Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/h8ERbabpuCYDfY_pGOinLj41kF0.roa
File: h8ERbabpuCYDfY_pGOinLj41kF0.roa (raw, json)
Hash identifier: Fz81edfdG7NQ9MT475JyGSF/qc1onVRUj27TxfFcUGU=
Subject key identifier: 87:C1:11:6D:A6:E9:B8:26:03:7D:8F:E9:18:E8:A7:2E:3E:35:90:5D
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018CC94E162280D174B40AB57BE9C8C2AA9E
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/h8ERbabpuCYDfY_pGOinLj41kF0.roa
Signing time: Tue 02 Jan 2024 08:33:06 +0000
ROA not before: Tue 02 Jan 2024 08:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207252
IP address blocks: 37.114.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:16:22:80:d1:74:b4:0a:b5:7b:e9:c8:c2:aa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 2 08:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87c1116da6e9b826037d8fe918e8a72e3e35905d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b3:71:ab:fb:e1:14:82:5c:58:01:6c:b0:d0:
3f:37:97:9d:aa:f7:a0:40:90:e3:70:35:cf:8b:4d:
16:9d:92:6c:de:6f:ff:89:1f:12:17:af:76:56:11:
bb:b7:48:9a:24:cc:7b:1d:17:33:69:c4:bd:e2:cc:
22:5a:84:55:4f:17:79:9c:59:f8:4e:2d:e2:c8:0a:
59:1c:63:e2:12:a7:3b:69:f6:c1:fa:cc:29:c2:70:
ae:97:1f:6a:a0:77:d4:0a:a0:52:ae:7c:58:c6:90:
fa:61:60:46:e0:6d:6e:2a:d3:c3:cf:84:03:29:b5:
19:8b:ae:a9:2f:cf:48:cc:7b:e1:06:11:0a:6b:4e:
09:95:96:6a:7f:3a:74:ab:c2:ef:c9:69:49:1f:d1:
ef:87:26:d5:c8:9f:5a:2a:07:6b:e1:21:32:c4:57:
d9:33:b0:6e:4e:5c:1f:e4:1b:6d:0f:0d:6f:78:1e:
29:13:69:50:b0:5e:f4:f1:23:de:50:eb:1a:f2:0c:
60:46:0f:f3:25:6f:f6:94:f1:03:ff:44:9c:a2:4e:
a8:81:94:2b:ab:b5:44:84:e0:3f:d4:c6:74:3c:3a:
6e:b6:7b:ad:73:66:71:8f:85:57:c8:49:1f:a9:7b:
94:13:62:81:a3:4d:ee:26:3d:12:42:7a:85:ac:5e:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C1:11:6D:A6:E9:B8:26:03:7D:8F:E9:18:E8:A7:2E:3E:35:90:5D
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/h8ERbabpuCYDfY_pGOinLj41kF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
36:9e:67:ed:22:c0:74:10:28:21:79:60:44:c2:6f:16:43:83:
15:a8:73:f4:7a:80:cd:47:9d:04:b3:65:2d:12:a7:06:26:40:
ef:ce:ec:b5:3a:38:e4:47:fd:95:05:6c:4e:71:03:76:aa:d1:
7f:54:8a:a2:9f:1e:1c:29:21:a8:e8:52:8f:d9:96:9d:ed:a2:
c5:b8:90:15:7c:2c:17:8a:bc:e4:7f:81:37:49:69:08:29:0c:
07:b1:22:5d:9e:09:00:e8:3a:18:b5:71:3d:b1:96:f3:4b:6e:
2b:e6:71:53:66:54:b5:f3:c9:1a:3a:55:18:93:60:70:0f:9b:
96:20:02:40:a2:bb:08:58:f5:5e:5e:a7:92:1f:da:30:b7:8a:
1b:8b:5c:0b:07:ff:11:fb:ce:f0:49:a4:87:d2:e5:23:50:73:
0a:26:4e:54:a9:46:58:4b:e7:87:ac:2c:d5:fc:d5:00:62:f4:
e4:29:c1:7c:a2:df:08:26:d9:40:6b:8e:9f:3c:46:a8:4e:76:
de:21:c0:d9:1c:ff:98:f5:74:f3:c7:a7:fc:7f:87:a1:80:16:
e6:4e:eb:49:d2:0d:48:32:40:7a:8a:cb:66:a2:f6:67:08:63:
90:88:6f:3d:ae:76:84:9e:40:52:33:f2:d6:4d:d1:02:26:7e:
87:52:4f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 15:22:06 2024 by rpki-client on console-fra.rpki-client.org