Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/xoHsUqSHfrKEIJNTvNUfjr5IpMU.roa
File: xoHsUqSHfrKEIJNTvNUfjr5IpMU.roa (raw, json)
Hash identifier: DGMVtSgjatouKgbyl6PGD2cu0kd4SKcMIEfhfkPCv2E=
Subject key identifier: C6:81:EC:52:A4:87:7E:B2:84:20:93:53:BC:D5:1F:8E:BE:48:A4:C5
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018F88371EAD24202480EDA049609F19AC9F
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/xoHsUqSHfrKEIJNTvNUfjr5IpMU.roa
Signing time: Fri 17 May 2024 20:21:04 +0000
ROA not before: Fri 17 May 2024 20:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59592
IP address blocks: 37.114.32.0/19 maxlen: 24
37.114.35.0/24 maxlen: 24
37.114.36.0/24 maxlen: 24
37.114.38.0/24 maxlen: 24
37.114.39.0/24 maxlen: 24
37.114.58.0/24 maxlen: 24
43.251.160.0/24 maxlen: 24
43.251.161.0/24 maxlen: 24
94.154.48.0/21 maxlen: 24
94.154.49.0/24 maxlen: 24
94.154.51.0/24 maxlen: 24
94.154.52.0/24 maxlen: 24
94.154.53.0/24 maxlen: 24
94.154.54.0/24 maxlen: 24
176.100.32.0/21 maxlen: 24
176.100.32.0/24 maxlen: 24
176.100.33.0/24 maxlen: 24
176.100.34.0/24 maxlen: 24
176.100.35.0/24 maxlen: 24
176.100.36.0/24 maxlen: 24
176.100.37.0/24 maxlen: 24
185.14.92.0/22 maxlen: 22
2a00:ccc2::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 May 2024 08:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:37:1e:ad:24:20:24:80:ed:a0:49:60:9f:19:ac:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: May 17 20:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c681ec52a4877eb284209353bcd51f8ebe48a4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:25:31:76:9f:b2:32:09:5f:cb:f4:b4:3e:
be:d2:4e:b0:14:56:97:86:9e:a0:04:08:6e:a9:78:
3f:20:f7:bf:e5:5e:00:76:fc:36:2e:a2:f9:59:41:
3c:08:57:44:23:92:69:28:14:0d:f5:c9:02:3e:3c:
95:ec:4e:0d:2f:5c:1e:3a:46:eb:9b:51:52:35:ab:
08:b1:9f:e9:5e:b6:f0:ff:d9:65:bd:cf:3c:d0:48:
65:58:c8:9c:f7:00:b4:a4:85:7b:74:05:1c:b9:24:
84:cf:56:14:23:68:76:0a:98:c0:5c:ec:79:2f:6c:
f5:fc:b9:16:a1:28:5b:66:a3:86:13:f9:2a:13:37:
99:43:e8:b8:7c:6b:26:bd:a2:9d:21:3d:69:c1:79:
33:51:95:12:8b:37:53:72:41:02:f0:a1:67:ce:a9:
60:4b:b9:7b:71:f5:e0:7a:26:70:7a:82:56:15:ab:
f8:71:e1:5f:53:f5:00:84:66:21:e2:f4:72:f0:8d:
d7:93:f2:29:7b:78:ef:2c:1d:b2:f8:93:66:34:64:
bf:b4:b4:09:f4:f5:26:3d:d8:2b:01:75:f2:d7:31:
b4:20:a0:b1:bd:08:cb:5f:92:a2:74:72:95:bf:c1:
2a:fc:b2:a8:6e:18:3b:22:db:c2:d4:07:18:3b:99:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:81:EC:52:A4:87:7E:B2:84:20:93:53:BC:D5:1F:8E:BE:48:A4:C5
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/xoHsUqSHfrKEIJNTvNUfjr5IpMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0/19
43.251.160.0/23
94.154.48.0/21
176.100.32.0/21
185.14.92.0/22
IPv6:
2a00:ccc2::/32
Signature Algorithm: sha256WithRSAEncryption
c9:ca:69:ee:58:82:10:62:a2:d5:a5:93:bf:b8:1b:d3:49:f3:
c4:a8:1f:ee:e6:46:dc:5b:d1:ba:46:ec:4a:cc:89:5b:a4:c3:
c6:bb:f8:a1:20:58:01:b0:bd:3b:cc:ad:fb:93:bb:c4:de:be:
7f:29:80:9c:ac:46:d1:73:32:af:02:85:ff:8b:c0:fe:ae:43:
41:25:80:6c:e9:e0:55:01:92:39:19:f3:ea:09:20:8f:90:99:
42:cf:84:67:e4:44:69:0a:1b:bb:e4:ea:e9:da:8e:99:0b:81:
b7:a8:60:95:a5:ad:9e:1a:25:35:8c:e6:5a:97:89:0b:05:ee:
60:01:1c:ed:28:80:ee:fa:86:d0:b7:e5:46:e8:81:30:1c:98:
c8:eb:35:f2:d2:b3:0a:2a:36:9a:a1:3c:c9:85:cf:22:99:fc:
30:21:8b:69:49:4a:ad:db:fc:60:62:3a:70:4d:21:0f:0c:aa:
7a:d5:5a:8a:4d:f3:fb:95:e6:65:02:4d:de:fd:d8:31:4d:fa:
d9:5d:2d:01:87:d3:b7:40:3b:34:d2:51:59:d7:c4:a0:83:e2:
8c:c7:bb:45:f9:48:68:91:17:15:57:fe:02:36:8d:7d:42:9a:
c5:a6:a0:6a:8d:88:79:3c:fc:47:32:26:3d:a9:0c:bc:30:f6:
1c:c1:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org