:C2:DE:C1:DE:41:1A:D3:1D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qc01WxUwljWYj2awwt7B3kEa0x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
85.31.47.0/24
87.120.87.0/24
87.121.38.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
93.123.16.0/24
93.123.22.0/24
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c1:f3:ab:d8:67:a4:99:fd:1c:d8:d1:e3:f0:d0:96:ce:b8:
fd:59:b6:37:fa:a4:39:88:9c:dd:c1:18:62:81:e8:04:33:0e:
23:d8:03:67:ad:0f:df:44:76:16:a6:26:e3:1f:4f:74:40:fe:
66:07:36:0f:01:2e:e3:b9:37:8e:45:39:13:52:db:93:ca:46:
23:75:7c:2d:7f:0c:aa:70:eb:f5:89:c9:07:55:79:51:14:de:
ec:7f:b0:5c:ce:a5:7b:b2:ea:b6:93:1c:3f:17:90:9d:f2:3a:
dd:9e:37:64:24:9a:d6:3d:d3:1c:5c:fc:45:f8:6f:57:0d:7f:
fd:74:55:f6:5a:82:bb:e6:44:d3:bf:55:70:d0:92:ef:f0:48:
05:98:90:23:56:77:fd:f0:c1:5e:03:e9:92:b4:74:05:60:d3:
59:57:44:bb:a2:fa:06:a6:af:03:27:4e:79:66:2f:67:58:62:
b3:06:96:c2:1f:14:19:9b:ce:75:b4:f7:61:51:d1:e7:dc:cc:
03:ca:b0:b0:40:9b:34:35:77:be:72:91:b9:a7:ed:81:39:9a:
33:6d:ce:08:f4:28:0c:a8:7e:f8:0e:69:f2:9c:ac:fc:0c:5e:
b0:5c:0a:bb:56:f7:b9:c3:94:3f:b5:3d:03:01:4a:47:50:f6:
c8:a3:f7:fb
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgISAZDA8AkLmHq7O392C4VZpO5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNzE3MTM0NDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWNkMzU1YjE1MzA5NjM1OTg4ZjY2YjBjMmRlYzFkZTQxMWFkMzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp105pGLhA1W2qqFbnCtKlL9IaJet
r04rFLFWhSp8l9ex+t1je/veXVvwqD+FUnZxurLqZ3ZLQKeNiqVxEPSEPIU5WWbt
GdY7QfobbodmKScsrjCLNARUTY8dtuXYA4dOM8BHOjQVMhw931dkRmQEXeqxPt2z
GbVz9e4/jLzExTgkmt6czTOkjThSQBcMb3zPQv8oI85/SX65FXHUyB00Cer5ch/h
ZWUK6MpfFUODZscsI3klQfHf571uIQEDkHglVNiYycajCxjldWAAaWD3DYedDZW2
WojJzmAPPMu8iLDir+Y+pmtnWfw56HwRPrv0FtP38L7DfXESeb6sVQTnwwIDAQAB
o4IC0jCCAs4wHQYDVR0OBBYEFKnNNVsVMJY1mI9msMLewd5BGtMdMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcWMwMVd4VXdsaldZajJhd3d0N0Iza0VhMHgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHnBggrBgEFBQcBBwEB/wSB1zCB1DCB0QQCAAEwgcoDBAIl
3XgDBAAtQuUwDAMEAC1R8QMEAC1R8jAMAwQDLZCYAwQALZCaAwQALZXpAwQBLZdY
AwQAUaHuAwQAU9thAwQBVBWuAwQAVDYwAwQAVR8vAwQAV3hXAwQAV3kmAwQAV3kt
AwQAV3ndAwQBXHfEAwQAXXsQAwQAXXsWAwQCXpqgAwQAXpwLAwQAXpxOAwQAjWIB
AwQAk05mAwQAqxYRAwQCqxZIAwQAstfgAwQCudhUAwQCudpUAwQBwSogAwQBwZUC
AwQAwjfgMA0GCSqGSIb3DQEBCwUAA4IBAQAQwfOr2Gekmf0c2NHj8NCWzrj9WbY3
+qQ5iJzdwRhigegEMw4j2ANnrQ/fRHYWpibjH090QP5mBzYPAS7juTeORTkTUtuT
ykYjdXwtfwyqcOv1ickHVXlRFN7sf7BczqV7suq2kxw/F5Cd8jrdnjdkJJrWPdMc
XPxF+G9XDX/9dFX2WoK75kTTv1Vw0JLv8EgFmJAjVnf98MFeA+mStHQFYNNZV0S7
ovoGpq8DJ055Zi9nWGKzBpbCHxQZm851tPdhUdHn3MwDyrCwQJs0NXe+cpG5p+2B
OZozbc4I9CgMqH74DmnynKz8DF6wXAq7Vve5w5Q/tT0DAUpHUPbIo/f7
-----END CERTIFICATE-----
Generated at Wed Jul 17 19:33:29 2024 by rpki-client on console-fra.rpki-client.org