Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zPnG3TPWlutOgQY0hF3mDA4027k.roa
File: zPnG3TPWlutOgQY0hF3mDA4027k.roa (raw, json)
Hash identifier: njIvi/+ybCfCARLbEANWMiRLlsOSz5/yymrqcjL2cUk=
Subject key identifier: CC:F9:C6:DD:33:D6:96:EB:4E:81:06:34:84:5D:E6:0C:0E:34:DB:B9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01904F0967DCAB4921150E9055C9EDA6E710
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zPnG3TPWlutOgQY0hF3mDA4027k.roa
Signing time: Tue 25 Jun 2024 10:55:34 +0000
ROA not before: Tue 25 Jun 2024 10:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.88.64.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.162.0/24 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 08:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:09:67:dc:ab:49:21:15:0e:90:55:c9:ed:a6:e7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 25 10:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccf9c6dd33d696eb4e810634845de60c0e34dbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9c:6b:db:c9:1b:84:f7:ce:a6:76:4d:57:51:
c7:cd:57:c2:f0:2a:12:c6:7c:1a:a2:44:b7:83:51:
c8:ff:14:2d:dd:53:cf:46:2c:9f:fb:16:0c:bf:7d:
ae:40:19:77:73:9d:84:64:87:b9:8a:31:43:cd:00:
73:bb:30:fe:3c:e9:02:f3:0a:62:7e:3a:b5:37:4b:
a4:8e:82:39:20:54:4d:05:42:e1:e5:b8:72:8c:db:
52:65:4e:84:13:5e:ec:d7:f0:45:6a:cd:24:06:33:
c3:c5:3a:7a:76:85:22:01:62:ab:b3:59:67:c2:25:
55:3c:b9:26:78:ee:8d:4a:cd:1b:3a:fb:7f:74:52:
ee:0e:a5:37:17:61:47:0f:82:74:07:6f:57:93:f4:
0f:e1:01:21:a0:d4:30:41:ca:bb:14:db:1b:14:11:
a4:b7:98:3e:8a:c6:7a:42:16:bd:15:07:35:7b:7b:
0d:5c:54:38:7f:45:e7:a8:0f:4e:4c:f1:5b:3d:13:
20:23:4b:48:32:a8:46:b0:9e:d9:44:ef:aa:ad:ac:
d2:09:65:fa:f5:1b:85:a9:18:d0:0d:c7:e7:b7:5d:
b6:61:22:c5:2c:56:98:9c:ce:aa:50:02:fa:4f:4b:
30:2e:d3:ac:1a:dc:8a:9f:e3:a0:32:ab:3e:ed:64:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F9:C6:DD:33:D6:96:EB:4E:81:06:34:84:5D:E6:0C:0E:34:DB:B9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zPnG3TPWlutOgQY0hF3mDA4027k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.88.64.0/24
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.149.243.0/24
45.151.88.0/23
82.115.211.0/24
83.219.97.0/24
84.21.174.0/23
87.120.33.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
185.222.162.0/24
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
72:63:da:bf:ef:e6:d4:70:55:57:ac:4e:60:13:79:cf:23:9b:
69:44:bf:f1:d3:d1:1e:98:88:6a:86:11:ec:17:82:45:7c:6c:
a5:ce:36:fd:93:c9:75:eb:5e:e8:2c:f1:d0:25:0f:97:8f:81:
ec:72:8c:2c:b5:a4:7f:e0:bc:de:32:8a:56:78:c6:ac:ec:3d:
ad:99:bb:32:07:e9:03:97:2f:ce:6d:08:b2:62:d8:75:b7:7c:
0b:77:ab:f7:d9:3a:8a:96:c9:10:3f:89:ed:03:b8:40:a1:a8:
9b:ad:e1:7d:67:b8:f4:e9:3a:c5:56:19:30:91:bb:72:85:69:
6d:0f:32:87:64:6b:20:a4:1a:3a:ec:14:c7:0d:c4:4c:d1:1f:
0c:f9:a7:2e:4d:14:f1:9a:af:d4:c6:57:4b:8b:17:77:25:97:
7f:f7:84:b2:4d:c6:f1:20:65:9a:85:22:28:be:23:9d:bc:e6:
b4:d3:90:77:77:c4:5b:6b:43:e8:53:5b:89:a0:d9:e9:c3:e6:
8f:7d:c0:f5:bb:03:90:57:59:cd:2f:02:58:e9:4f:c4:84:f2:
74:17:76:41:7e:f8:ee:c6:80:80:3e:d3:1c:95:b1:b8:b9:2f:
13:ba:4d:9e:f9:28:ec:f7:37:3c:81:83:69:fc:ed:c9:90:c4:
22:cb:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:54:48 2024 by rpki-client on console-fra.rpki-client.org