Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yECDrXvuG-WuwQeBqJDCudpzQV4.roa
File: yECDrXvuG-WuwQeBqJDCudpzQV4.roa (raw, json)
Hash identifier: eZy2gyTlVsp4zbetsBjNM7Cf41zHrR+c5Pxi/FurWNQ=
Subject key identifier: C8:40:83:AD:7B:EE:1B:E5:AE:C1:07:81:A8:90:C2:B9:DA:73:41:5E
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0193B1FE70D615986DAC42743C182B8840F1
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yECDrXvuG-WuwQeBqJDCudpzQV4.roa
Signing time: Tue 10 Dec 2024 19:14:22 +0000
ROA not before: Tue 10 Dec 2024 19:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62300
IP address blocks: 37.221.81.0/24 maxlen: 24
62.192.136.0/22 maxlen: 22
194.32.241.0/24 maxlen: 24
194.61.8.0/24 maxlen: 24
213.109.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b1:fe:70:d6:15:98:6d:ac:42:74:3c:18:2b:88:40:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Dec 10 19:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c84083ad7bee1be5aec10781a890c2b9da73415e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:14:9a:c5:11:ce:be:2b:ca:68:b6:42:43:
55:5f:d7:da:c6:a6:79:04:ac:a3:0d:03:be:1b:34:
65:9e:53:53:a2:63:fb:a9:e1:ed:70:2c:03:11:03:
42:e5:87:6a:aa:57:8f:82:c6:77:6d:7c:e7:1f:3e:
92:28:e5:5e:49:b6:50:b4:7f:87:6d:0a:2b:8a:ef:
b9:72:04:fc:89:2b:7e:59:a2:4c:af:e6:b4:0f:5e:
3b:7b:94:84:98:80:2e:45:e6:af:52:e8:cb:db:a5:
58:97:76:ed:15:f9:62:88:65:c6:fc:5c:25:ba:f3:
08:7c:0a:1e:7f:dc:50:22:ec:90:fa:12:09:c3:1c:
4c:cc:f6:db:e0:49:9f:e5:05:61:05:e8:04:9a:b6:
09:8f:31:04:01:25:03:eb:5d:94:56:af:04:ab:38:
ba:11:52:84:82:61:77:f5:c0:47:72:7a:f9:41:ff:
b5:88:48:e1:4f:ce:f2:f0:d7:4d:9b:c7:82:db:18:
b3:0e:91:20:7d:17:14:0c:86:0f:2e:f1:d5:21:f8:
aa:c7:98:d5:da:6d:5d:47:a1:ea:ae:07:67:e7:c3:
1d:fb:e3:d5:3e:7b:a2:89:49:9e:73:39:0e:b6:60:
cc:06:d2:42:31:60:53:b7:74:13:33:d5:9b:54:f7:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:40:83:AD:7B:EE:1B:E5:AE:C1:07:81:A8:90:C2:B9:DA:73:41:5E
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yECDrXvuG-WuwQeBqJDCudpzQV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.81.0/24
62.192.136.0/22
194.32.241.0/24
194.61.8.0/24
213.109.202.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c7:f8:6a:38:a6:49:16:12:b4:a2:48:6d:3c:77:8e:b1:a7:
d5:ab:a1:1b:73:d6:5e:f5:96:d6:c0:61:62:7b:1d:c9:d6:e7:
1e:05:ac:ec:e5:8f:3d:8f:ec:7b:ff:f5:b3:f2:2c:fd:06:34:
38:bf:c3:d5:50:6f:ef:e9:30:09:88:fa:60:2b:ec:a5:cf:a8:
7b:37:9b:a1:e1:cd:75:45:7c:eb:32:0b:cf:4b:eb:57:7e:cb:
08:a6:27:3b:ad:05:26:8c:e5:89:c2:6a:b0:88:f9:88:f0:08:
32:c4:8f:c7:11:cd:35:77:4c:e5:cb:90:a0:c5:59:1d:23:88:
b7:76:6c:8a:b0:ad:36:5b:98:fb:ca:5c:83:ad:0e:65:0a:ff:
12:d3:c4:4c:92:26:87:e5:1f:2c:de:30:8a:3c:cd:5a:c7:e9:
c0:69:64:7c:27:7c:d6:39:74:26:19:8d:94:0a:c1:0d:ed:8b:
a2:2f:91:4d:df:5c:68:fd:ed:78:57:a6:98:60:f9:78:1f:cf:
5b:6c:c9:0a:0f:63:36:9a:b6:c9:38:34:3d:2e:9b:ca:7e:c1:
a6:cd:ff:76:e6:a4:54:e5:51:a7:3b:29:bc:c0:fd:fe:7c:e5:
02:de:68:49:83:ee:93:8c:10:0d:3b:82:6d:85:d0:ae:55:3c:
9e:cd:86:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:01:45 2025 by rpki-client