Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/vXND_x7skyTvt7ZsSyPIENyMNR4.roa
File: vXND_x7skyTvt7ZsSyPIENyMNR4.roa (raw, json)
Hash identifier: dbx/+n9QBAyqXHuZB5TrNksmeXPfw8rZibK3OeMiU6Y=
Subject key identifier: BD:73:43:FF:1E:EC:93:24:EF:B7:B6:6C:4B:23:C8:10:DC:8C:35:1E
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018CC6B8A25E153087793CA3CAE680A8734D
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/vXND_x7skyTvt7ZsSyPIENyMNR4.roa
Signing time: Mon 01 Jan 2024 20:30:38 +0000
ROA not before: Mon 01 Jan 2024 20:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47531
IP address blocks: 37.202.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a2:5e:15:30:87:79:3c:a3:ca:e6:80:a8:73:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 1 20:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd7343ff1eec9324efb7b66c4b23c810dc8c351e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:c9:8f:29:56:39:70:2c:58:de:4c:c7:1a:
58:aa:c2:24:6f:a1:3e:90:f6:83:2b:fe:4e:e8:5e:
a5:4c:91:38:43:da:4d:f7:2e:7c:b0:a7:f7:6b:89:
0e:c6:2c:a4:2d:93:a1:44:0e:cf:27:fd:0a:2b:5a:
cd:c5:d0:4a:a4:ba:50:cf:64:d7:25:92:26:7d:30:
60:32:41:41:06:b8:ef:92:dd:2c:75:0d:c5:fb:61:
24:5a:91:7b:9d:ae:a5:79:61:d9:93:04:25:37:df:
71:d3:97:7a:08:b3:73:6d:b2:00:78:79:ba:c4:fc:
9f:31:48:df:99:84:c9:b7:c3:73:a3:3c:ad:12:d3:
90:be:51:f8:d9:54:6f:d5:ce:32:a6:12:f7:ac:15:
d4:5e:2b:22:73:e5:2a:e6:f9:41:0c:0c:11:c9:77:
5e:b3:e9:5f:5f:8e:36:33:03:22:5f:15:fb:0c:0f:
cf:76:fd:ef:66:40:47:4c:1b:f0:72:74:1d:db:2d:
20:4d:66:fa:09:05:dc:67:c3:b1:0a:6e:c1:a6:ec:
8c:fd:02:38:ca:80:a6:b4:6d:3a:f0:c2:51:2a:b6:
32:1b:a4:7d:bf:88:62:0c:c9:20:0d:c6:21:fe:2b:
93:3f:71:7b:11:91:50:75:9c:18:1a:a6:2f:95:ef:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:73:43:FF:1E:EC:93:24:EF:B7:B6:6C:4B:23:C8:10:DC:8C:35:1E
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/vXND_x7skyTvt7ZsSyPIENyMNR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.8.0/22
Signature Algorithm: sha256WithRSAEncryption
38:a0:a6:88:8e:a1:3d:5e:c1:45:d3:97:76:8a:7f:1c:be:36:
4d:7f:02:56:08:16:c5:5e:01:6f:70:e1:3e:55:5d:1d:30:e9:
00:39:4e:32:8b:24:80:a2:05:5d:b2:05:9e:51:3b:a0:18:40:
03:76:a2:bb:e8:ea:50:d0:3e:6a:d6:02:83:2e:40:c0:15:ef:
bc:61:01:ff:d3:f7:f1:bd:f5:e2:b1:b8:05:be:4d:a2:11:22:
1c:ad:0d:65:9b:96:78:93:01:b5:93:90:54:8d:b7:3b:60:b0:
41:8a:2e:73:75:c2:bf:38:01:e4:af:1c:95:7c:b8:b1:05:41:
86:f7:7b:ca:f7:0c:ad:e3:cf:df:42:ce:1d:78:c9:9d:bc:bf:
c6:1c:70:dd:70:f4:09:24:5d:d0:57:96:92:2b:55:cc:07:b4:
3f:f0:4c:db:38:d5:97:20:d0:69:d3:e0:ea:bd:79:25:35:da:
fa:f5:2c:1f:35:3c:ad:72:e7:56:b5:76:9b:55:7c:6d:58:1e:
5c:67:e5:6e:1a:c8:7f:42:bb:30:1b:ce:6c:b6:ed:4d:1d:63:
48:68:d6:33:c6:a8:0b:1b:15:1e:da:d5:3f:ae:a9:e1:5a:68:
0f:34:0d:0c:46:c1:5c:f2:a4:b4:81:23:a5:ee:7f:e1:06:bf:
d4:0e:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:19 2025 by rpki-client