Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/WzMqLxsOpynyMw0uYDQyZVYKH58.roa
File: WzMqLxsOpynyMw0uYDQyZVYKH58.roa (raw, json)
Hash identifier: b+NRjiuOE8dt+3M3JDi9r7Hw6DV0nQAYbED99+OFxVY=
Subject key identifier: 5B:33:2A:2F:1B:0E:A7:29:F2:33:0D:2E:60:34:32:65:56:0A:1F:9F
Certificate issuer: /CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Certificate serial: 018F771E4DB7CDB3C8A7AE85D568B6C77040
Authority key identifier: B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/WzMqLxsOpynyMw0uYDQyZVYKH58.roa
Signing time: Tue 14 May 2024 12:40:25 +0000
ROA not before: Tue 14 May 2024 12:40:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207630
IP address blocks: 37.32.103.0/24 maxlen: 24
2a04:55c0::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 15 Jul 2024 16:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:77:1e:4d:b7:cd:b3:c8:a7:ae:85:d5:68:b6:c7:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Validity
Not Before: May 14 12:40:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b332a2f1b0ea729f2330d2e60343265560a1f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:9e:91:b7:b3:a1:54:40:ab:87:ee:00:94:
1b:ce:df:ce:96:77:ab:49:c4:c8:7c:34:fb:fa:3e:
cf:21:83:27:b2:49:34:cf:65:c0:19:80:2e:3b:36:
cd:d1:b5:26:13:d6:5f:19:1c:4d:9d:77:9c:46:1c:
41:e6:a7:ff:19:f2:fd:9e:fc:52:90:83:01:99:6e:
f3:fd:66:22:12:84:6a:1e:c7:6e:be:87:c0:de:ac:
01:f5:d7:b5:65:0d:18:d6:4b:b4:26:8f:c7:8a:ae:
35:b2:7e:41:0f:af:f8:9c:90:44:43:5f:50:79:88:
45:03:d2:75:1a:15:11:3b:04:96:7b:62:16:db:6a:
3f:1d:48:d2:e2:8d:b5:0d:76:87:fc:eb:0c:c6:a4:
68:6d:d7:01:e1:29:37:61:3e:2e:81:cf:f7:54:25:
03:43:f9:e2:5a:2a:79:e4:77:2e:aa:19:c9:fb:3c:
3b:ea:18:19:ae:24:ad:a9:a1:7b:31:c8:21:46:95:
b6:86:73:f2:2b:7b:9a:a5:65:64:cb:a7:ae:71:a5:
af:3e:09:85:a4:78:e8:06:4a:72:18:c1:98:64:07:
76:e8:8d:31:03:00:70:a4:af:51:65:87:e6:89:11:
1a:3d:53:93:d0:2b:de:ea:cb:ce:b5:2c:4f:13:e1:
22:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:2A:2F:1B:0E:A7:29:F2:33:0D:2E:60:34:32:65:56:0A:1F:9F
X509v3 Authority Key Identifier:
keyid:B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/WzMqLxsOpynyMw0uYDQyZVYKH58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.103.0/24
IPv6:
2a04:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:a6:67:cb:80:fe:02:1b:92:7e:ab:4f:93:6d:c6:bb:7d:15:
45:43:47:e5:79:97:24:e7:b1:5f:71:24:6a:c8:cf:d8:25:00:
c9:c5:d6:8b:8d:ec:e3:4b:8a:cc:70:dd:03:65:6b:cc:ed:8c:
ce:73:f9:6f:14:c5:52:26:a3:98:5e:36:f0:0d:35:7f:9c:b6:
99:3b:75:8f:79:21:31:ea:16:b9:6d:a4:3c:04:32:bd:b0:be:
f7:ad:47:60:33:40:a0:4f:b5:32:26:0f:75:d3:3c:13:d4:b8:
4e:d2:c4:60:b2:2e:23:e0:22:dd:fe:44:3a:0d:56:fe:a5:bd:
41:92:9f:a7:d4:94:32:c7:85:13:38:2e:9e:33:a5:04:f8:c6:
fb:36:90:9e:3f:5b:96:f5:d8:1b:2d:bd:cc:b1:e9:ec:9f:dc:
d2:81:b7:bc:95:5b:b8:99:12:54:b6:88:c5:20:a9:e4:6d:35:
cd:90:62:26:ec:9e:3a:74:d3:cc:7c:8a:9c:3d:f9:7c:8e:de:
98:3a:5e:1e:1b:85:e9:34:e9:3e:3a:34:39:e4:4c:6d:68:61:
1d:5b:8a:77:c1:ee:59:ec:84:dc:fc:8f:6c:6d:be:d0:c7:69:
85:00:9b:b0:a6:d0:57:9e:c7:6e:3b:d3:f2:37:a8:5f:7d:d3:
00:4f:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:40:22 2025 by rpki-client