Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/C6_edELfej1gWISWGdRD5u5k5Uk.roa
File: C6_edELfej1gWISWGdRD5u5k5Uk.roa (raw, json)
Hash identifier: awUsdQFjOlcXkGrtjS3VEpYTUcWH6ugJ1o7yU6YQGYs=
Subject key identifier: 0B:AF:DE:74:42:DF:7A:3D:60:58:84:96:19:D4:43:E6:EE:64:E5:49
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E144A0F3C78DB63EE5BDA6862DCD8C7AE
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/C6_edELfej1gWISWGdRD5u5k5Uk.roa
Signing time: Wed 06 Mar 2024 15:03:01 +0000
ROA not before: Wed 06 Mar 2024 15:03:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 37.77.147.0/24 maxlen: 24
37.140.221.0/24 maxlen: 24
45.90.197.0/24 maxlen: 24
45.93.22.0/24 maxlen: 24
62.233.44.0/24 maxlen: 24
89.106.202.0/24 maxlen: 24
91.132.226.0/24 maxlen: 24
185.11.63.0/24 maxlen: 24
193.109.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 15:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:4a:0f:3c:78:db:63:ee:5b:da:68:62:dc:d8:c7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 6 15:03:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bafde7442df7a3d6058849619d443e6ee64e549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:35:54:bf:5a:36:2f:36:ae:81:e8:67:b2:63:
de:7f:1d:e8:d6:46:3d:a6:83:f5:03:0b:30:01:f6:
3e:19:a5:ab:53:49:ef:85:ff:0c:78:b8:e7:08:b1:
dc:de:fe:89:6e:90:d2:00:e1:ab:8d:8b:ed:6f:af:
03:70:e5:54:3e:41:2a:36:8e:8c:be:e2:9e:11:da:
e4:c5:74:bf:12:4a:52:53:1e:18:b7:f0:3a:04:fb:
8e:7b:96:8f:22:7b:62:89:64:22:63:ec:73:13:d3:
3f:fc:1b:93:27:54:10:19:d9:07:cf:b8:7f:b9:c9:
17:2c:90:30:98:15:ec:4e:e1:a5:82:7a:fc:f4:7f:
6a:a4:d6:a5:69:67:df:6a:c9:d9:46:a1:f6:dd:96:
a1:dd:de:de:74:fa:a0:16:02:3c:08:23:b3:01:db:
77:90:67:83:1f:c1:bd:3c:62:2e:fe:04:89:7a:4a:
66:a7:ca:51:df:04:23:d1:c5:5a:fb:ba:e4:90:e3:
9d:70:ce:7a:64:41:d5:3c:5a:1e:15:10:3b:ca:a7:
40:a3:b6:89:e5:83:62:f3:24:9d:09:ba:9f:f4:ed:
5c:df:61:df:79:dc:24:42:ce:a0:ec:10:c3:fe:f5:
4d:d8:d7:e0:ba:a1:c3:7c:a4:b6:b3:2e:50:c7:55:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AF:DE:74:42:DF:7A:3D:60:58:84:96:19:D4:43:E6:EE:64:E5:49
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/C6_edELfej1gWISWGdRD5u5k5Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.147.0/24
37.140.221.0/24
45.90.197.0/24
45.93.22.0/24
62.233.44.0/24
89.106.202.0/24
91.132.226.0/24
185.11.63.0/24
193.109.213.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b7:da:8c:40:7f:1d:fc:85:f3:e1:3c:76:3a:6b:46:c9:34:
cd:c0:d4:ee:14:60:bc:1f:c5:a2:df:e9:e6:d6:57:85:5f:01:
41:99:c2:0e:b1:9e:78:ec:fa:68:44:3f:5b:a0:51:e4:29:05:
41:3e:16:10:c9:69:96:c9:3e:02:56:74:39:8b:b0:0c:39:0f:
4b:ab:66:99:cd:31:7b:ac:51:93:35:db:5c:9b:ee:a4:2a:32:
70:32:18:7c:ba:ab:69:c0:62:05:b3:9c:79:cb:d0:e2:d9:38:
5b:31:76:2f:72:f9:ba:16:70:8b:63:19:f5:07:24:ac:73:72:
71:bb:0b:d9:3d:13:8e:5e:24:f2:54:75:5a:31:00:81:30:74:
10:83:5d:f1:23:66:7f:13:7e:d8:61:82:06:6b:15:f1:6f:38:
f0:7a:ee:f6:a4:d1:1e:df:6b:36:67:2b:05:3a:46:b2:f4:4d:
2b:2c:ad:1f:70:df:6d:c9:1e:2d:90:de:a0:dd:63:50:9e:1a:
2e:b2:62:64:2a:94:d6:5c:f9:77:01:37:c2:d6:77:78:8a:94:
30:64:75:60:3b:1a:24:c4:ef:e5:75:c9:35:41:87:b2:3a:e7:
47:7f:db:84:7b:47:ef:c0:7c:11:d0:30:31:8b:ed:fd:b3:26:
e6:3a:6d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:48 2024 by rpki-client on console-ams.rpki-client.org