Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/rK7zXolhkEkhawdq4iHwb1KPdXg.roa
File: rK7zXolhkEkhawdq4iHwb1KPdXg.roa (raw, json)
Hash identifier: kKCNlO1R2zwLmZ2UIJrFr54moCcR0zr+rNyDec6x2rs=
Subject key identifier: AC:AE:F3:5E:89:61:90:49:21:6B:07:6A:E2:21:F0:6F:52:8F:75:78
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0191B69856818EE2C9758D0E33DDFEF57458
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/rK7zXolhkEkhawdq4iHwb1KPdXg.roa
Signing time: Tue 03 Sep 2024 06:35:22 +0000
ROA not before: Tue 03 Sep 2024 06:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 37.32.41.0/24 maxlen: 24
178.239.147.0/24 maxlen: 24
178.239.148.0/23 maxlen: 24
178.239.150.0/24 maxlen: 24
185.243.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Oct 2024 11:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:98:56:81:8e:e2:c9:75:8d:0e:33:dd:fe:f5:74:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 3 06:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acaef35e89619049216b076ae221f06f528f7578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:62:fb:84:6c:f5:11:d4:8d:59:4b:28:a1:
65:96:e8:1f:ee:2b:81:4f:bc:e7:1c:af:ac:b8:47:
ad:aa:fc:bd:6e:4e:49:e7:e6:da:ed:1e:94:11:5f:
c3:1b:5f:bb:cf:a7:d4:f1:09:47:ab:09:99:e4:8a:
fc:5a:81:26:6c:d6:16:fc:16:d1:6f:db:b2:06:cd:
08:c2:d8:b7:31:b2:f7:4b:47:a5:f9:a7:75:7e:2c:
cd:5e:f5:f1:40:d1:a0:22:96:2d:a4:64:9a:3e:49:
20:ee:77:33:fd:5b:92:a1:58:08:19:ce:eb:37:9f:
37:f6:33:27:b5:1b:33:70:7a:8d:c6:b5:85:b5:d6:
ca:a0:a1:2e:ea:00:b4:ad:a1:e3:b0:0c:fe:87:1b:
cc:27:5d:c3:e5:79:e3:67:52:18:9b:fa:f7:15:f4:
1f:42:79:05:26:51:b7:a1:5b:ce:b1:48:1f:e7:e7:
90:12:24:19:f9:f1:d4:94:b0:e6:34:aa:36:f1:3a:
16:77:f3:66:16:3c:fe:96:31:0e:26:97:b5:5f:f4:
8f:5e:ca:de:eb:3d:c0:1c:a0:db:31:88:20:8d:02:
dd:13:dc:6c:a9:5e:c5:19:40:00:fe:36:6e:ed:63:
81:1f:a8:50:cc:2a:95:2f:94:b0:87:fe:17:59:37:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AE:F3:5E:89:61:90:49:21:6B:07:6A:E2:21:F0:6F:52:8F:75:78
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/rK7zXolhkEkhawdq4iHwb1KPdXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.41.0/24
178.239.147.0-178.239.150.255
185.243.51.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e6:7f:35:4c:24:d3:39:d1:47:23:86:4c:90:81:ab:44:57:
43:2c:c8:05:22:00:6a:69:99:0d:c0:2e:52:f4:33:13:f5:12:
06:79:8b:b3:80:21:a4:f0:d9:c8:18:9d:1d:a1:d0:16:a7:c7:
5e:f4:45:33:a2:e2:1c:c2:4b:e9:5a:9e:3b:d3:0e:b1:42:d5:
25:40:93:f1:70:1c:6a:84:4f:25:92:44:79:40:fa:61:bb:7c:
3d:34:52:64:c8:b8:71:b4:38:ce:67:5e:e9:e9:92:ef:3c:69:
ac:ac:39:69:0c:bb:bc:d5:d0:45:73:82:0c:4b:86:8e:59:4a:
91:b5:46:e1:59:42:ba:90:00:ff:72:77:20:ce:bc:2c:32:ec:
6d:d2:a0:69:4a:e5:80:c4:03:89:44:68:0b:a5:21:99:e4:4c:
42:3e:9f:88:f2:5c:d5:86:f9:7d:14:34:c6:6e:53:0a:47:2e:
6e:30:b1:b3:0e:10:48:b0:45:aa:dd:c7:66:25:a3:a1:91:58:
f1:19:5f:f1:1c:e3:cf:11:0d:0f:d1:f8:88:ce:e8:b4:7f:4d:
fa:c1:34:46:8b:f2:b5:cd:98:dd:bd:ea:4f:86:41:5e:27:ac:
71:f9:35:ee:2a:62:76:02:68:b6:b0:26:5b:26:64:72:f5:0a:
c9:34:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:47:03 2025 by rpki-client