Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/pvUGXfHRERonsEM_TeArs2U_qS8.roa
File: pvUGXfHRERonsEM_TeArs2U_qS8.roa (raw, json)
Hash identifier: 72dqd2ZpRnSfhJgJoab6w+5XQSkk6/2vA+wnqdPGgqU=
Subject key identifier: A6:F5:06:5D:F1:D1:11:1A:27:B0:43:3F:4D:E0:2B:B3:65:3F:A9:2F
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 01904E2AED02AC0DA50DBE850B1C6BECF427
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/pvUGXfHRERonsEM_TeArs2U_qS8.roa
Signing time: Tue 25 Jun 2024 06:52:34 +0000
ROA not before: Tue 25 Jun 2024 06:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3920
IP address blocks: 37.49.227.0/24 maxlen: 24
37.49.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 10:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:2a:ed:02:ac:0d:a5:0d:be:85:0b:1c:6b:ec:f4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jun 25 06:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6f5065df1d1111a27b0433f4de02bb3653fa92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:62:f5:80:95:d3:49:0e:a8:cb:98:dc:58:
9f:a7:c4:a3:fe:5b:6c:98:47:11:c5:8b:c0:9b:c1:
d4:4f:b0:2d:0f:b5:ae:08:fe:6a:96:e4:83:1d:9c:
7e:cf:b5:21:6b:e5:b9:c5:f7:8c:8d:2c:40:2b:22:
ed:4b:68:18:e5:7f:67:d9:30:4d:72:84:d2:14:50:
a3:01:af:e0:fe:82:45:dd:1c:7f:1e:2e:18:c0:91:
a4:27:13:68:63:d8:06:d2:76:38:6b:74:d6:67:1a:
74:d0:e9:b9:3a:e8:6e:92:08:e4:cd:af:18:1e:82:
f1:5d:32:f5:1d:eb:ba:bd:a8:dd:1a:1a:18:35:eb:
63:f9:bd:58:26:ea:04:13:72:ee:98:33:6d:3c:7e:
5e:fb:18:c9:f3:1f:68:16:f6:4b:05:44:e9:a1:10:
81:da:f2:e3:af:db:7b:09:6a:c4:f5:81:15:13:b1:
47:30:0f:30:00:1f:a4:9a:46:15:87:f9:3f:87:af:
0f:68:a9:43:87:9e:91:8a:cd:0e:f8:8b:13:25:9c:
ab:1f:b7:7b:33:e2:bf:09:52:59:5a:e9:6c:15:9c:
78:d7:fb:ef:46:1e:e4:1e:3e:76:90:71:e4:e9:89:
f2:6c:fc:d1:b0:20:35:ce:f0:0d:91:1d:04:de:03:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:06:5D:F1:D1:11:1A:27:B0:43:3F:4D:E0:2B:B3:65:3F:A9:2F
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/pvUGXfHRERonsEM_TeArs2U_qS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.227.0-37.49.228.255
Signature Algorithm: sha256WithRSAEncryption
7a:b9:e7:bd:ea:fb:bc:12:12:2d:f4:74:ac:ed:51:7f:d7:30:
93:25:b7:44:d8:ff:84:64:4f:9b:32:67:c6:c6:ee:f5:8b:fa:
1d:dc:91:a6:61:7c:9f:63:63:fd:f7:44:be:61:44:a0:c7:0e:
b5:3f:a7:fc:fe:30:a4:c9:8a:a4:15:64:64:0c:4c:a5:9f:17:
c1:2e:21:dd:2d:59:34:86:de:e4:50:b2:4c:e7:93:c2:8c:aa:
af:6b:5b:14:67:6d:15:34:79:90:2d:ba:9d:a1:8b:4d:46:6a:
45:5a:f2:c2:f8:1b:34:d7:ed:b2:4d:1b:18:67:f4:bd:50:7c:
45:e1:c9:d4:d8:55:57:fa:b2:7b:bc:22:c6:04:29:01:c3:f5:
cf:af:11:76:b6:ee:a4:47:df:94:e2:03:61:49:58:6c:6c:a5:
a6:45:79:10:3a:54:df:80:d4:41:51:72:b2:88:3e:2b:5e:6e:
fa:c3:91:12:a2:e1:a8:44:14:bd:3d:da:95:95:20:b2:ab:9f:
f1:b3:db:84:34:91:e6:c3:c7:18:15:7b:3e:91:d9:59:df:3e:
8b:ed:a1:f3:06:3f:cb:82:1f:1f:05:68:53:34:f1:cb:3d:d7:
6f:c4:9e:b5:2b:55:46:0c:9c:76:70:79:75:33:13:c1:47:62:
a1:3a:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 13:13:13 2024 by rpki-client on console-fra.rpki-client.org