Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/EBDCpGljpHCJeznV53B2KL2wPuE.roa
File: EBDCpGljpHCJeznV53B2KL2wPuE.roa (raw, json)
Hash identifier: YC1CVV1LwigbcU/7GM66VfzCTJvDI2ughQlLlgFl5jo=
Subject key identifier: 10:10:C2:A4:69:63:A4:70:89:7B:39:D5:E7:70:76:28:BD:B0:3E:E1
Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial: 018943A0B3B3F5FEDC2A5F29D2FA3D3622C1
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/EBDCpGljpHCJeznV53B2KL2wPuE.roa
Signing time: Tue 11 Jul 2023 06:25:52 +0000
ROA not before: Tue 11 Jul 2023 06:25:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200865
IP address blocks: 37.17.128.0/20 maxlen: 20
37.17.128.0/19 maxlen: 19
37.17.144.0/20 maxlen: 20
37.17.144.0/24 maxlen: 24
185.91.16.0/24 maxlen: 24
185.91.17.0/24 maxlen: 24
185.91.16.0/22 maxlen: 22
185.91.19.0/24 maxlen: 24
185.91.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 08:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:a0:b3:b3:f5:fe:dc:2a:5f:29:d2:fa:3d:36:22:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Validity
Not Before: Jul 11 06:25:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1010c2a46963a470897b39d5e7707628bdb03ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:b4:07:86:19:84:2b:6c:b4:bb:2d:f9:c1:
bb:b2:b4:df:c0:fa:41:01:8b:be:35:00:b9:36:8f:
9c:2e:d0:73:80:53:f6:0e:a6:90:86:fd:55:99:c9:
7f:e3:6c:2e:32:4f:5a:f1:7b:31:d0:19:db:5b:ee:
a5:c8:8a:fb:24:d8:20:23:2b:25:6e:43:d4:f6:1c:
19:1e:dc:e5:00:b3:5c:ee:ea:e9:a0:6c:0e:34:25:
9c:12:a3:9b:f0:12:3f:58:77:c4:8e:4b:ae:6c:fa:
6b:66:1d:27:ac:ee:94:04:68:22:ad:ab:6b:19:db:
e6:06:9f:e0:65:eb:35:60:89:50:ba:33:18:72:ee:
b8:2f:f1:24:e3:02:b1:77:d7:da:16:73:d7:2c:4f:
de:7a:eb:e7:f6:15:c9:9b:1d:6e:a8:c8:76:7f:1c:
26:83:12:d2:b4:fc:d4:f3:79:3b:d2:e4:ca:83:0e:
23:24:28:85:fb:ec:4a:63:95:bc:1a:4a:3b:08:8d:
05:04:92:8a:fc:da:a1:22:60:69:93:94:2d:9f:3b:
d7:ae:97:00:85:89:4f:5c:05:bb:06:09:63:a3:8e:
38:d8:80:9c:da:6b:1d:30:92:30:e2:12:14:79:bb:
fb:0a:66:45:28:fc:e0:f5:bc:34:57:3e:c5:fb:08:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:10:C2:A4:69:63:A4:70:89:7B:39:D5:E7:70:76:28:BD:B0:3E:E1
X509v3 Authority Key Identifier:
keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/EBDCpGljpHCJeznV53B2KL2wPuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.128.0/19
185.91.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:5f:ee:a7:20:37:0d:ee:46:ff:17:9e:29:6e:3a:c8:64:01:
c2:e3:1a:4a:cc:e3:e9:8b:79:5c:4d:74:53:ce:17:63:24:d3:
eb:9b:cb:25:7b:9e:ab:64:70:ef:01:3a:cb:7c:df:87:1f:8e:
d8:dc:28:e3:ec:90:ba:7a:1c:ef:f4:e6:9b:ac:c1:8c:89:4b:
99:fa:c2:ca:15:98:f1:79:07:87:16:9e:18:b6:da:3f:88:2a:
1a:6a:26:43:a3:32:f8:b2:3b:36:f8:5a:ab:44:a9:96:65:c2:
c3:b7:08:96:5c:a9:55:71:2e:41:bd:da:08:97:6e:c7:13:92:
3b:28:c6:b0:72:d1:d2:67:e2:bb:3e:b1:8a:60:d1:2d:03:7b:
e1:3d:de:7e:36:81:08:6c:cc:80:19:e5:fb:b3:47:59:a3:0a:
62:5b:d2:65:b2:86:cd:08:1c:03:b5:1e:c2:81:f7:0a:8e:df:
d5:ee:ba:4e:a9:3b:13:4d:ba:dc:85:78:b1:c1:a3:9c:b0:90:
38:84:67:21:09:5c:4e:20:95:32:f4:dd:d7:cd:c1:d2:4d:ad:
34:60:16:dd:c2:39:ef:cb:e5:c2:6e:0b:23:48:d4:9d:4b:0b:
31:0d:96:48:1e:1f:cc:62:fd:54:8b:b9:2c:c3:2e:73:14:ef:
ed:a4:f4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:02 2024 by rpki-client on console-ams.rpki-client.org