Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/oEjVTixE8OT9yUUQoVMG2gydrb0.roa
File: oEjVTixE8OT9yUUQoVMG2gydrb0.roa (raw, json)
Hash identifier: vrPQQUvurpoCDZ8mNDeaY14MVJOF50owbA8pihcPah8=
Subject key identifier: A0:48:D5:4E:2C:44:F0:E4:FD:C9:45:10:A1:53:06:DA:0C:9D:AD:BD
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 018CC7276DAFAA2CF425CF53078E7B720F37
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/oEjVTixE8OT9yUUQoVMG2gydrb0.roa
Signing time: Mon 01 Jan 2024 22:31:39 +0000
ROA not before: Mon 01 Jan 2024 22:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207290
IP address blocks: 37.44.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6d:af:aa:2c:f4:25:cf:53:07:8e:7b:72:0f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Jan 1 22:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a048d54e2c44f0e4fdc94510a15306da0c9dadbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:4b:3d:d6:6b:30:5a:9b:9e:e6:db:d2:c1:
b8:72:40:b2:5d:22:43:a6:b1:d2:f4:31:df:6b:3d:
5a:af:3a:10:dd:cd:a1:6a:3a:ae:d9:6c:e9:b8:e8:
98:17:17:7b:de:42:e1:2d:33:af:9f:44:3c:94:1b:
6a:07:c4:a0:47:19:d9:1d:2c:77:ff:45:1c:76:98:
b7:f0:90:af:e7:09:8e:5a:80:d4:15:6f:61:43:c4:
66:9a:15:5f:fa:bc:f6:05:aa:31:fc:b6:4b:50:d2:
b3:0b:83:1d:3b:cc:5f:2a:2a:a8:1c:f7:d6:5e:24:
31:7b:63:20:c4:35:dc:f5:cd:99:03:de:95:78:fc:
d3:3d:02:be:1e:87:8d:0d:ab:18:51:09:fb:6a:79:
b6:09:91:de:08:56:cd:96:89:b3:54:af:ec:a2:d8:
ba:8f:ee:c1:ec:e4:64:02:ac:43:22:bb:36:b3:33:
56:22:73:79:75:24:61:57:3e:31:5f:cb:9f:e0:e5:
52:88:dd:80:73:94:0f:e5:06:54:f0:90:45:dd:e5:
07:63:2f:08:3e:4e:28:3f:fd:e9:7f:70:b8:3e:47:
ed:92:8f:7f:f4:fa:5a:bd:fe:a1:d3:a4:54:7f:a4:
6c:86:2c:20:a9:97:8e:02:78:68:ae:22:e1:e5:3c:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:48:D5:4E:2C:44:F0:E4:FD:C9:45:10:A1:53:06:DA:0C:9D:AD:BD
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/oEjVTixE8OT9yUUQoVMG2gydrb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.240.0/22
Signature Algorithm: sha256WithRSAEncryption
06:08:fc:d3:90:d7:af:0a:a4:dc:79:1c:f5:c2:6f:cc:55:75:
7e:df:0f:49:bf:de:1f:af:bf:4b:dc:5a:f4:d3:83:c3:cf:2e:
cb:f4:71:ce:5c:61:05:dd:38:2b:c0:d1:fd:9b:37:8e:96:b5:
8e:02:ec:99:a4:09:0c:57:3f:35:00:c1:b5:cd:0a:fd:3f:ba:
df:65:7e:e5:a2:07:16:27:aa:38:8b:54:90:3d:d0:f5:7c:72:
da:9f:ea:9f:8a:f9:c8:ef:7c:e8:5f:c8:4b:a6:cf:84:d5:1d:
ab:aa:27:62:38:eb:1f:86:e9:6f:4e:50:3c:61:59:36:2d:62:
f2:a7:be:e5:01:34:13:eb:1b:81:1e:d5:b2:85:5f:7b:ff:ad:
77:8a:f0:a0:d9:78:93:b5:fe:13:7a:a5:29:5f:1f:95:c7:20:
1f:d1:6b:2f:b8:04:c7:5c:19:ef:bb:65:78:f4:a0:e4:b6:3e:
88:99:90:0b:5b:38:42:3c:62:5c:b9:87:56:4b:2b:7f:c0:c5:
f7:42:65:92:bb:ee:ba:f8:9b:30:13:a3:8f:de:f9:1c:35:fa:
f4:40:81:93:ec:f8:ff:f7:54:f4:17:81:22:3f:73:98:7e:73:
f8:17:af:6f:9e:1d:3b:8a:0d:ee:4d:70:f3:35:da:ee:f9:61:
5f:59:ed:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:27 2025 by rpki-client