Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Ug8ggJiIdLhAM8WyFwCiXP2c3S4.roa
File: Ug8ggJiIdLhAM8WyFwCiXP2c3S4.roa (raw, json)
Hash identifier: ozPmxKLKrFnXqW8jPjROYfA3g1Ef9Nb2Q0GDozc0l1Y=
Subject key identifier: 52:0F:20:80:98:88:74:B8:40:33:C5:B2:17:00:A2:5C:FD:9C:DD:2E
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01938B9926298BC437DFC3FD5A1FE59A6A3C
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Ug8ggJiIdLhAM8WyFwCiXP2c3S4.roa
Signing time: Tue 03 Dec 2024 08:18:10 +0000
ROA not before: Tue 03 Dec 2024 08:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203446
IP address blocks: 37.114.41.0/24 maxlen: 24
37.114.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:99:26:29:8b:c4:37:df:c3:fd:5a:1f:e5:9a:6a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Dec 3 08:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=520f2080988874b84033c5b21700a25cfd9cdd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:55:f4:e4:9e:7a:dd:08:a7:51:09:2c:65:
92:7d:ce:cb:71:4e:29:0a:7f:4a:0c:2a:67:b9:80:
8d:67:6c:e5:9e:e6:02:66:c0:0b:d3:df:34:4e:43:
61:0e:e1:35:f4:2c:50:8b:51:81:18:a6:27:ff:cb:
4a:0e:67:9e:f4:18:35:02:7b:c9:2b:49:d6:3a:0d:
dd:40:88:e1:49:ac:45:1e:57:ac:4a:fd:d4:a2:8c:
66:5e:40:9a:44:f8:6c:96:9e:08:6a:db:b7:2f:14:
59:9a:b8:95:2f:ac:a6:7f:42:b2:b7:25:ab:0a:c7:
fd:6b:9b:51:58:fd:2c:13:8c:3d:e7:bd:af:b0:9f:
74:f3:b4:97:10:a7:1d:5e:d1:2e:0b:3d:93:42:fb:
18:5a:b0:ff:08:59:b6:a4:df:52:4a:0f:de:b3:4d:
ad:d8:ac:9b:82:86:cd:36:df:22:eb:30:e9:67:65:
88:b1:96:58:dd:8e:42:d6:ce:5d:9d:60:95:ce:6e:
91:52:0e:27:6f:b5:89:08:b9:20:a2:ec:1a:d4:42:
fd:9f:fd:ab:9b:d8:e5:d0:69:f5:9c:e5:90:42:37:
62:a4:4b:92:18:1c:85:c4:ef:77:e3:4b:03:7c:9a:
90:72:5d:88:ae:21:66:7e:87:25:5d:53:97:35:47:
ff:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0F:20:80:98:88:74:B8:40:33:C5:B2:17:00:A2:5C:FD:9C:DD:2E
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Ug8ggJiIdLhAM8WyFwCiXP2c3S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.41.0/24
37.114.46.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b0:2f:e3:c4:80:57:c3:c6:b4:62:16:7c:8d:f6:f7:03:b4:
58:10:c2:0b:08:dd:f8:7f:e5:8c:40:15:44:2c:1a:c6:82:79:
2b:9d:b1:c1:24:24:b7:d9:ad:d3:91:36:83:dd:fe:47:07:cc:
d0:69:95:46:fa:3d:93:c9:56:c0:f0:4c:07:15:d5:22:06:e6:
e0:c9:e8:c3:fe:a1:6f:21:2b:79:ba:46:39:9d:ae:27:1e:95:
16:e1:77:9b:35:49:c4:70:3b:28:5a:23:8d:4b:d8:43:63:94:
66:5d:b8:95:82:15:3c:de:6f:ce:28:66:84:de:a7:1a:b9:c8:
d8:3f:bc:54:da:98:65:af:d1:ce:2d:3a:ef:9b:6b:d4:5c:00:
77:70:29:e5:db:3e:86:aa:91:47:86:ba:c3:21:e7:30:fb:28:
79:a0:4e:d9:e5:93:26:c1:cd:91:1a:2e:26:26:c9:83:fe:09:
f1:84:cc:71:95:ee:4f:e4:60:56:4b:2c:3e:ce:5b:51:42:04:
f2:4f:fb:32:a5:c4:ea:53:f4:4c:41:81:a3:c9:01:a7:50:c9:
43:4d:89:81:ac:c5:10:0a:24:d5:27:8b:00:b6:c5:9b:7f:92:
23:f1:8e:11:5b:ef:58:ed:7c:79:52:e4:64:83:bb:97:f2:dd:
34:4f:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:34:37 2025 by rpki-client