Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/crzj1Si7tZBROop2l9Ph8pyAyvA.roa
File: crzj1Si7tZBROop2l9Ph8pyAyvA.roa (raw, json)
Hash identifier: KURl78cFdc5Dq0dBK6CkjNCeXNea4/JsRVMoGldR8Cw=
Subject key identifier: 72:BC:E3:D5:28:BB:B5:90:51:3A:8A:76:97:D3:E1:F2:9C:80:CA:F0
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 0185CABF29CDF3D509938F282019487ECC1E
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/crzj1Si7tZBROop2l9Ph8pyAyvA.roa
Signing time: Thu 19 Jan 2023 15:56:43 +0000
ROA not before: Thu 19 Jan 2023 15:56:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48314
IP address blocks: 37.114.53.0/24 maxlen: 24
37.114.57.0/24 maxlen: 24
37.114.62.0/24 maxlen: 24
37.114.61.0/24 maxlen: 24
2a00:ccc1:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Apr 2023 09:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:bf:29:cd:f3:d5:09:93:8f:28:20:19:48:7e:cc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 19 15:56:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72bce3d528bbb590513a8a7697d3e1f29c80caf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:a2:c4:2c:0b:c1:b0:81:00:ba:4d:8f:cd:
b2:b0:52:16:67:d3:18:79:95:55:20:79:ac:9b:da:
28:ed:db:38:ea:05:2f:0d:cd:b0:60:92:1b:73:65:
72:7c:8e:63:e4:49:9f:b9:69:5c:c4:a5:ab:77:ad:
2b:e9:c1:2c:28:83:17:38:6a:a6:6e:12:e1:90:10:
1f:1a:ac:ec:32:59:4c:44:28:d5:00:0d:4a:9f:da:
43:26:b0:58:96:f6:e4:15:76:a9:80:31:66:62:2e:
cb:2b:fd:c0:b3:5c:d0:d9:07:76:5f:ae:81:75:19:
e2:10:e1:30:11:c9:42:f8:3d:60:b6:a8:7c:6d:00:
ac:88:d4:2c:3b:77:92:e8:f1:da:04:a9:c5:5f:d9:
3c:12:9d:26:99:18:cf:4e:63:e5:27:b4:6c:a3:96:
fb:97:ec:5c:b4:e6:b0:4f:ce:0b:2a:b6:0e:03:3c:
43:5e:dc:49:72:1b:f5:2d:8e:f6:73:f2:31:a9:83:
2e:49:e5:18:99:d4:db:17:08:cc:94:80:12:4a:a9:
b9:22:d6:d4:d2:5a:ad:f9:69:10:85:c7:7d:76:e3:
b4:45:e3:b4:f0:1d:65:d0:25:a1:02:45:e6:81:1d:
aa:d6:dc:0d:01:88:bb:ba:82:9c:c0:4b:4a:d2:a5:
05:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BC:E3:D5:28:BB:B5:90:51:3A:8A:76:97:D3:E1:F2:9C:80:CA:F0
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/crzj1Si7tZBROop2l9Ph8pyAyvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.53.0/24
37.114.57.0/24
37.114.61.0-37.114.62.255
IPv6:
2a00:ccc1:5::/48
Signature Algorithm: sha256WithRSAEncryption
63:b4:df:05:ab:4a:3a:07:c0:57:ef:94:67:48:9f:09:52:c9:
cb:90:68:d0:e5:d6:71:5b:99:c0:89:be:bd:12:e4:b7:bd:52:
7d:c1:61:47:c0:69:26:9e:80:80:2b:42:b7:b2:62:c2:08:50:
7a:cd:c9:3b:ad:17:18:ae:6b:79:ba:2a:d6:f9:4f:e2:79:2b:
8b:96:8d:ab:3e:7c:90:c7:86:b5:a2:fe:74:eb:12:75:fe:aa:
ab:dd:c9:b5:da:24:2f:60:ca:14:10:36:34:ad:93:30:f1:b1:
62:c5:44:ea:14:0e:ea:2e:a0:9a:6d:b2:96:ec:e7:74:1b:bb:
6f:9f:ae:13:49:7a:8a:b2:34:a2:66:9b:ba:18:c9:ed:51:9d:
87:89:3e:e0:de:eb:68:10:15:19:7b:6a:2b:9c:59:94:64:cf:
b7:90:30:a2:05:66:be:71:24:12:d0:b2:6c:a8:70:cd:17:19:
78:4c:6d:d0:22:ad:09:ef:8b:65:20:59:a9:60:7e:46:74:1d:
90:78:3b:1e:d3:c9:8e:2c:23:a2:64:06:7d:e8:8f:8a:84:9c:
cd:cd:2e:91:8a:7c:ac:90:64:a6:cc:aa:ff:b8:af:89:b2:db:
de:b5:c1:b3:2b:e3:b5:26:35:4f:2b:0a:e0:cd:27:27:96:da:
76:cf:2e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org