Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/VodGkK8v4H1mUmDxUVyFMJEpFJg.roa
File: VodGkK8v4H1mUmDxUVyFMJEpFJg.roa (raw, json)
Hash identifier: rhj2m9XadefNWlKYDIc4wkPhnm/vn2sTmjTh351XbJA=
Subject key identifier: 56:87:46:90:AF:2F:E0:7D:66:52:60:F1:51:5C:85:30:91:29:14:98
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 018572A7FB048A2EE778CDCD72ECC10CB2F2
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/VodGkK8v4H1mUmDxUVyFMJEpFJg.roa
Signing time: Mon 02 Jan 2023 13:24:49 +0000
ROA not before: Mon 02 Jan 2023 13:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9074
IP address blocks: 37.131.255.0/24 maxlen: 24
37.131.254.0/24 maxlen: 24
185.248.108.0/24 maxlen: 24
185.248.109.0/24 maxlen: 24
37.131.251.0/24 maxlen: 24
37.131.248.0/24 maxlen: 24
37.131.252.0/24 maxlen: 24
37.131.249.0/24 maxlen: 24
37.131.253.0/24 maxlen: 24
37.131.250.0/24 maxlen: 24
2a0b:9bc0:1::/48 maxlen: 48
2a0b:9bc0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Oct 2023 12:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:fb:04:8a:2e:e7:78:cd:cd:72:ec:c1:0c:b2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: Jan 2 13:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56874690af2fe07d665260f1515c853091291498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:22:b2:27:94:3b:c5:e2:ea:97:eb:e9:88:35:
c2:a5:c9:be:69:a7:bb:c7:97:3e:db:78:22:41:7f:
28:e6:93:5b:c3:59:97:e4:ad:b6:ec:58:e9:90:d1:
fb:5a:c6:c1:20:f4:cc:44:34:06:48:63:f2:e7:0f:
54:7d:53:16:97:96:31:86:dd:2e:73:2b:51:22:cd:
ac:71:09:9c:cf:3c:cf:5e:cb:ea:67:9a:95:6c:48:
8b:5f:30:93:5f:83:5a:70:f7:2e:76:f5:49:bd:40:
75:fa:d5:4a:52:96:5d:88:10:89:b1:71:83:cd:0a:
35:da:fb:79:3a:ec:a6:5c:3e:47:85:aa:30:a6:21:
ed:1e:ec:ae:3c:e7:37:b7:d8:25:dc:ea:c5:f1:c0:
5d:1a:47:bc:88:b8:7f:b3:68:dd:95:85:ac:a9:bb:
a0:6b:e4:39:7a:8d:d4:1e:8c:1f:5a:62:92:56:5d:
5b:ba:01:ea:7c:1f:31:a3:bd:e8:54:d1:66:14:02:
db:0e:82:d1:e5:88:08:5d:20:c0:de:1d:05:7b:72:
d6:23:b5:62:c1:03:f4:1c:ed:f8:75:0a:31:c9:67:
0f:08:06:5b:9d:54:09:bd:2c:22:4f:16:6a:7b:53:
16:da:c7:64:be:5b:80:9d:b2:3b:ae:e3:ae:f1:b1:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:87:46:90:AF:2F:E0:7D:66:52:60:F1:51:5C:85:30:91:29:14:98
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/VodGkK8v4H1mUmDxUVyFMJEpFJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.248.0/21
185.248.108.0/23
IPv6:
2a0b:9bc0:1::-2a0b:9bc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0c:aa:0c:41:ea:8e:b5:30:b5:ac:3e:e6:dc:c6:ad:76:ec:7c:
61:fd:d1:b0:63:98:7e:bd:a0:b7:5d:3d:bc:14:91:96:8e:df:
e1:82:9b:b2:9e:e1:0f:ba:cf:28:49:d9:5f:e8:44:d2:92:e1:
2d:73:59:3e:2f:6c:4e:30:63:af:68:44:48:9c:13:29:5f:0e:
f7:b2:e3:0c:70:c3:a0:df:16:ce:80:99:51:67:62:50:71:21:
14:8e:43:f5:c6:3c:78:33:f5:47:d2:ee:df:92:58:4b:d9:a5:
9a:64:c7:ed:41:40:2e:9e:00:b7:32:26:66:f1:bc:ef:cb:ed:
99:19:8d:9e:7d:e2:f7:a4:9e:f4:96:ca:c0:51:a3:03:0a:04:
1a:d3:93:45:4c:4a:f1:60:65:ab:df:36:c0:36:fb:dd:84:f1:
18:00:e7:01:7d:8d:27:5a:aa:b0:08:63:8d:ce:34:41:c6:d3:
1f:10:d5:06:f9:6f:60:01:1d:ee:96:d9:1c:5f:23:e3:45:82:
04:2a:d3:92:f9:9e:95:9c:a0:b3:3b:b4:54:0a:d3:85:8a:28:
2b:6e:bb:d6:cc:59:b0:f4:9b:e6:cf:65:8c:34:6d:55:5b:4a:
83:d5:f3:f1:81:82:ee:1a:cf:48:4e:6d:4f:11:e1:2c:20:2d:
ed:b1:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:44 2024 by rpki-client on console-fra.rpki-client.org