Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/E1PrkUZTnSWB_8YNPTlMEbSh-hM.roa
File: E1PrkUZTnSWB_8YNPTlMEbSh-hM.roa (raw, json)
Hash identifier: BhUASwrbdXPWhGAX6khbHa7nRiRKhYtJ5hGEfqo43ss=
Subject key identifier: 13:53:EB:91:46:53:9D:25:81:FF:C6:0D:3D:39:4C:11:B4:A1:FA:13
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 0191C1653AF3A930E64F4E590D1372DBE2CE
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/E1PrkUZTnSWB_8YNPTlMEbSh-hM.roa
Signing time: Thu 05 Sep 2024 08:55:22 +0000
ROA not before: Thu 05 Sep 2024 08:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20811
IP address blocks: 37.186.128.0/18 maxlen: 24
46.234.224.0/19 maxlen: 24
84.18.128.0/19 maxlen: 24
89.190.160.0/19 maxlen: 24
93.89.48.0/20 maxlen: 24
95.171.32.0/19 maxlen: 24
185.6.192.0/22 maxlen: 24
217.199.0.0/19 maxlen: 24
2a02:490::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 06 Sep 2024 17:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:65:3a:f3:a9:30:e6:4f:4e:59:0d:13:72:db:e2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Sep 5 08:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1353eb9146539d2581ffc60d3d394c11b4a1fa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:22:45:dc:5c:f1:d7:96:75:7c:da:6a:2c:
31:15:44:15:2b:cc:33:d2:8c:d5:ef:a5:62:9a:ff:
a6:33:04:96:2e:6d:9b:94:30:42:84:fb:59:c8:30:
6b:d0:27:3c:1a:a4:b7:b1:e1:c6:56:71:d9:97:a5:
cb:f8:0f:3c:c4:7b:0f:dd:90:c5:61:72:ba:1f:d8:
3f:cc:b3:64:6c:f4:bc:b0:eb:ab:fe:cf:4f:75:09:
5d:e1:d8:07:f0:b9:d4:32:56:24:50:38:c7:ec:43:
bd:29:ef:ac:a5:13:73:f5:d1:be:97:55:f8:f7:1d:
69:9e:f9:6a:2c:13:d8:ee:2b:a0:e8:ca:4f:28:da:
6e:83:39:25:1f:bc:5f:f2:a9:a7:c6:ac:35:1d:fc:
19:5a:d0:99:d6:3b:72:74:f0:7d:07:40:66:74:cb:
5f:5d:1c:1f:cd:a4:06:c2:8a:f1:bf:1d:63:0d:17:
37:4b:a6:90:cd:0d:33:2f:67:49:09:ef:3b:27:ed:
87:93:5b:07:75:ba:82:51:34:f4:b9:c1:22:78:a8:
ef:4f:fb:6e:04:f7:e7:92:65:71:d6:1c:22:97:fb:
cc:9a:59:a9:48:aa:61:87:15:29:05:44:3e:d9:16:
51:44:cf:93:5f:2f:2a:d1:2d:e9:68:e3:ab:ab:2c:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:EB:91:46:53:9D:25:81:FF:C6:0D:3D:39:4C:11:B4:A1:FA:13
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/E1PrkUZTnSWB_8YNPTlMEbSh-hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.186.128.0/18
46.234.224.0/19
84.18.128.0/19
89.190.160.0/19
93.89.48.0/20
95.171.32.0/19
185.6.192.0/22
217.199.0.0/19
IPv6:
2a02:490::/29
Signature Algorithm: sha256WithRSAEncryption
8e:9b:b7:d6:c0:39:22:f1:0f:94:3c:0e:7a:36:c3:c3:fb:a4:
b6:03:b3:2d:15:f0:0f:b9:57:af:85:f9:28:f2:89:91:03:a5:
92:55:26:11:94:a4:d7:73:e8:39:85:e4:d7:c7:e1:10:33:03:
59:b4:9d:1d:a0:98:ed:a8:4b:2a:1d:42:55:8d:d6:79:a6:cd:
06:3e:82:78:f4:ed:85:1b:14:5b:de:c4:d1:58:11:7f:f3:f8:
23:d3:6c:41:50:74:9b:3c:75:77:c8:0a:67:95:e8:47:88:9e:
7a:00:fa:67:2b:7f:a2:b6:b1:f7:3c:c3:98:84:26:b2:8a:18:
90:9f:2c:ea:d7:ff:cd:d3:d7:d5:b4:02:2d:6a:87:54:03:90:
15:a6:31:e3:2f:b5:79:2b:2b:49:8b:ed:65:e4:4e:21:ea:00:
b2:ed:dd:5d:3f:03:5f:1e:fc:fd:b9:85:68:3c:91:c7:58:6e:
31:0c:8f:71:36:50:3e:c3:08:80:7c:1a:b5:55:81:18:b5:39:
41:55:19:9d:a8:34:fe:11:5c:05:20:af:76:bd:65:ae:9e:c5:
95:42:a9:0f:bf:49:0e:31:f0:0f:a8:0a:e6:49:05:d0:ca:40:
e7:32:ff:61:c6:bb:d3:27:7a:aa:20:53:1b:b8:67:29:33:2e:
99:84:b2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 19:15:49 2024 by rpki-client on console-ams.rpki-client.org