Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/IIxBvTw6eSxsq8_Fzz9fqGbgt84.roa
File: IIxBvTw6eSxsq8_Fzz9fqGbgt84.roa (raw, json)
Hash identifier: Hk9ahaFafgctPzlC5wj/CDt0Zea0nv9n0Iz8yi3kq8s=
Subject key identifier: 20:8C:41:BD:3C:3A:79:2C:6C:AB:CF:C5:CF:3F:5F:A8:66:E0:B7:CE
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 0190920F3C6217CBA960A42B7483650DA54E
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/IIxBvTw6eSxsq8_Fzz9fqGbgt84.roa
Signing time: Mon 08 Jul 2024 11:16:30 +0000
ROA not before: Mon 08 Jul 2024 11:16:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35766
IP address blocks: 37.130.204.0/22 maxlen: 24
37.130.204.0/23 maxlen: 23
37.130.204.0/24 maxlen: 24
37.130.205.0/24 maxlen: 24
37.130.206.0/23 maxlen: 24
37.130.206.0/24 maxlen: 24
37.130.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 06:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:0f:3c:62:17:cb:a9:60:a4:2b:74:83:65:0d:a5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jul 8 11:16:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=208c41bd3c3a792c6cabcfc5cf3f5fa866e0b7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:42:73:b1:b4:16:c1:f8:d6:c6:9a:5a:da:
af:a7:f8:0e:5f:06:96:4a:4c:f5:67:a4:f3:19:4b:
6b:91:db:ca:88:e5:08:61:69:6f:04:e4:66:53:3b:
e0:3a:07:88:62:a4:88:39:22:43:23:e9:02:b1:3c:
69:92:f3:35:4b:d8:c8:b8:f2:68:e6:5b:51:fe:e4:
4c:f3:c9:35:0d:b4:63:70:3f:f5:18:0b:19:31:92:
b4:7d:2f:21:d1:dd:73:be:b4:a7:34:88:06:61:18:
2e:36:cb:20:17:4b:33:2e:fc:6a:1d:1b:df:7a:bd:
07:49:4b:09:c3:40:db:2c:2d:be:96:c2:4c:1d:9f:
a3:63:89:55:15:fe:af:82:30:bc:99:fa:73:58:a7:
12:2e:09:27:43:cf:34:69:74:14:ce:2b:aa:5a:7c:
46:bc:8e:54:2a:3a:59:74:3e:2f:33:62:6a:6e:99:
db:79:ee:cb:32:62:d9:c0:0f:a6:31:3e:8b:8e:c6:
7c:29:3d:90:a2:11:e9:23:7e:64:32:96:d3:f7:bc:
26:40:0f:76:1e:55:b7:2b:e0:a8:21:02:9b:c5:48:
87:e4:b4:3d:db:69:b5:69:c4:9a:97:13:bc:9f:bb:
58:45:33:56:78:92:a1:6d:5e:9d:4c:3a:d5:26:b8:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:41:BD:3C:3A:79:2C:6C:AB:CF:C5:CF:3F:5F:A8:66:E0:B7:CE
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/IIxBvTw6eSxsq8_Fzz9fqGbgt84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.204.0/22
Signature Algorithm: sha256WithRSAEncryption
43:c8:7e:fe:50:92:df:5e:6a:04:26:a4:68:c7:a1:a7:30:49:
33:21:52:f9:65:cd:9b:58:e3:a5:e2:ba:e2:0f:af:77:c4:dd:
bf:d2:a4:ef:89:2e:f0:b0:8d:3d:7d:68:5c:8b:83:38:32:c3:
ca:8a:70:3c:ea:91:9f:1b:e5:0f:89:34:d1:3a:e8:dc:a1:d9:
80:b2:22:3b:0f:46:4d:6e:f1:ef:5b:22:8d:de:e5:af:25:9f:
e2:99:28:25:94:9f:25:d0:b4:0d:56:74:26:d0:0d:d6:13:3b:
d9:b2:dc:db:9e:f2:ba:4f:0c:27:10:ad:4b:82:87:3b:aa:06:
97:2f:f4:1e:9d:74:60:a8:ce:b1:f3:76:a2:81:d6:03:3f:53:
4d:b5:7a:f2:03:ff:dd:b3:80:02:3e:5e:74:18:d2:92:f4:a5:
24:58:c3:9d:1d:bc:05:27:47:12:bf:70:b9:19:e7:97:f5:bf:
29:3d:83:02:37:96:09:eb:30:f5:b6:f1:da:a4:fe:23:94:46:
b3:08:78:0b:6e:ae:12:fa:68:8d:2c:72:fb:1b:60:b5:bd:a7:
fa:db:19:a4:17:c7:69:c3:b2:4b:2e:72:7d:f5:c8:37:2b:f3:
e4:93:da:cc:e3:3f:8e:86:4c:71:59:6b:93:43:18:93:a4:e7:
c3:fb:4c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:07:07 2025 by rpki-client