Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/04TgZDdNtlcAEpit2gIpkQUsWvo.roa
File: 04TgZDdNtlcAEpit2gIpkQUsWvo.roa (raw, json)
Hash identifier: K3uBDnmycEVWaSVC2kRwVf9kkqobbsAb+8kL7/LUavo=
Subject key identifier: D3:84:E0:64:37:4D:B6:57:00:12:98:AD:DA:02:29:91:05:2C:5A:FA
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 01914A84C13C5B84FF163A1B69357C325FBE
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/04TgZDdNtlcAEpit2gIpkQUsWvo.roa
Signing time: Tue 13 Aug 2024 06:54:59 +0000
ROA not before: Tue 13 Aug 2024 06:54:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39582
IP address blocks: 37.77.0.0/19 maxlen: 19
37.77.1.0/24 maxlen: 24
37.77.2.0/24 maxlen: 24
37.77.3.0/24 maxlen: 24
37.77.4.0/24 maxlen: 24
37.77.5.0/24 maxlen: 24
37.77.6.0/24 maxlen: 24
37.77.7.0/24 maxlen: 24
37.77.8.0/24 maxlen: 24
37.77.9.0/24 maxlen: 24
37.77.10.0/24 maxlen: 24
37.77.15.0/24 maxlen: 24
37.77.16.0/24 maxlen: 24
37.77.17.0/24 maxlen: 24
37.77.18.0/24 maxlen: 24
37.77.20.0/24 maxlen: 24
37.77.21.0/24 maxlen: 24
37.77.22.0/24 maxlen: 24
37.77.23.0/24 maxlen: 24
37.77.24.0/24 maxlen: 24
37.77.26.0/24 maxlen: 24
37.77.27.0/24 maxlen: 24
37.77.30.0/24 maxlen: 24
37.77.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 21:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:84:c1:3c:5b:84:ff:16:3a:1b:69:35:7c:32:5f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Aug 13 06:54:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d384e064374db657001298adda022991052c5afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:c3:bd:31:2c:28:be:6d:c9:51:11:5c:f1:
bb:49:d4:d5:ed:b8:f4:87:ec:47:4d:f1:88:f7:7e:
90:c8:90:fb:4a:61:d1:ac:f5:24:a1:1f:4e:e5:a6:
c8:d2:f6:6c:51:d1:d2:1f:e5:d7:ae:2a:c3:f0:dc:
4e:c2:97:3d:08:15:15:d2:87:86:21:08:a8:24:ab:
7c:47:82:8c:48:d0:20:27:c2:42:48:1e:fb:ef:e8:
7a:75:84:ce:28:87:6f:96:ac:10:ba:ae:4b:ae:9e:
9d:67:33:5f:b6:99:5a:06:9d:3a:f3:62:f4:46:20:
76:86:dc:b0:19:94:4b:e8:12:96:77:e1:da:00:c5:
54:a1:d2:ef:93:c5:8e:f9:fd:90:fd:29:12:7b:75:
ed:28:33:5c:db:a8:8e:bf:67:98:43:61:50:c2:7d:
01:b3:02:d8:0b:e5:1e:4f:1e:57:95:75:7d:0a:98:
05:c8:97:ad:94:a2:0e:54:c4:24:2d:ec:4f:52:d4:
21:60:10:87:da:98:25:6f:a3:19:a0:82:c1:ac:f7:
34:40:a6:7d:8d:cb:b0:a8:f4:d4:ca:b4:9b:27:5f:
58:51:a2:00:86:ca:4e:8b:ff:91:4d:da:11:78:db:
bf:2c:0c:d7:56:d0:d7:e1:8d:2c:63:10:38:7b:22:
09:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:84:E0:64:37:4D:B6:57:00:12:98:AD:DA:02:29:91:05:2C:5A:FA
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/04TgZDdNtlcAEpit2gIpkQUsWvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.0.0/19
Signature Algorithm: sha256WithRSAEncryption
34:33:d4:82:6b:76:a4:c5:83:23:ce:86:34:d2:31:c4:7b:6c:
8f:eb:45:2f:6f:a7:85:4b:4a:f7:32:ef:7d:67:41:3c:72:84:
f5:91:31:57:ad:42:e9:a6:22:ae:98:80:ec:37:1d:54:d0:60:
92:43:9e:70:e5:46:c5:24:4e:83:3c:ea:4e:4a:02:ae:6d:44:
76:c6:ba:27:b8:e3:7c:45:ee:97:35:34:40:ed:c2:bf:ac:6d:
7c:99:5e:20:de:00:62:c4:de:ba:40:4f:d0:11:ee:c9:d7:a3:
df:ef:46:0f:b5:54:9b:65:e0:52:c2:f0:c0:8e:05:16:3b:5c:
fd:cf:40:cf:b3:ee:16:1f:e9:2f:38:5e:61:ab:9e:94:9d:92:
d6:1b:e6:85:95:d2:38:86:2a:50:de:01:14:5c:d8:76:32:3d:
a7:fe:2b:fa:1c:28:d1:5c:4a:72:1d:c0:e6:b4:47:7d:40:cf:
7c:03:2c:c0:86:54:fc:2a:79:a8:6e:af:57:ae:2d:41:4b:85:
8f:00:96:f2:e0:82:c6:07:31:2f:af:c1:76:a2:30:09:05:45:
13:0c:3a:9d:77:0f:07:49:06:1e:7e:f7:58:49:b5:71:05:27:
3d:4b:a3:69:76:21:ab:64:03:7d:dd:49:ed:ca:bf:d3:43:16:
a2:24:99:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 23:28:45 2024 by rpki-client on console-ams.rpki-client.org