Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/iP9v_84Q83sI8hr72TdvlIJ3pu8.roa
File: iP9v_84Q83sI8hr72TdvlIJ3pu8.roa (raw, json)
Hash identifier: lgL/H865kDy1bsxxU4yZ+u9fsK1pfP1DE05KAtp/WOw=
Subject key identifier: 88:FF:6F:FF:CE:10:F3:7B:08:F2:1A:FB:D9:37:6F:94:82:77:A6:EF
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 01904E2AEDD437D7DA17EE52F119E23F1AB3
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/iP9v_84Q83sI8hr72TdvlIJ3pu8.roa
Signing time: Tue 25 Jun 2024 06:52:34 +0000
ROA not before: Tue 25 Jun 2024 06:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216014
IP address blocks: 37.49.224.0/24 maxlen: 24
37.49.225.0/24 maxlen: 24
45.143.220.0/24 maxlen: 24
45.143.221.0/24 maxlen: 24
45.143.222.0/24 maxlen: 24
77.247.109.0/24 maxlen: 24
185.209.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 10:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:2a:ed:d4:37:d7:da:17:ee:52:f1:19:e2:3f:1a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jun 25 06:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88ff6fffce10f37b08f21afbd9376f948277a6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:d5:15:43:01:1f:c9:0c:d5:fe:7c:dc:36:
92:11:3c:8c:1c:68:22:8a:7b:f7:35:4f:26:94:c3:
14:ec:63:96:6e:9c:9a:a0:15:54:cd:99:a5:1a:6d:
18:3b:2c:cd:c8:0f:7a:7f:72:2a:fe:bb:af:ad:f5:
3a:6e:46:c0:91:23:17:48:1d:ca:08:56:e1:4b:3b:
33:b1:93:67:b7:b1:b5:37:aa:2c:f6:74:c9:8c:52:
d2:10:60:73:b6:14:e9:00:cc:9b:a5:55:0e:3d:bc:
74:cd:01:11:d3:a0:be:60:df:ee:30:18:d0:32:7f:
7b:2e:96:12:62:2f:8f:5e:61:ce:3f:0f:5b:b4:44:
33:d1:be:c0:42:57:72:b1:7a:c9:0c:02:83:89:a1:
e3:f8:54:92:f7:c7:16:97:d4:3e:73:8d:da:59:3c:
f9:70:15:4b:8a:8e:0d:8b:4f:69:42:3c:53:69:de:
a3:ff:df:26:14:bb:be:97:99:49:82:89:21:2e:dc:
73:90:94:a2:22:46:0b:c8:57:a4:07:49:9d:7e:38:
16:42:52:9a:35:63:40:e9:da:cc:dd:b3:3d:23:ab:
5c:38:1e:41:2c:b6:a9:59:aa:87:be:b8:85:df:1a:
f8:d9:07:bc:7e:16:0a:e0:e9:91:5b:8f:5d:b7:f7:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FF:6F:FF:CE:10:F3:7B:08:F2:1A:FB:D9:37:6F:94:82:77:A6:EF
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/iP9v_84Q83sI8hr72TdvlIJ3pu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.224.0/23
45.143.220.0-45.143.222.255
77.247.109.0/24
185.209.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:18:33:45:e4:ee:84:de:ba:bb:3c:ce:b7:7c:9d:f4:3f:f5:
a2:bd:99:52:91:d8:e1:48:d5:56:d0:c5:7f:d7:04:6e:1d:f3:
d1:ad:57:c1:48:5a:1e:07:86:82:c4:4a:be:21:11:5d:9e:1e:
86:dc:06:c2:78:88:29:01:c9:e2:16:06:91:ef:f2:25:b7:7b:
b3:ed:26:2e:f0:9f:56:f4:6a:18:a2:f2:03:9e:b7:3b:e3:6d:
eb:50:5c:90:05:e6:7a:36:9d:ec:56:3c:cc:1d:8f:9f:ac:e4:
dc:89:44:77:1e:c2:d4:06:06:41:d0:48:ac:96:4e:4b:83:dc:
39:13:33:4d:6e:5c:a0:2d:ba:38:87:aa:f9:02:00:d5:37:c7:
45:3d:95:b9:44:df:bb:06:61:03:1e:69:47:cc:db:23:17:b0:
90:a2:e0:0f:87:9f:3f:3f:fa:c6:1d:a3:21:a6:38:10:72:3c:
25:a4:f0:87:7f:02:43:f3:32:de:9c:ea:e7:cb:3b:68:83:95:
6f:a6:7a:75:c6:84:bd:35:31:70:72:b4:43:73:ba:9b:f7:10:
5a:c2:42:05:29:89:1d:bd:77:88:49:4b:07:26:e8:bb:f2:58:
69:c7:92:6c:27:75:d7:cb:09:d7:d2:85:5c:05:c0:75:48:a3:
59:ae:24:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 12:13:07 2024 by rpki-client on console-fra.rpki-client.org