Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/tirEVpaXIvcdv3SEFMcgWYVdJOU.roa
File: tirEVpaXIvcdv3SEFMcgWYVdJOU.roa (raw, json)
Hash identifier: HCa0tKYL/Mur7HkVFXfE//ogjG4bNJCIPv89cz/OWZI=
Subject key identifier: B6:2A:C4:56:96:97:22:F7:1D:BF:74:84:14:C7:20:59:85:5D:24:E5
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018E432336C3DC193A5F9BBCA9F694CB1A30
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/tirEVpaXIvcdv3SEFMcgWYVdJOU.roa
Signing time: Fri 15 Mar 2024 17:22:45 +0000
ROA not before: Fri 15 Mar 2024 17:22:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57433
IP address blocks: 37.114.32.0/19 maxlen: 24
37.114.32.0/24 maxlen: 24
37.114.37.0/24 maxlen: 24
37.114.44.0/24 maxlen: 24
43.251.160.0/24 maxlen: 24
43.251.161.0/24 maxlen: 24
43.251.162.0/24 maxlen: 24
43.251.163.0/24 maxlen: 24
94.154.48.0/21 maxlen: 24
94.154.48.0/24 maxlen: 24
94.154.49.0/24 maxlen: 24
94.154.50.0/24 maxlen: 24
94.154.51.0/24 maxlen: 24
94.154.52.0/24 maxlen: 24
94.154.53.0/24 maxlen: 24
94.154.54.0/24 maxlen: 24
94.154.55.0/24 maxlen: 24
176.100.32.0/21 maxlen: 21
176.100.32.0/24 maxlen: 24
176.100.39.0/24 maxlen: 24
185.14.92.0/24 maxlen: 24
185.14.93.0/24 maxlen: 24
2a00:ccc0::/32 maxlen: 32
2a00:ccc1::/32 maxlen: 48
2a00:ccc1::/48 maxlen: 48
2a00:ccc1:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 05 Apr 2024 15:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:43:23:36:c3:dc:19:3a:5f:9b:bc:a9:f6:94:cb:1a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Mar 15 17:22:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b62ac456969722f71dbf748414c72059855d24e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:42:4f:db:b9:76:88:03:a1:ae:00:be:74:
12:23:6f:38:9f:d4:7a:fc:c2:d9:28:5d:c5:f8:d5:
f2:85:4f:d8:27:6d:2f:62:54:53:46:4b:b3:70:2c:
f1:fe:4d:57:30:3c:e0:9a:c8:80:7d:27:05:b7:dc:
26:47:0d:5b:e6:e4:4c:b6:9f:9e:78:76:1b:16:a7:
0d:73:6c:8b:f6:e2:66:18:31:b0:f6:94:f6:00:4a:
14:f0:68:e0:f3:be:4f:0d:47:03:4c:b9:1e:a8:4c:
15:49:60:eb:d3:6f:b1:1e:75:52:b7:fa:da:29:de:
36:26:a8:29:56:27:d2:2f:e5:1f:15:4f:7f:b7:61:
fe:ad:f6:87:27:a6:9a:48:b0:88:d8:f1:9a:b8:4f:
e9:a3:9b:11:cf:2c:c1:2f:6c:6e:b9:27:53:ec:ee:
8f:8a:2d:1a:ff:4d:30:24:fc:59:5b:62:0d:60:77:
a8:1c:08:14:90:bc:84:63:fb:2c:f5:1e:99:74:99:
51:c0:f6:a0:5d:02:8f:b8:14:f4:21:f4:1a:83:84:
e9:94:27:0d:44:ba:1c:84:d5:2c:b4:d8:c8:89:12:
e1:8e:60:d1:b0:26:90:fc:6b:de:08:98:76:a6:a3:
2f:d3:dc:3e:94:16:00:3d:1a:0a:68:c7:a0:22:d1:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2A:C4:56:96:97:22:F7:1D:BF:74:84:14:C7:20:59:85:5D:24:E5
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/tirEVpaXIvcdv3SEFMcgWYVdJOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0/19
43.251.160.0/22
94.154.48.0/21
176.100.32.0/21
185.14.92.0/23
IPv6:
2a00:ccc0::/31
Signature Algorithm: sha256WithRSAEncryption
c4:4c:d1:6c:2b:fe:7d:b8:04:dd:f9:ef:0b:33:f4:7b:b6:7d:
a4:45:f9:86:ef:ca:2d:e0:38:67:3b:7f:1f:bf:71:0b:47:4a:
4e:15:2a:86:09:a6:8e:01:1e:54:fd:5d:82:38:89:21:df:76:
f0:86:c7:62:e5:26:0c:0f:94:21:a2:c7:2a:c1:2e:23:5c:0e:
3d:c8:0d:6a:9d:83:7f:a1:34:48:d1:09:ca:71:63:07:73:53:
42:8f:a5:47:13:fe:75:86:34:30:a3:8d:ed:ad:a6:f1:96:04:
2f:c2:1e:f0:d2:b3:e4:e9:25:66:8c:4a:53:79:25:8a:1a:93:
5e:d1:1c:6e:14:18:76:3d:2b:10:d6:fb:74:5b:64:51:a4:ee:
bb:3b:5a:76:8f:84:aa:de:4b:e8:46:31:9e:1b:62:10:0d:03:
ec:bb:96:2b:04:d4:d7:71:7b:dd:cb:d2:15:3a:d3:e7:6f:46:
ae:ee:b7:5a:de:b9:e5:a2:ba:51:14:d6:08:95:fd:f3:09:28:
b4:09:7a:90:c1:bc:12:14:5a:93:99:04:17:82:7f:fd:5e:61:
c8:4b:d1:7e:88:1a:5a:59:0b:16:e1:d4:09:2d:89:46:b7:5b:
fd:83:cb:7f:ac:3a:84:c2:c0:86:dc:38:84:80:61:7d:c0:0f:
bd:00:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org