Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Fwj1YiC1hM_H5wzb7F6pBV7UTro.roa
File: Fwj1YiC1hM_H5wzb7F6pBV7UTro.roa (raw, json)
Hash identifier: anL/1tADH46SjZU1wv1wn7olR9u8eoKVt5AEtjqmCLQ=
Subject key identifier: 17:08:F5:62:20:B5:84:CF:C7:E7:0C:DB:EC:5E:A9:05:5E:D4:4E:BA
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0190C2D1989E21719324BFCEE96DFA7182CD
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Fwj1YiC1hM_H5wzb7F6pBV7UTro.roa
Signing time: Wed 17 Jul 2024 22:30:34 +0000
ROA not before: Wed 17 Jul 2024 22:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 24 Jul 2024 11:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c2:d1:98:9e:21:71:93:24:bf:ce:e9:6d:fa:71:82:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jul 17 22:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1708f56220b584cfc7e70cdbec5ea9055ed44eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:de:46:03:8f:3d:25:11:e3:3d:1a:33:2f:
f6:ea:13:a1:ad:ad:a3:50:6a:b2:e6:a4:d9:4a:0f:
a5:3b:79:4a:10:9c:d7:21:c0:1e:49:1b:88:ff:78:
bf:8a:0a:56:b4:d4:b6:7a:73:53:f5:4f:48:bc:e9:
b5:9f:a6:c6:1c:10:a2:47:3e:7d:44:fc:8e:f8:76:
27:b3:1d:e5:a2:fa:6c:e2:fc:02:00:5c:34:d5:ad:
6d:ad:c0:16:6c:7a:bf:24:2b:6d:86:8e:82:41:60:
b6:09:08:1c:d0:b9:a8:67:0a:51:43:39:7a:a2:4c:
d1:9d:27:42:31:97:c9:14:67:5a:00:01:0a:6f:df:
84:1f:25:22:82:7f:4b:33:66:83:6d:bb:4a:f6:37:
74:96:4a:93:35:0b:fe:d5:a3:be:48:71:a5:1a:e5:
56:f9:8b:ab:06:1e:f4:d8:22:a3:b5:5f:72:1a:13:
1c:2a:d1:7a:08:ad:72:ed:30:a7:4e:57:6d:e5:23:
9d:1a:be:28:07:dd:34:44:83:7c:fb:f8:73:73:c3:
c8:21:56:c2:a3:f7:67:2a:d6:53:f6:65:dc:3d:de:
67:7a:e6:0a:fe:22:65:3e:2b:4c:6d:67:e2:70:a2:
20:44:2d:55:e2:31:94:d9:48:ee:8d:f8:82:bc:2d:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:08:F5:62:20:B5:84:CF:C7:E7:0C:DB:EC:5E:A9:05:5E:D4:4E:BA
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Fwj1YiC1hM_H5wzb7F6pBV7UTro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/21
IPv6:
2a09:7c40::/29
2a11:3805::/32
2a11:3c02::/31
2a14:2d80::/30
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
4a:03:4d:a8:44:58:48:67:15:c7:ae:0c:c7:8f:2f:16:f8:ab:
f4:77:5b:92:a3:f3:73:cb:57:65:72:8c:27:aa:44:90:02:c1:
8f:82:57:b6:81:83:33:47:9a:3a:77:b7:ef:b6:21:41:73:e1:
70:da:20:c7:e6:d0:81:4f:c9:a0:97:a1:13:a1:32:8e:e2:30:
1b:a1:a4:eb:48:b4:27:6f:48:3e:a7:4c:8d:bc:fd:da:69:ff:
7f:d9:6a:f4:70:31:37:f9:b6:5b:63:dc:11:54:4f:4f:6a:33:
38:5b:74:ae:f1:a0:82:4c:ea:28:46:b0:9a:75:78:cd:6a:85:
a4:d2:52:72:12:08:50:13:b4:e6:64:5b:01:12:82:8c:ba:d2:
fc:22:70:6a:bc:77:fd:2f:63:05:8d:f4:51:77:a6:80:aa:2a:
8f:22:f9:7f:2a:9e:b2:fd:2c:f6:b7:55:01:d0:62:25:0c:18:
75:bd:54:68:49:ce:88:75:a1:c1:13:b2:4c:4a:e9:a5:30:de:
ec:22:6b:9a:5b:95:9e:87:41:3c:60:96:90:71:29:9e:ca:f2:
6d:bf:9d:13:9a:5a:b4:df:b9:d4:78:33:b1:8d:4d:9e:fa:d2:
39:fa:03:08:cb:dc:a1:69:df:67:87:f7:e2:26:7a:a3:b7:93:
23:11:79:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 15:53:33 2024 by rpki-client on console-ams.rpki-client.org