Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/Of1T1Wc0oO1e6ol4q6Eo1_y5EE0.roa
File: Of1T1Wc0oO1e6ol4q6Eo1_y5EE0.roa (raw, json)
Hash identifier: 8zmA1R1ob6Ch4Ieir5vtQDKDsFBv6VWrcXtPq4w7mw4=
Subject key identifier: 39:FD:53:D5:67:34:A0:ED:5E:EA:89:78:AB:A1:28:D7:FC:B9:10:4D
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 018CC2DB18813EFF351C4117AE5333BEC02B
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/Of1T1Wc0oO1e6ol4q6Eo1_y5EE0.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34373
IP address blocks: 37.143.37.0/24 maxlen: 24
37.143.36.0/24 maxlen: 24
37.143.36.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:18:81:3e:ff:35:1c:41:17:ae:53:33:be:c0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39fd53d56734a0ed5eea8978aba128d7fcb9104d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:dd:12:1c:6b:41:db:b2:ba:37:2a:57:ad:
cf:d4:17:96:26:35:cc:88:f2:fa:c6:95:c8:a5:24:
fc:94:9e:df:87:6d:3f:4b:97:97:f4:75:d0:e3:f7:
09:0f:ab:55:0a:dd:4c:83:7b:a5:58:d4:a2:02:a9:
b3:45:42:04:0b:f6:b6:59:44:d0:59:f9:8d:fd:4a:
89:c2:d2:f6:1a:e9:e6:c9:02:ca:d4:35:b2:5c:57:
67:3c:47:18:3a:20:be:aa:f5:37:21:e4:12:f4:e6:
21:7e:2b:6b:90:01:c1:b1:0b:bd:0b:43:28:c8:58:
06:0d:a1:32:2d:3b:60:20:df:35:92:d7:3f:6a:a2:
21:a0:ac:cc:a6:f8:7a:d5:d7:43:4a:0c:aa:02:15:
e7:b5:cc:9d:a7:63:f6:43:67:c8:0f:f1:c7:ff:f5:
4f:02:4c:f1:49:66:ff:30:a0:6a:e1:33:29:92:b6:
3b:8d:ac:fb:db:ab:fb:e7:60:e4:d9:df:e5:e4:70:
53:ed:aa:9f:6f:b9:b2:be:8e:71:18:26:4d:44:38:
49:da:69:e4:68:3e:eb:df:30:9e:a0:a4:61:b1:de:
b6:2c:31:fa:f3:d9:0d:67:1c:1c:5a:de:a4:47:69:
d7:a9:54:5c:4e:bf:bc:70:25:62:bc:2e:e2:2d:bc:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FD:53:D5:67:34:A0:ED:5E:EA:89:78:AB:A1:28:D7:FC:B9:10:4D
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/Of1T1Wc0oO1e6ol4q6Eo1_y5EE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.36.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:76:cd:0a:e1:50:ea:40:48:f9:db:2a:cc:52:36:6a:5a:d8:
9b:6e:71:76:18:f5:40:6b:52:8d:ad:95:79:30:c7:d7:bd:5e:
82:2e:6a:18:a5:f7:82:9c:81:c2:96:6b:3c:c1:7a:b1:29:40:
81:e0:3c:8e:95:57:7b:c1:05:61:47:d8:cb:79:8b:71:9e:e4:
88:09:db:73:70:56:63:d2:6d:17:25:c5:f4:ba:bc:65:65:46:
84:f1:3d:f4:d1:8c:ba:9a:a2:e8:dc:43:98:b3:35:5e:07:01:
56:4a:14:3d:39:4f:36:5b:c0:29:29:47:ec:76:af:c0:60:ff:
59:bf:cc:12:21:3b:eb:82:e5:37:6e:1b:02:cf:45:ab:0f:a1:
a3:b2:df:32:29:be:b2:9d:ec:fc:94:60:8d:39:04:3d:85:d2:
1d:f3:de:14:78:ee:a2:e2:93:16:1f:74:44:5b:37:48:a2:47:
88:89:45:fc:42:92:7e:cf:ee:ec:2d:1f:21:40:26:e7:32:0a:
85:31:79:df:2a:5f:66:db:9e:b7:ad:1e:c1:91:97:02:82:80:
37:33:47:b8:42:e8:c4:e7:89:19:a3:24:33:75:d3:ab:d9:23:
06:9a:bd:81:60:a3:44:bf:30:d9:29:d2:9e:b2:78:9d:a8:01:
45:5f:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:46 2025 by rpki-client