Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/bTAudQntxuv5OAjxQL_WNd9Qlkk.roa
File: bTAudQntxuv5OAjxQL_WNd9Qlkk.roa (raw, json)
Hash identifier: dm76yQVtXmF889TfFbNa3nvCP7CVkM5I+yE9KlbZVog=
Subject key identifier: 6D:30:2E:75:09:ED:C6:EB:F9:38:08:F1:40:BF:D6:35:DF:50:96:49
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A31139003CE9984965FC2725EC7CC
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/bTAudQntxuv5OAjxQL_WNd9Qlkk.roa
Signing time: Tue 02 Jan 2024 12:33:31 +0000
ROA not before: Tue 02 Jan 2024 12:33:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
37.128.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jan 2024 08:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:31:13:90:03:ce:99:84:96:5f:c2:72:5e:c7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d302e7509edc6ebf93808f140bfd635df509649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:42:61:d9:3d:bd:13:e7:d0:37:83:eb:b1:00:
24:2c:14:a4:8a:32:4c:6f:36:8b:e9:90:58:ba:86:
f7:af:f0:1e:52:5a:19:57:dd:ad:1a:2f:08:00:5e:
db:3f:c7:35:1b:63:7f:ce:8f:dd:f5:00:63:50:4f:
61:5c:54:22:60:94:e8:c1:49:b7:e9:db:64:99:7a:
b9:8b:a1:6e:4f:95:1f:69:e8:c4:65:7c:88:d3:d2:
50:f0:4b:a1:40:58:38:09:93:ed:6a:cd:23:72:ea:
e8:d1:2c:4d:2a:3c:ac:e1:d7:fc:df:0b:2b:70:4c:
77:8a:d3:a0:bf:db:81:eb:43:57:72:9e:a4:41:fd:
a3:81:03:e9:b9:33:63:52:0f:35:9c:50:f7:5b:c1:
a5:b4:1e:3e:38:94:1d:76:50:71:a0:99:6e:22:e5:
94:bf:9b:f4:9f:f5:55:e2:47:d0:1e:f8:63:f8:4a:
06:a9:ee:a8:83:7c:91:bf:5d:a6:96:44:28:b6:d1:
48:42:03:dd:ea:03:c2:04:22:87:f2:0a:4d:81:54:
75:2b:6e:65:56:d5:99:f3:1e:0c:e3:6d:86:bd:35:
dc:71:78:eb:74:e2:4f:54:9a:da:a7:fa:de:77:3e:
c2:d1:78:3d:f5:b6:63:27:0d:7f:b5:3c:50:ea:b5:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:30:2E:75:09:ED:C6:EB:F9:38:08:F1:40:BF:D6:35:DF:50:96:49
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/bTAudQntxuv5OAjxQL_WNd9Qlkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
109.111.32.0/20
176.221.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:07:5c:bd:cc:55:63:99:c3:d3:ce:51:86:f0:02:f6:98:7d:
ca:21:0f:5f:e7:34:82:21:f2:c5:49:69:9c:52:cf:69:d0:d4:
89:4d:b4:c7:ca:80:fb:91:89:10:8d:8b:cc:4a:a6:89:09:51:
b6:5e:b0:70:64:ee:4f:1d:1f:99:12:fb:ca:5a:6c:46:66:53:
1f:14:01:94:60:88:be:23:a7:f3:d9:7c:55:6b:79:f0:be:b8:
44:e1:b2:d1:6e:e8:e0:03:08:01:a4:62:5a:35:44:36:a4:64:
29:02:10:c6:5b:fb:50:db:ee:cb:95:41:73:a6:e7:22:48:10:
4e:28:3a:ca:59:9e:d0:f9:1c:a5:2e:b7:ad:1d:4f:25:b3:ff:
23:0c:05:d5:9d:e3:ac:ae:4a:bd:bb:5d:e2:17:c3:9b:13:b4:
cc:f7:84:c1:d9:e0:5d:a6:95:f4:80:1b:ec:3f:5c:f6:79:3d:
9b:87:89:07:11:e1:b5:f2:b9:ee:19:c1:bd:e7:28:6d:3f:ea:
6c:a1:f7:57:21:4e:bf:98:18:b0:69:8a:e1:10:ec:f6:e7:6e:
9b:eb:c5:62:3b:bf:8b:90:ec:ee:04:59:43:b5:4b:b9:cb:a2:
59:e9:32:17:99:c6:0c:c4:3a:d4:27:54:ce:65:43:5c:a8:8e:
ae:c7:65:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:33 2025 by rpki-client