Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/e8XfnCPGTTe1KFZvvRkZPTvDQzs.roa
File: e8XfnCPGTTe1KFZvvRkZPTvDQzs.roa (raw, json)
Hash identifier: WhAlL3HGU4viSMUreYga0vT20ownjLMfDZo0K+UtCr4=
Subject key identifier: 7B:C5:DF:9C:23:C6:4D:37:B5:28:56:6F:BD:19:19:3D:3B:C3:43:3B
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0190EE37FC3E610A25D6F49253E58F392D89
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/e8XfnCPGTTe1KFZvvRkZPTvDQzs.roa
Signing time: Fri 26 Jul 2024 08:46:04 +0000
ROA not before: Fri 26 Jul 2024 08:46:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216050
IP address blocks: 37.49.146.0/24 maxlen: 24
37.49.149.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
109.203.162.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.165.0/24 maxlen: 24
109.203.167.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 08:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:37:fc:3e:61:0a:25:d6:f4:92:53:e5:8f:39:2d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 26 08:46:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bc5df9c23c64d37b528566fbd19193d3bc3433b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:3f:e1:8e:33:aa:aa:5e:7c:02:ad:c3:a6:
f2:b1:9d:83:e5:be:ff:7f:af:21:ea:82:0f:c7:3b:
32:0d:8e:65:31:d0:31:35:a7:7f:ab:be:9a:3d:78:
f5:a8:94:4f:f3:40:5c:df:50:ae:44:03:75:fb:37:
41:a9:a5:24:d8:11:89:39:82:f9:a5:15:1b:bf:6c:
a3:40:fa:34:77:a3:35:59:6b:f6:a3:ce:37:c0:98:
6c:f9:78:04:44:c8:17:45:2e:42:d5:8c:07:65:64:
d3:50:fc:94:60:3b:5c:eb:66:a7:96:a9:da:7c:38:
e9:3c:27:e6:fd:33:2f:35:73:b8:f3:85:04:35:48:
01:2e:df:70:e1:56:a8:31:73:ec:90:93:3b:c0:f9:
dd:49:7e:24:26:e1:9d:df:3a:b7:2b:91:e2:74:70:
58:db:e0:08:03:a5:d6:9a:4e:80:3c:d3:92:7b:37:
8e:3b:59:8f:4c:29:62:9e:ac:07:32:b5:fc:91:a2:
f9:64:6d:ca:ad:58:68:a0:5e:b5:36:4e:fa:d5:a7:
3b:3b:d9:a5:1e:53:53:50:d0:1a:f5:e4:b9:36:45:
bf:7c:77:56:53:e9:02:e7:92:1d:65:bb:c9:a5:3b:
c7:ae:b3:32:d4:53:af:69:dc:34:e7:fb:5e:eb:85:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C5:DF:9C:23:C6:4D:37:B5:28:56:6F:BD:19:19:3D:3B:C3:43:3B
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/e8XfnCPGTTe1KFZvvRkZPTvDQzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.146.0/24
37.49.149.0/24
94.74.140.0/24
109.203.162.0/24
109.203.164.0/23
109.203.167.0/24
176.46.128.0/24
176.46.131.0/24
Signature Algorithm: sha256WithRSAEncryption
40:4f:a1:94:7c:13:3d:e0:dc:48:00:d9:59:17:cf:22:9a:58:
cb:29:36:73:b2:b8:0c:c5:6d:c5:88:a5:b6:0a:9f:e0:e3:c2:
e0:4c:e5:54:c4:95:ee:b6:97:94:86:68:03:1a:3a:20:b1:95:
9f:0d:1f:5f:cd:b5:67:22:c0:d7:e1:77:f9:10:9f:a1:a8:3d:
09:3f:0b:f2:0b:77:31:2b:c9:fa:04:98:76:39:10:b4:ac:2c:
92:57:c0:d6:54:f3:ca:53:22:53:4d:ba:9b:f0:05:87:70:4e:
df:01:9e:5a:d7:eb:16:c7:d9:97:b0:b9:b1:a4:9f:ce:d1:7e:
03:95:ce:de:51:5f:21:c0:ff:79:d2:7c:44:6f:da:db:c9:d5:
5b:a2:74:a6:27:e1:3e:97:03:d3:2e:37:e8:28:0f:c5:c7:22:
0f:70:55:32:86:72:08:5a:70:c4:61:fd:7d:d4:6a:5e:39:32:
73:6f:f0:2e:7d:7c:28:21:c7:fd:f1:b8:2f:ac:ad:28:78:c5:
07:0b:63:a3:16:f5:77:a8:77:66:5c:a4:7d:75:c4:82:c0:09:
e3:bb:0e:cf:c1:59:ad:85:36:bd:dc:f6:ac:c9:a9:97:4d:81:
21:49:00:6e:d5:8d:71:1f:95:e9:04:b2:20:bd:75:1e:2d:e1:
1b:13:96:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:49 2025 by rpki-client