Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/shnAe-K_t0qmJZbPuPnNBJLER54.roa
File: shnAe-K_t0qmJZbPuPnNBJLER54.roa (raw, json)
Hash identifier: +6EdhTOzAIj0zFGpIot0eHJ20hHbUDEiQvibG5ALZKg=
Subject key identifier: B2:19:C0:7B:E2:BF:B7:4A:A6:25:96:CF:B8:F9:CD:04:92:C4:47:9E
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DE6B3A9BB9FE048290A5FE96BDEA2978C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/shnAe-K_t0qmJZbPuPnNBJLER54.roa
Signing time: Mon 26 Feb 2024 18:35:50 +0000
ROA not before: Mon 26 Feb 2024 18:35:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 37.77.147.0/24 maxlen: 24
37.140.221.0/24 maxlen: 24
45.90.197.0/24 maxlen: 24
62.233.44.0/24 maxlen: 24
193.109.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 14:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:b3:a9:bb:9f:e0:48:29:0a:5f:e9:6b:de:a2:97:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 26 18:35:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b219c07be2bfb74aa62596cfb8f9cd0492c4479e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:12:9f:e4:63:8e:ff:9a:f3:02:63:bf:bd:
47:0c:29:d0:cb:0a:43:f1:a8:e4:e3:4d:f9:91:5e:
f0:32:37:50:89:c1:9a:41:89:a3:7a:b8:30:7f:7d:
41:24:07:00:aa:dd:12:6a:64:20:83:ec:a9:ad:89:
59:bd:57:a4:29:2b:f8:df:88:68:57:04:0a:60:f8:
4d:e9:6c:87:5b:77:7f:65:70:53:00:69:4a:a1:2a:
c2:5b:e9:61:8d:58:e1:78:ff:ea:06:2e:5d:89:4b:
1d:cd:d5:8c:9e:46:37:42:28:bd:b5:81:c1:ac:7c:
71:2b:99:5e:b3:2a:a6:dd:67:89:8d:02:bc:d7:08:
dc:e5:27:15:2d:69:60:4b:67:ce:ea:3b:a6:10:fb:
59:ec:64:4e:1d:dc:72:07:cf:c1:27:a5:29:4b:74:
e5:85:27:29:19:cb:92:5d:ac:8c:aa:72:d6:85:42:
f5:11:7d:88:56:9c:9e:35:8f:69:77:5f:4d:d7:88:
06:26:5c:b6:ca:05:a3:94:07:ef:57:47:ea:bf:b2:
e0:d0:46:08:a3:1d:c2:1e:13:3d:c4:e4:3f:a0:44:
3d:72:82:62:fa:ff:00:5e:ed:4c:48:6a:5b:27:f5:
7f:d3:dd:21:b9:cc:23:5b:63:f9:7e:f8:57:cd:2e:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:19:C0:7B:E2:BF:B7:4A:A6:25:96:CF:B8:F9:CD:04:92:C4:47:9E
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/shnAe-K_t0qmJZbPuPnNBJLER54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.147.0/24
37.140.221.0/24
45.90.197.0/24
62.233.44.0/24
193.109.213.0/24
Signature Algorithm: sha256WithRSAEncryption
55:24:52:a1:e3:fe:e1:d3:43:0f:18:10:65:f6:39:8d:b1:8f:
c9:1a:39:48:92:71:e3:f8:84:4a:70:18:91:cd:61:66:6c:ac:
cf:1c:53:47:b1:af:63:a8:88:7d:bb:82:e8:6e:9c:96:da:ff:
9a:a0:f4:e3:30:28:da:21:95:a7:69:3d:92:66:dd:21:00:81:
6b:6d:ca:35:74:a3:13:b3:79:20:0c:f3:60:bc:2f:8b:4c:98:
00:54:3b:23:48:0c:06:2a:87:1e:17:52:e2:42:ed:43:f4:c7:
9e:1d:47:e2:51:1f:60:48:8a:93:77:6f:a6:10:74:f6:b5:eb:
dc:cc:61:b4:30:4e:b4:33:1e:9e:05:11:a7:cc:7d:39:66:44:
7e:24:21:8a:cd:ea:54:41:e9:ed:c4:f4:6c:03:cb:39:77:96:
2e:05:c7:da:bb:80:c1:8a:8d:68:a1:f3:06:40:0b:8e:57:b6:
78:2c:ae:6b:3c:84:04:a1:15:47:d4:13:f5:21:ab:53:18:c3:
88:81:8f:d1:7c:e1:30:c5:98:3a:43:0d:55:74:58:6f:99:8c:
fd:98:ad:aa:cd:a6:fa:9a:86:f4:a6:93:ff:b1:ce:d5:74:22:
51:c0:70:4f:ce:44:a8:ff:bc:16:5f:8b:6f:22:55:1a:61:09:
ea:16:c6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 16:39:21 2024 by rpki-client on console-fra.rpki-client.org