Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y3-_lJsjYYP6OWu4PwtxzU2ymtY.roa
File: y3-_lJsjYYP6OWu4PwtxzU2ymtY.roa (raw, json)
Hash identifier: dEELnOh9JJqIAXlRdat220YYmVmM8a3a5ZfvpBdeJ68=
Subject key identifier: CB:7F:BF:94:9B:23:61:83:FA:39:6B:B8:3F:0B:71:CD:4D:B2:9A:D6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190A63BCC5A16D621B2F3EEC286059AC2CA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y3-_lJsjYYP6OWu4PwtxzU2ymtY.roa
Signing time: Fri 12 Jul 2024 09:17:34 +0000
ROA not before: Fri 12 Jul 2024 09:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 31.13.198.0/24 maxlen: 24
37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 11:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:3b:cc:5a:16:d6:21:b2:f3:ee:c2:86:05:9a:c2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 12 09:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb7fbf949b236183fa396bb83f0b71cd4db29ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:f8:90:4d:af:40:df:aa:71:bb:2d:1d:13:
2a:83:14:ce:de:96:a7:76:dc:7d:38:f9:42:c9:9c:
15:50:53:a6:7c:74:d3:b4:42:6e:7c:e7:e4:c1:8f:
90:5f:30:15:79:f2:9a:ec:c0:8e:82:51:3c:41:f5:
ad:43:38:7f:6c:eb:4e:ea:d8:ae:67:78:af:c5:85:
a1:9f:68:af:4f:3c:ff:30:77:b0:f5:7b:2f:67:03:
94:d2:5b:1a:9d:0d:8b:74:9f:6f:d1:37:6d:62:79:
ce:4b:27:4d:b0:89:ee:b2:f3:77:7d:53:4f:e9:5c:
8b:58:e1:c1:4e:72:25:01:27:5c:64:b4:93:9c:42:
86:72:56:43:ea:47:fe:01:0a:f0:0d:56:5a:5a:8b:
85:1a:22:44:a6:ea:07:83:9a:28:03:ab:d0:ca:84:
10:f8:93:56:fd:9c:42:b1:40:fd:e4:9b:28:a6:86:
87:14:60:57:51:03:54:a1:43:f2:a2:29:cc:22:f8:
17:72:4d:e3:5b:cc:92:0f:3b:1a:20:8b:ac:a5:51:
a6:d8:4a:cd:98:e5:1b:21:1a:04:59:3f:7b:e5:12:
5b:cc:5c:af:07:4f:64:49:10:8a:c2:f7:22:47:c7:
78:91:d8:ca:e6:36:cb:fd:df:42:88:06:da:ea:49:
17:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7F:BF:94:9B:23:61:83:FA:39:6B:B8:3F:0B:71:CD:4D:B2:9A:D6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y3-_lJsjYYP6OWu4PwtxzU2ymtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.198.0/24
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
85.31.47.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e8:57:a0:d5:e1:45:47:c7:24:bf:f6:83:29:59:62:ce:82:
c1:51:0f:65:14:77:66:87:6c:ab:5e:b7:63:e5:d2:f3:eb:bc:
a9:52:61:08:3c:15:08:ae:17:4a:d6:25:06:19:e2:a2:b1:47:
7f:c1:cc:72:ba:8a:98:93:95:a8:e8:93:a5:06:01:0b:ad:1f:
16:62:03:1b:f7:99:12:75:02:dd:e5:d8:2a:91:9c:59:a3:b4:
f6:52:b6:7d:40:8f:35:83:61:39:5f:a6:d5:54:42:ff:22:1a:
ce:d7:c8:06:0a:9c:da:0f:2b:1d:55:eb:57:06:ab:f3:61:b9:
37:16:52:95:9f:c0:9a:bb:cd:9e:c9:eb:97:f6:a6:a9:5a:f2:
4f:37:f3:14:12:17:5b:2c:a5:2e:64:ef:34:98:7c:e6:13:d1:
e2:d8:dd:88:ac:a0:67:ad:d3:1c:a4:31:e7:ce:ad:b0:9a:86:
c6:f2:b9:a8:c3:f9:fe:dd:75:46:1c:58:42:4c:67:52:7c:63:
bf:d0:26:47:f8:0b:c2:b5:f1:83:65:dd:fa:8d:93:f4:75:06:
cd:22:4e:cd:d0:74:b1:8c:22:c2:c3:03:26:f1:0d:10:e5:e6:
03:22:9f:f1:2e:fb:ab:de:f1:03:94:b0:bf:21:20:ce:b6:c1:
e9:ae:4a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 13:01:34 2024 by rpki-client on console-fra.rpki-client.org