Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/7mGRVSaPvseNjKpEf3_7SAdm6NI.roa
File: 7mGRVSaPvseNjKpEf3_7SAdm6NI.roa (raw, json)
Hash identifier: ySYezUbqSF/DU/G5qYec3fWaECisU6B1EOdvbpAT2+4=
Subject key identifier: EE:61:91:55:26:8F:BE:C7:8D:8C:AA:44:7F:7F:FB:48:07:66:E8:D2
Certificate issuer: /CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
Certificate serial: 01932602AE4296D220DEB3D982D6D3A72AE0
Authority key identifier: 92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/7mGRVSaPvseNjKpEf3_7SAdm6NI.roa
Signing time: Wed 13 Nov 2024 14:52:10 +0000
ROA not before: Wed 13 Nov 2024 14:52:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41268
IP address blocks: 37.235.128.0/17 maxlen: 17
93.186.96.0/20 maxlen: 24
185.140.160.0/22 maxlen: 22
193.203.60.0/22 maxlen: 24
2a03:2c00::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 13 Nov 2024 21:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:26:02:ae:42:96:d2:20:de:b3:d9:82:d6:d3:a7:2a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
Validity
Not Before: Nov 13 14:52:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee619155268fbec78d8caa447f7ffb480766e8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:c6:2c:11:61:64:7b:69:c2:e1:61:4a:c5:
52:90:3b:a7:ff:14:8e:8e:97:7c:ec:65:a2:cb:06:
15:17:b0:df:92:6c:bc:11:63:2c:53:e7:42:f5:99:
3b:11:49:81:fe:87:e3:bc:55:0b:d8:d0:1f:5e:7b:
ca:74:4b:b1:6d:cf:9c:fe:64:05:c4:85:a2:f8:2b:
3b:0d:31:87:d9:4b:26:25:2f:b0:9b:9f:c9:26:3c:
c2:29:75:67:6c:5f:2c:81:ad:66:52:77:c9:86:ed:
b3:26:63:6e:82:d9:29:19:5c:6d:d2:6b:4e:fd:10:
5f:1a:79:97:be:8b:b5:82:73:51:a7:3f:38:cd:1b:
8f:aa:22:c8:78:77:1b:f3:88:79:0f:b9:5a:05:98:
99:84:a7:cd:1a:bb:25:66:94:86:b9:09:44:ce:e3:
1e:35:17:08:dd:67:71:fc:b7:c0:d4:ce:14:f5:ce:
77:d9:5f:39:7e:1d:ec:bd:88:30:55:91:48:c2:e0:
ad:72:e2:7e:fa:0d:7c:25:77:22:f0:8e:10:d9:ce:
67:44:6a:78:39:84:24:91:4c:e5:72:0c:a3:c2:71:
34:21:87:ec:b7:65:bb:b6:81:1c:51:0a:1f:32:64:
d9:75:37:14:27:67:fd:b0:b0:34:9c:67:c3:65:2e:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:61:91:55:26:8F:BE:C7:8D:8C:AA:44:7F:7F:FB:48:07:66:E8:D2
X509v3 Authority Key Identifier:
keyid:92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/7mGRVSaPvseNjKpEf3_7SAdm6NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.128.0/17
93.186.96.0/20
185.140.160.0/22
193.203.60.0/22
IPv6:
2a03:2c00::/32
Signature Algorithm: sha256WithRSAEncryption
ab:59:c0:d0:88:fb:11:31:77:2f:81:c8:a0:d3:18:d0:db:1e:
7c:8d:13:9b:b5:60:df:ad:d8:b1:b1:9d:c2:dd:c1:11:24:ae:
d4:af:e5:5a:73:16:88:e5:f1:1c:d7:cb:82:00:8a:8d:d3:02:
8b:e6:12:af:9b:8e:a7:34:d5:e3:8d:42:53:f2:fa:fc:6a:3f:
4a:e4:36:ff:5e:f8:86:e9:4d:85:b0:e7:f6:45:9e:20:bb:c7:
c4:27:e4:e8:e3:78:27:c9:a8:69:1b:cb:30:6d:c0:f7:a2:d5:
68:35:51:e3:b8:10:1d:3c:36:99:38:ba:b4:97:47:89:56:f2:
62:b8:0f:35:10:92:29:35:f8:5c:37:0a:95:f1:a4:87:c0:5b:
39:85:5d:9c:21:1c:c9:27:fb:ba:37:f0:f4:f2:b4:de:86:b1:
7c:93:c5:37:da:4b:fa:74:25:ca:c3:15:21:51:27:57:a1:b3:
97:2f:32:95:f2:c1:15:88:e3:0f:33:a8:b1:da:5b:6d:be:6d:
d5:a0:02:ad:93:15:05:3f:91:bd:bc:be:59:95:14:90:76:c4:
c7:ef:83:16:17:5f:7b:e4:59:26:4c:c9:65:8f:6a:08:77:fd:
4b:22:a3:1a:9c:61:88:c6:8f:c7:f5:53:73:c0:3d:af:b2:f3:
77:0b:76:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:20:20 2025 by rpki-client