Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/RRT3Ku1Z9_GGqK0gL9ZS2SiF1bQ.roa
File: RRT3Ku1Z9_GGqK0gL9ZS2SiF1bQ.roa (raw, json)
Hash identifier: 8bbmbzVYcpWKfWuqq2G7P55307UmEwbUoBntilQMksY=
Subject key identifier: 45:14:F7:2A:ED:59:F7:F1:86:A8:AD:20:2F:D6:52:D9:28:85:D5:B4
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 018CC6B7F1C816033D17814A27E2724C89BD
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/RRT3Ku1Z9_GGqK0gL9ZS2SiF1bQ.roa
Signing time: Mon 01 Jan 2024 20:29:52 +0000
ROA not before: Mon 01 Jan 2024 20:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 37.221.72.0/24 maxlen: 24
37.221.72.0/22 maxlen: 24
2a09:ea00::/40 maxlen: 56
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:f1:c8:16:03:3d:17:81:4a:27:e2:72:4c:89:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: Jan 1 20:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4514f72aed59f7f186a8ad202fd652d92885d5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:2b:1a:44:70:13:59:da:f5:8f:15:6e:c3:
5b:eb:38:17:0f:11:65:e3:54:a6:f7:47:49:72:68:
f8:07:75:ab:22:d5:af:08:75:b6:fb:29:eb:59:59:
8a:f5:62:c2:93:e0:63:22:ce:de:aa:5b:84:80:fb:
8f:68:35:ec:0d:32:26:6f:f1:ba:d8:dd:ba:4d:d5:
11:77:63:75:2d:d7:ed:7d:10:78:aa:7a:90:66:56:
b8:11:95:bf:86:c3:ff:40:4a:5d:d3:d0:c6:62:dc:
3a:d7:70:38:0e:e4:17:ab:4c:27:37:c1:cf:0e:92:
05:27:61:9e:fc:69:d5:d0:f7:1a:ef:09:d9:fe:8d:
4d:75:af:b1:f4:10:d2:02:ba:ee:50:52:c0:4a:c9:
18:ea:22:da:db:f5:6c:65:1c:be:9b:2f:8c:2f:5c:
7c:ea:a6:1f:9f:76:52:a7:99:07:94:47:8f:f3:ef:
b2:94:9c:a1:1c:06:8c:cc:e1:35:9f:34:a3:50:38:
80:b4:e6:7c:3e:6f:3b:b7:76:91:32:c8:c8:49:82:
73:76:e7:8e:be:77:e0:62:b5:51:58:e6:84:df:d3:
10:d8:c3:e3:cf:a9:86:f2:b4:ae:f6:55:cd:bd:dc:
c6:90:fa:da:e8:6d:f2:dd:43:23:bf:b2:94:8b:ad:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:14:F7:2A:ED:59:F7:F1:86:A8:AD:20:2F:D6:52:D9:28:85:D5:B4
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/RRT3Ku1Z9_GGqK0gL9ZS2SiF1bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.72.0/22
IPv6:
2a09:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
32:21:6c:f8:a6:44:17:86:b6:d7:22:fc:36:2f:83:7a:cc:e9:
99:fe:00:47:1a:c0:c1:26:be:b2:78:5d:bd:8c:a8:e7:cd:6d:
c1:bb:6d:38:b8:74:67:84:24:e8:7b:e2:fc:cc:ec:75:c6:35:
5c:4a:82:49:d7:4a:9b:83:bd:cb:61:74:8c:2d:08:86:3a:67:
dd:b9:0a:ed:d0:c6:dd:7e:44:85:80:85:1d:73:82:8b:f2:e6:
a2:79:7b:f4:83:d2:e6:71:08:18:95:7b:3f:8e:96:f8:6b:d9:
c4:52:18:31:9c:4b:ba:37:7a:ea:15:56:75:2f:ee:0a:34:f5:
c2:2a:fd:b9:bd:50:d4:c3:ba:3a:72:50:1f:78:d0:19:c4:47:
2f:f4:a5:cf:45:a2:7f:10:99:6f:2a:e5:ec:26:74:d0:75:f4:
0b:41:4b:9e:0b:82:c5:82:e0:e1:53:01:b5:b8:8b:90:99:c6:
bd:48:f2:74:3e:c2:dd:1a:1b:36:b5:ae:d4:64:ed:22:d7:a9:
e4:25:c8:53:6e:26:b2:89:98:a7:a8:d4:8c:76:54:54:4b:25:
a8:c1:ad:45:f1:e4:66:31:57:ab:f6:d5:9e:ff:4f:87:18:79:
77:a2:2f:00:8c:f0:a9:c3:89:71:13:e0:f9:9b:8f:c9:f1:0e:
5b:dd:63:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:19 2025 by rpki-client