Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zOujWQYiAh6XYALn2KS1QjuJpbs.roa
File: zOujWQYiAh6XYALn2KS1QjuJpbs.roa (raw, json)
Hash identifier: VEcjp5B9+UYm/oK7gmM9GyU8WRQHicnSe9v9joPFeC4=
Subject key identifier: CC:EB:A3:59:06:22:02:1E:97:60:02:E7:D8:A4:B5:42:3B:89:A5:BB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190FD81DE71265CF773AC7A5F59A0A6FDE2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zOujWQYiAh6XYALn2KS1QjuJpbs.roa
Signing time: Mon 29 Jul 2024 08:01:05 +0000
ROA not before: Mon 29 Jul 2024 08:01:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.58.95.0/24 maxlen: 24
45.8.92.0/24 maxlen: 24
45.88.90.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
84.54.48.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.38.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
93.123.39.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.35.18.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
195.178.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 10:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:81:de:71:26:5c:f7:73:ac:7a:5f:59:a0:a6:fd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 29 08:01:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cceba3590622021e976002e7d8a4b5423b89a5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:d4:86:8e:bc:e2:99:ef:2b:84:19:55:f6:
c5:3d:ae:5e:62:96:68:28:18:30:21:dd:8b:d0:58:
7a:3d:ed:b2:53:a1:fd:aa:d3:dd:f3:a9:ca:65:b2:
d4:47:16:cf:d5:be:fb:0a:37:3f:c2:ef:f7:ba:3c:
11:1d:2a:e1:71:15:7a:e7:70:68:2f:77:18:4e:12:
08:bf:69:50:0d:70:81:80:37:ea:72:73:4d:a4:57:
11:15:f1:3b:a3:5f:c6:78:a1:d6:cb:ba:01:a3:67:
2c:5e:4c:e5:26:05:07:c8:cf:04:da:4d:a7:26:47:
4d:d9:08:30:0e:b6:e0:36:ec:27:78:ec:dd:ba:5d:
1c:c3:12:0b:4c:98:75:e2:5d:05:88:5d:40:cc:ea:
fa:4d:5a:98:6b:8a:01:5e:9a:6c:24:5d:46:8e:5c:
df:1c:c5:06:38:35:8f:c0:e6:cf:ce:16:db:12:1f:
e4:cb:bd:1f:b5:3d:7d:44:b9:ad:e3:5a:70:ff:9c:
d1:7e:35:7f:9f:c8:11:8b:50:62:78:d8:9a:f5:94:
04:78:68:1e:df:9b:49:34:55:9b:2c:a3:d6:af:e5:
c4:b9:81:f5:90:3c:2d:6f:e6:67:30:81:c5:85:dd:
40:a1:1b:51:f0:f2:6f:b1:6c:17:7f:5d:cf:d6:73:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EB:A3:59:06:22:02:1E:97:60:02:E7:D8:A4:B5:42:3B:89:A5:BB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zOujWQYiAh6XYALn2KS1QjuJpbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
45.8.92.0/24
45.88.90.0/24
45.128.96.0/24
45.128.232.0/24
45.144.154.0/24
45.151.89.0/24
80.76.51.0/24
81.161.238.0/24
83.219.97.0/24
84.21.174.0/23
84.54.48.0/24
84.54.51.0/24
85.31.47.0/24
87.120.87.0/24
87.121.38.0/24
87.121.45.0/24
87.121.58.0/24
87.121.69.0/24
87.121.221.0/24
91.92.16.0/24
92.119.196.0/23
93.123.39.0/24
94.103.124.0/23
94.154.160.0/22
94.156.2.0/24
94.156.8.0/24
94.156.10.0/23
94.156.79.0/24
109.206.237.0/24
141.98.1.0/24
141.98.4.0/24
147.78.102.0/23
171.22.72.0/22
178.215.224.0/24
185.216.70.0/24
185.216.84.0/22
185.218.84.0/22
193.35.18.0/24
193.37.41.0/24
193.37.44.0/24
193.222.96.0/24
194.48.251.0/24
194.55.224.0/24
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:20:4e:06:78:b7:49:58:2b:c3:84:41:1b:dd:bc:bc:07:47:
b8:33:5e:24:80:19:ad:ab:88:3e:ff:7f:1f:f0:a8:af:23:b8:
9c:1b:5c:a0:05:63:29:11:87:82:4d:70:d5:cb:ac:5e:b6:5b:
f0:d6:d5:31:7d:23:70:62:bb:7e:bd:f7:cc:8e:54:dc:fd:52:
56:ec:61:52:15:01:cc:51:1c:f5:5a:fb:4a:e6:ab:09:8b:f2:
bc:2c:b2:30:65:28:5f:70:4e:d4:fb:4e:c1:03:a0:27:ab:92:
b4:85:9b:40:12:30:e5:dc:d5:f1:95:bc:6b:f9:bc:31:aa:c6:
0b:d4:40:44:40:f1:c4:66:e1:19:2c:9e:d9:73:34:8c:f6:0b:
ac:4f:0c:bf:80:f7:21:2a:00:4a:2e:33:94:1f:38:27:ef:e6:
7e:bc:46:e4:9d:51:6b:b1:3a:bc:5c:de:81:29:08:e8:0b:c1:
8a:ef:1f:23:18:78:1a:7e:36:0c:aa:18:23:a7:76:a0:f6:42:
58:30:3a:a0:62:48:7c:c9:f1:e3:38:83:98:da:45:07:65:bf:
45:d6:7a:b9:d5:af:79:fb:58:fa:e5:ca:84:de:35:42:ea:ae:
17:18:ee:27:dd:1b:c5:46:b1:bb:21:a3:c8:6c:ce:5a:93:b6:
b1:8e:41:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 12:11:53 2024 by rpki-client on console-fra.rpki-client.org