Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bihSUXeuzX3nx8GGvMlxF9vmRA0.roa
File: bihSUXeuzX3nx8GGvMlxF9vmRA0.roa (raw, json)
Hash identifier: c/3zAr2tvZ8e8oyICWCffpCbErw7iJi+6HaK5mCCyRc=
Subject key identifier: 6E:28:52:51:77:AE:CD:7D:E7:C7:C1:86:BC:C9:71:17:DB:E6:44:0D
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01856E01BF2290D9478C722F879FA984F1D5
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bihSUXeuzX3nx8GGvMlxF9vmRA0.roa
Signing time: Sun 01 Jan 2023 15:44:46 +0000
ROA not before: Sun 01 Jan 2023 15:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 185.14.94.0/24 maxlen: 24
185.14.95.0/24 maxlen: 24
37.114.36.0/24 maxlen: 24
37.114.33.0/24 maxlen: 24
37.114.35.0/24 maxlen: 24
37.114.34.0/24 maxlen: 24
37.114.38.0/23 maxlen: 24
37.114.43.0/24 maxlen: 24
37.114.42.0/24 maxlen: 24
37.114.50.0/24 maxlen: 24
37.114.47.0/24 maxlen: 24
37.114.48.0/24 maxlen: 24
37.114.53.0/24 maxlen: 24
37.114.57.0/24 maxlen: 24
37.114.56.0/24 maxlen: 24
37.114.55.0/24 maxlen: 24
103.252.88.0/22 maxlen: 22
37.114.61.0/24 maxlen: 24
37.114.60.0/24 maxlen: 24
37.114.62.0/24 maxlen: 24
37.114.59.0/24 maxlen: 24
43.251.162.0/23 maxlen: 23
176.100.33.0/24 maxlen: 24
176.100.32.0/24 maxlen: 24
176.100.34.0/24 maxlen: 24
176.100.35.0/24 maxlen: 24
2a00:ccc1:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 21 Jul 2023 05:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:bf:22:90:d9:47:8c:72:2f:87:9f:a9:84:f1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 15:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e28525177aecd7de7c7c186bcc97117dbe6440d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:17:8c:d6:11:73:ab:63:cd:08:78:15:98:72:
56:8f:b8:ee:66:88:30:45:02:e8:f6:7f:e5:a5:52:
cb:03:2f:8f:75:f7:9c:06:56:5f:ac:68:fd:d1:e9:
16:61:a6:1b:cf:b9:49:d5:84:b3:57:de:b0:41:17:
03:8a:ee:9a:b5:15:a6:b6:bb:57:7d:4c:ab:7b:14:
96:93:e7:df:9e:57:1c:9e:66:be:c8:48:cb:25:e0:
12:71:06:e4:90:08:62:6d:bb:3b:53:ad:f5:41:c0:
39:e4:92:3f:b6:39:75:82:3d:4c:22:9c:5f:11:40:
1c:f3:7e:ce:43:37:bd:38:d8:df:4e:ec:ca:fc:c5:
22:27:6b:45:de:cb:45:66:7e:f8:e2:06:aa:eb:87:
b2:45:f0:e1:b6:0a:a5:ba:4d:3f:6c:48:eb:b3:6c:
94:ce:d1:c9:a6:50:04:fa:40:60:a0:5b:f4:23:3c:
94:7d:a4:bb:fb:d4:6e:fb:ec:6d:18:ef:98:c9:ad:
99:ff:9f:3a:29:01:42:fb:39:a9:26:d4:48:ae:5d:
a7:3e:ff:74:03:af:e8:4b:de:88:1c:58:a9:93:59:
5f:af:fc:8e:1c:73:4a:74:ae:97:25:54:8a:e8:d3:
39:8e:97:12:c6:18:f7:21:32:b5:89:90:c2:ce:2c:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:28:52:51:77:AE:CD:7D:E7:C7:C1:86:BC:C9:71:17:DB:E6:44:0D
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bihSUXeuzX3nx8GGvMlxF9vmRA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.33.0-37.114.36.255
37.114.38.0/23
37.114.42.0/23
37.114.47.0-37.114.48.255
37.114.50.0/24
37.114.53.0/24
37.114.55.0-37.114.57.255
37.114.59.0-37.114.62.255
43.251.162.0/23
103.252.88.0/22
176.100.32.0/22
185.14.94.0/23
IPv6:
2a00:ccc1:100::/40
Signature Algorithm: sha256WithRSAEncryption
47:fc:ee:b6:25:00:cb:d7:99:73:10:d9:bc:01:34:83:e6:e2:
da:75:56:12:1b:05:6b:e0:46:de:85:ca:dd:37:60:8a:65:d9:
49:ee:60:9e:08:7b:a9:7d:e2:1d:98:14:78:78:11:9c:7f:90:
da:bd:c0:03:d1:2b:18:b8:84:57:c3:6a:bb:e2:cc:c7:1c:bc:
d1:99:6a:96:80:bc:f1:af:ba:fe:63:d6:d6:8e:9f:d5:44:50:
6b:7e:aa:fb:eb:3d:32:96:82:e2:53:5a:d1:68:ce:e8:f5:05:
75:df:af:e9:49:e1:45:65:ef:fe:e3:1e:35:88:33:2f:c4:7f:
cd:3d:bf:a0:cd:96:45:29:c1:9d:98:50:85:39:b6:d5:bb:55:
7d:18:26:a0:8b:99:59:37:c2:bf:6a:10:1c:ee:70:2c:4b:cb:
04:a9:57:8a:64:7a:44:e7:c0:ec:2b:bf:5c:05:62:20:ea:0f:
9e:28:f7:6c:93:2e:5d:15:50:aa:ca:e1:eb:1d:09:dd:c4:dc:
ad:35:7c:2c:fb:95:29:05:bf:2d:90:c7:28:64:68:69:7b:7e:
92:83:93:27:f5:ab:60:a8:09:60:59:43:cc:d9:ef:6e:63:94:
65:a1:7c:d1:45:b0:e6:b8:ad:12:18:ee:80:23:e3:59:a5:a1:
5a:58:4a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org