Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/0CuTd-7q-floFb0FVxw8K6rMcPI.roa
File: 0CuTd-7q-floFb0FVxw8K6rMcPI.roa (raw, json)
Hash identifier: 6Y9wNE3NistK2XOKXOaAQgqwto0753mUWvUtdYlJW3k=
Subject key identifier: D0:2B:93:77:EE:EA:F9:F9:68:15:BD:05:57:1C:3C:2B:AA:CC:70:F2
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018F883289BAEE089501C8E1EE36802735C5
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/0CuTd-7q-floFb0FVxw8K6rMcPI.roa
Signing time: Fri 17 May 2024 20:16:04 +0000
ROA not before: Fri 17 May 2024 20:16:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41944
IP address blocks: 37.114.33.0/24 maxlen: 24
37.114.43.0/24 maxlen: 24
37.114.48.0/24 maxlen: 24
37.114.49.0/24 maxlen: 24
37.114.51.0/24 maxlen: 24
37.114.55.0/24 maxlen: 24
37.114.63.0/24 maxlen: 24
43.251.161.0/24 maxlen: 24
176.100.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 14:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:32:89:ba:ee:08:95:01:c8:e1:ee:36:80:27:35:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: May 17 20:16:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d02b9377eeeaf9f96815bd05571c3c2baacc70f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:b6:0c:ed:d5:5d:4d:b0:3d:d8:da:4e:13:
6d:4f:2b:48:fe:bf:70:16:c2:19:0e:88:d4:6d:36:
d8:aa:95:24:99:2f:43:3a:53:ff:a5:64:e2:51:d7:
4a:66:a1:fe:f2:de:bc:fa:54:70:f1:ef:f5:14:7c:
91:5a:40:30:3f:45:91:b7:d9:69:8b:a5:4d:2c:33:
f8:c0:d1:63:63:a8:2a:0d:f7:d9:b9:05:f0:7c:7d:
4f:f3:6e:14:2a:11:84:0a:29:65:b0:d5:58:e7:68:
70:2e:6a:d5:fb:50:28:26:72:96:31:75:20:a7:ab:
1c:63:e1:6c:9a:a4:51:33:2a:19:28:fa:13:d0:46:
5b:fb:03:11:ac:10:e8:e8:8e:3d:7b:cc:3a:33:bf:
f2:e9:1c:40:7b:cb:bc:bc:b9:ee:2b:1b:4e:32:de:
32:77:3f:38:00:13:b7:f5:0a:30:cb:ec:e4:31:8e:
49:b3:ec:92:d1:7f:ca:24:a5:99:7e:30:fe:ac:3a:
f5:46:2d:6c:4c:6f:cd:4b:a6:8d:aa:1a:8b:61:ea:
fa:d9:be:b5:ba:e0:4a:66:ef:5d:c2:c6:4f:94:e6:
ee:9e:5b:1e:ba:76:9e:2b:d0:bc:57:94:98:1e:45:
e1:cb:d2:3d:c6:31:38:f6:61:cd:82:e3:ee:75:b6:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2B:93:77:EE:EA:F9:F9:68:15:BD:05:57:1C:3C:2B:AA:CC:70:F2
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/0CuTd-7q-floFb0FVxw8K6rMcPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.33.0/24
37.114.43.0/24
37.114.48.0/23
37.114.51.0/24
37.114.55.0/24
37.114.63.0/24
43.251.161.0/24
176.100.37.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a0:5d:45:c0:e1:22:75:0f:c4:51:76:14:de:59:ac:3f:d1:
9d:7a:bb:73:c5:d8:d9:55:e9:25:53:51:9d:21:da:c8:dc:9f:
e0:c6:3f:2d:f6:7b:b6:0c:23:30:1a:ec:b5:84:4d:76:14:25:
1d:02:71:84:6c:7f:22:7c:ca:06:ed:91:3a:3a:c4:4f:c9:c5:
56:39:e7:25:2e:4b:a9:0d:df:ae:f8:c9:f3:67:b0:f8:c9:53:
83:e5:98:d1:6f:bc:d4:03:ed:87:79:e5:e0:68:eb:83:0d:6f:
ac:9e:bd:58:11:97:f8:31:dd:db:a7:bb:bf:ba:0d:1c:35:71:
da:d5:09:c3:56:5c:65:6e:fe:e7:2b:71:ff:82:ca:e8:d5:19:
f4:bf:7c:67:a5:ef:5b:5a:03:7b:0d:8c:e9:9e:7e:0e:e6:d4:
66:f5:e9:0b:30:3f:b6:db:8d:43:45:0d:17:4c:68:f1:f6:13:
91:7f:65:ab:ea:f0:24:68:79:1a:ce:23:55:d9:2f:ab:e7:0b:
a7:b1:c7:96:c0:2a:08:92:9e:f5:f6:1c:73:a8:84:5e:2f:5d:
03:dd:d2:45:f7:1c:20:65:ce:ae:11:0c:f3:ab:46:65:a3:31:
03:af:43:4e:d4:ba:58:a8:90:01:0e:d8:4c:61:74:66:4e:d3:
cf:ff:a3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 16:56:59 2024 by rpki-client on console-fra.rpki-client.org