Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/OSn1Z-AeUWiBEaY64hiyi3wA5c8.roa
File: OSn1Z-AeUWiBEaY64hiyi3wA5c8.roa (raw, json)
Hash identifier: eONIuPOEN7QfAQrLBZ9ypZFni2r7u3kbnI0oZQhYvsM=
Subject key identifier: 39:29:F5:67:E0:1E:51:68:81:11:A6:3A:E2:18:B2:8B:7C:00:E5:CF
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018FB94E3977B95D40E8507069C54D2C22E1
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/OSn1Z-AeUWiBEaY64hiyi3wA5c8.roa
Signing time: Mon 27 May 2024 09:07:42 +0000
ROA not before: Mon 27 May 2024 09:07:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216050
IP address blocks: 37.49.146.0/24 maxlen: 24
37.49.149.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.162.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.165.0/24 maxlen: 24
109.203.167.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 08:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:4e:39:77:b9:5d:40:e8:50:70:69:c5:4d:2c:22:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 27 09:07:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3929f567e01e51688111a63ae218b28b7c00e5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:67:a4:84:90:20:d9:f3:b8:6e:a2:9b:1d:
26:db:1f:c4:53:f2:44:a6:e7:70:d9:fa:d8:33:c1:
2d:b6:0a:40:c5:51:99:c9:45:b0:1d:f7:c4:67:b0:
d9:43:6f:9a:eb:88:6b:6c:f5:ab:a0:da:44:23:87:
cc:21:a4:51:a9:1e:55:c5:5f:44:5a:af:e1:d5:b7:
2e:55:55:16:da:08:4a:c5:1d:e8:e0:cd:30:ea:be:
9a:e6:93:9d:48:3f:ff:39:a7:21:a1:cf:f0:0a:ed:
d3:a0:9c:1f:42:07:5b:df:54:f0:48:0e:3c:cd:27:
2a:2d:5d:51:4d:0f:12:9d:41:0d:da:d2:b5:cf:bd:
b2:b2:70:d2:63:34:f6:22:cc:d4:89:e2:e6:bd:b0:
4b:b4:26:ae:3c:14:b9:39:20:6c:11:10:fb:69:a5:
21:6c:0d:46:54:d2:13:e6:85:af:c2:39:c5:ee:10:
27:4d:bf:c4:66:c3:0c:d9:73:0c:e9:eb:f4:04:16:
14:1a:d4:af:44:57:22:1b:db:61:86:85:a2:b6:22:
b6:7d:54:10:d3:15:b2:b5:8d:59:0e:3f:1e:1f:e4:
11:f2:3e:f0:17:ae:48:24:38:e6:50:c4:7d:39:4e:
14:72:d8:3b:97:79:c8:f1:77:27:fc:da:e1:03:6a:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:29:F5:67:E0:1E:51:68:81:11:A6:3A:E2:18:B2:8B:7C:00:E5:CF
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/OSn1Z-AeUWiBEaY64hiyi3wA5c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.146.0/24
37.49.149.0/24
94.74.140.0/24
109.203.160.0/24
109.203.162.0/24
109.203.164.0/23
109.203.167.0/24
176.46.128.0/24
176.46.131.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:32:7c:ae:8c:bf:dc:ad:2d:b0:90:45:69:fe:cf:d4:f2:4a:
12:75:a2:5c:80:6d:dc:1a:ab:b2:e2:a9:74:06:e3:51:2b:32:
58:d5:86:09:87:3e:d6:a1:52:4c:c3:a4:c7:4a:47:7f:d8:48:
f1:dd:a8:58:cc:33:b7:5a:62:89:ea:97:fc:a1:53:b5:70:70:
f8:b9:2b:5a:eb:a9:05:fe:83:3c:fc:a0:07:a7:fe:56:31:58:
c3:64:25:3c:9c:7a:91:d3:24:cc:48:89:a3:6d:e7:05:d2:08:
83:0b:3b:1f:99:c0:1d:0d:4a:a9:55:f1:a9:5e:d5:aa:22:ec:
06:3f:7e:57:d2:4b:2d:ee:55:7c:67:3c:9c:de:af:82:15:4e:
15:60:ed:c6:17:0d:6d:60:79:98:7a:3d:93:cc:8e:3f:34:c9:
a7:62:a2:85:ec:f3:84:d5:11:fe:a3:15:c8:35:3b:8b:eb:20:
5d:ad:0d:b7:c2:e3:57:20:ff:3e:d8:b2:0f:d8:73:44:11:29:
50:54:54:da:b0:64:05:4b:fb:11:f4:a7:f4:4c:d5:01:76:8f:
37:c6:c2:64:0d:3e:d3:89:98:61:0b:b2:be:87:02:e4:89:cd:
fb:f3:47:a2:4b:df:dd:ea:e9:e6:05:35:c8:ae:2c:56:4c:be:
af:06:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:03 2025 by rpki-client