Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/I442_6DJXaRGZCXBq7hTRvoO_rw.roa
File: I442_6DJXaRGZCXBq7hTRvoO_rw.roa (raw, json)
Hash identifier: PESLaKbno+2r7dkoFxfyLBam/9+EDIQt6/AnuTlC8wA=
Subject key identifier: 23:8E:36:FF:A0:C9:5D:A4:46:64:25:C1:AB:B8:53:46:FA:0E:FE:BC
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 0194CC7636DCCA61DBA087C797FD65913ADC
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/I442_6DJXaRGZCXBq7hTRvoO_rw.roa
Signing time: Mon 03 Feb 2025 15:38:06 +0000
ROA not before: Mon 03 Feb 2025 15:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398748
IP address blocks: 37.228.148.0/22 maxlen: 22
37.228.148.0/24 maxlen: 24
37.228.149.0/24 maxlen: 24
37.228.150.0/24 maxlen: 24
37.228.151.0/24 maxlen: 24
2a06:1c41::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 24 Feb 2025 15:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:76:36:dc:ca:61:db:a0:87:c7:97:fd:65:91:3a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Feb 3 15:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=238e36ffa0c95da4466425c1abb85346fa0efebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:9d:15:c6:2e:9d:4a:fc:f9:63:a8:15:e2:
8b:e6:d8:51:1d:bf:29:f5:ba:5d:28:b3:8d:19:3c:
2e:31:6f:b7:24:12:60:42:04:d1:14:27:88:12:bd:
42:99:62:ec:36:dd:83:e1:54:75:48:5b:56:92:b8:
51:3e:35:b6:d0:4c:c5:bd:49:b0:e9:a6:c0:68:29:
35:48:70:cd:57:10:19:b2:9e:b1:90:ad:a8:59:14:
b7:a9:bb:7e:12:93:4e:88:a2:64:cc:bb:08:2f:13:
5e:de:c8:9c:68:01:9b:fd:18:5d:7d:58:9e:5f:6b:
1f:89:88:45:03:8e:57:87:6f:2f:8f:b4:37:1f:dd:
55:59:d9:d1:d9:65:5e:ab:e5:6d:16:f5:d0:5e:af:
c5:81:64:7f:0f:10:34:71:d2:68:d8:1d:99:41:3b:
5d:a1:5f:dc:78:39:f7:62:83:59:10:d1:a4:78:19:
da:53:49:d8:3b:17:75:75:10:e0:b5:1f:5d:9a:9a:
31:a1:89:27:5d:68:1a:5c:bb:8b:b1:06:04:7c:86:
52:0a:f4:03:b3:1b:8e:3e:84:3a:e2:c7:21:bd:ee:
5b:74:f9:33:0d:51:56:0f:84:91:7d:d6:f8:88:9f:
97:a9:18:e4:fa:51:aa:95:13:4b:fe:db:76:bb:29:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8E:36:FF:A0:C9:5D:A4:46:64:25:C1:AB:B8:53:46:FA:0E:FE:BC
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/I442_6DJXaRGZCXBq7hTRvoO_rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.148.0/22
IPv6:
2a06:1c41::/32
Signature Algorithm: sha256WithRSAEncryption
11:e6:7e:f0:b2:a4:f6:2e:ac:90:1b:00:90:b4:f3:4b:ec:ce:
63:73:35:f9:0c:8c:ef:7c:ee:aa:28:06:36:9f:7a:e8:83:21:
09:11:03:4a:eb:fb:cf:3e:32:ab:65:cf:49:61:16:e9:d1:9e:
99:b3:37:a0:3f:e9:b8:1f:2c:4d:15:92:9d:50:cc:6b:3b:35:
db:c2:9c:e5:8a:de:14:cd:a7:98:78:9a:a3:9d:02:60:99:4f:
7a:76:04:f9:34:ba:48:12:f8:f0:a3:fa:51:97:24:47:8a:1d:
56:3c:dd:1b:64:26:04:92:c3:8e:c0:16:29:25:4d:6e:c4:05:
a1:1d:9a:28:82:73:cc:2e:c6:19:d6:1e:c3:20:b9:ae:6a:7f:
cf:cd:e2:6c:7e:bc:df:72:c8:01:45:5a:51:6b:62:66:b6:34:
ef:a6:52:00:c0:3a:43:e4:68:6c:f1:13:19:a1:05:b6:54:64:
49:cb:00:0f:9a:78:84:d7:ac:be:c5:23:2a:14:c5:59:9c:12:
9f:e1:38:46:34:c2:1c:dc:4d:63:53:9f:42:c1:81:28:db:47:
1e:fe:56:8a:03:74:15:c4:3b:7b:1f:70:6d:35:9c:7a:fe:55:
08:f0:62:bb:e7:d1:37:a4:bf:72:c7:f5:a6:02:85:10:32:0a:
e6:09:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:11:24 2025 by rpki-client