Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/h7M6URUkWLYqDxwKpvnW24Fhljc.roa
File: h7M6URUkWLYqDxwKpvnW24Fhljc.roa (raw, json)
Hash identifier: XsVkfV8DBnBcw1BFx2Cd8PoswI1DNsULelRpnhyjQbc=
Subject key identifier: 87:B3:3A:51:15:24:58:B6:2A:0F:1C:0A:A6:F9:D6:DB:81:61:96:37
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01856E01BDD76679BCEF3E0BBE1AB5D30CC5
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/h7M6URUkWLYqDxwKpvnW24Fhljc.roa
Signing time: Sun 01 Jan 2023 15:44:45 +0000
ROA not before: Sun 01 Jan 2023 15:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41944
IP address blocks: 185.14.92.0/24 maxlen: 24
185.14.93.0/24 maxlen: 24
43.251.161.0/24 maxlen: 24
43.251.160.0/24 maxlen: 24
176.100.37.0/24 maxlen: 24
176.100.36.0/24 maxlen: 24
176.100.38.0/24 maxlen: 24
37.114.33.0/24 maxlen: 24
37.114.43.0/24 maxlen: 24
37.114.48.0/24 maxlen: 24
37.114.50.0/24 maxlen: 24
37.114.49.0/24 maxlen: 24
37.114.51.0/24 maxlen: 24
37.114.55.0/24 maxlen: 24
37.114.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Sep 2023 08:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:bd:d7:66:79:bc:ef:3e:0b:be:1a:b5:d3:0c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 15:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87b33a51152458b62a0f1c0aa6f9d6db81619637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:c9:38:0e:ce:45:c9:16:48:df:f0:c5:25:
c5:bf:52:d2:67:91:8f:82:0b:76:41:ba:b9:f7:eb:
35:bd:6d:d1:ed:69:c1:e3:2f:c0:eb:f2:5c:03:4a:
90:60:8a:ee:ce:bd:47:06:93:c9:f9:15:c4:1e:e7:
f4:90:8b:ba:46:14:e5:52:32:ef:4b:4e:7c:82:a7:
df:ad:91:20:cf:b8:5a:a1:92:7e:92:f6:f7:80:a5:
3f:b5:f7:3f:e5:1d:bf:b6:76:5d:50:a7:1c:fe:ab:
13:20:2a:a1:6c:51:9e:e2:1d:7f:fa:f0:15:f5:0c:
76:de:f4:06:c5:23:93:25:7b:a9:64:f3:d8:59:5b:
67:17:6a:2f:29:cd:c9:89:36:39:87:01:4a:55:aa:
86:32:2e:c5:c2:de:f2:8e:26:80:83:8a:d1:53:b2:
02:9d:35:29:c5:60:c8:bd:55:cb:26:91:7c:47:3b:
9d:6a:2d:71:0c:7d:2e:ca:7f:1c:8c:03:29:a4:5d:
54:7f:d0:fa:48:d9:2d:b6:e9:1c:df:c1:d2:03:c3:
a7:5c:7d:38:ea:ed:db:47:f0:72:d8:74:08:79:6a:
95:22:92:06:50:64:7c:71:28:27:6f:02:6e:89:86:
87:e4:3a:3b:f7:af:25:4d:a7:5c:82:ef:bb:78:67:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B3:3A:51:15:24:58:B6:2A:0F:1C:0A:A6:F9:D6:DB:81:61:96:37
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/h7M6URUkWLYqDxwKpvnW24Fhljc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.33.0/24
37.114.43.0/24
37.114.48.0/22
37.114.55.0/24
37.114.63.0/24
43.251.160.0/23
176.100.36.0-176.100.38.255
185.14.92.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:85:84:46:9d:cc:6b:ba:9b:8d:84:48:72:f0:5a:4d:7c:a5:
39:e7:43:69:a1:38:4f:c5:61:49:22:b1:bc:25:37:ca:e1:94:
21:73:7d:5a:a5:66:f0:cc:d2:d9:84:93:e4:4e:33:25:39:d1:
ec:8f:0f:8c:ce:eb:b7:b4:4e:70:6b:10:07:7e:6e:d5:2b:b9:
c3:a9:7c:4b:40:5d:e9:13:8a:e2:89:88:79:fe:02:a9:92:14:
42:c2:6d:d5:44:f1:7c:3a:5c:fc:76:16:07:12:36:60:63:07:
f7:62:f5:bc:37:26:0a:f4:c0:0f:b4:3d:23:e5:80:9a:7b:74:
d6:55:87:55:5e:f6:38:b0:8e:eb:fe:48:59:37:94:2c:7d:3d:
2e:d0:08:df:ab:f0:8c:83:02:77:15:f3:dc:51:68:98:e3:5b:
36:7b:ae:d8:68:41:be:e4:2b:e5:d8:af:68:f5:da:88:4a:b7:
62:d3:c3:36:aa:28:72:c5:07:b5:ba:c9:d4:3f:57:37:8f:1e:
65:fc:e9:25:60:4a:01:0a:25:68:f6:42:61:a7:8f:8c:44:48:
18:d2:48:a1:90:95:20:35:b6:75:1e:30:f1:d5:a8:0f:32:24:
2b:71:6f:56:2f:bf:3c:d1:9b:9e:db:1f:db:54:ed:a6:f2:a8:
ee:9e:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org