Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CdLVwyHrj-vpX-7ylvgLhjR6y8g.roa
File: CdLVwyHrj-vpX-7ylvgLhjR6y8g.roa (raw, json)
Hash identifier: Y2uxiLMyVbQd/TuMX7KHcoEBiAErXVfrKGhaPpzH/80=
Subject key identifier: 09:D2:D5:C3:21:EB:8F:EB:E9:5F:EE:F2:96:F8:0B:86:34:7A:CB:C8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187235E04155235E15F2F2DAB504360E8C0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CdLVwyHrj-vpX-7ylvgLhjR6y8g.roa
Signing time: Mon 27 Mar 2023 13:59:36 +0000
ROA not before: Mon 27 Mar 2023 13:59:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 37.156.5.0/24 maxlen: 24
89.46.42.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.39.125.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 03:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:5e:04:15:52:35:e1:5f:2f:2d:ab:50:43:60:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 27 13:59:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09d2d5c321eb8febe95feef296f80b86347acbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:06:68:96:fe:5b:1a:fd:ae:ac:bd:6a:25:ac:
92:c9:65:99:40:33:05:80:53:c2:96:51:75:11:4f:
68:25:0f:ae:d3:08:cd:0e:8c:65:b7:f6:70:87:b1:
f6:f9:68:46:81:0d:76:61:58:e2:f3:f0:00:b5:b3:
20:54:ae:aa:be:83:7c:75:cf:e6:99:d4:ce:15:ef:
58:74:a7:91:3e:3b:80:31:81:b7:ff:03:44:af:e9:
ea:2b:25:29:14:4c:b7:cd:8e:bd:67:1b:d7:79:3d:
aa:83:40:c7:91:1a:96:fc:9c:af:b6:f9:f4:5b:28:
53:6f:0b:67:93:a9:af:f2:7d:e2:15:17:4c:0b:5f:
04:4a:0d:28:14:0b:83:89:17:dd:fb:f3:40:a4:d7:
45:49:9f:64:de:69:e7:0b:40:d0:9e:45:fe:2f:5c:
0f:83:be:12:48:18:ab:d5:89:b4:70:23:01:fc:00:
1b:1c:34:4e:79:8f:c2:0b:a6:15:a8:a2:d9:d1:68:
aa:ae:68:57:05:88:5b:33:6b:9b:31:86:f7:e3:ba:
c0:ed:dd:61:67:2b:69:7a:6d:ac:76:41:7a:bf:05:
a7:23:5b:df:f4:c2:a2:d2:da:b9:89:bd:d2:a3:ed:
ae:79:f2:5c:32:77:49:eb:6f:2f:9f:62:42:64:da:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D2:D5:C3:21:EB:8F:EB:E9:5F:EE:F2:96:F8:0B:86:34:7A:CB:C8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CdLVwyHrj-vpX-7ylvgLhjR6y8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.5.0/24
77.81.65.0/24
89.34.106.0/24
89.39.125.0/24
89.40.215.0/24
89.46.42.0/24
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
99:90:e2:07:0f:0b:45:0d:d4:0e:93:ff:c2:38:33:2b:71:67:
4b:32:c4:a0:58:4a:22:91:91:a2:38:63:f5:8e:b5:01:c2:e5:
ef:46:42:8a:ea:16:ff:a9:50:94:86:f3:b6:92:2f:eb:24:83:
28:62:07:48:58:06:9b:8d:8a:49:5d:af:9a:be:4a:c7:c7:70:
2f:0f:9c:20:9e:93:ac:98:34:c9:20:1a:bb:97:83:10:a8:79:
38:19:9f:b3:93:34:c7:35:ec:fc:44:8d:62:17:a5:0f:9f:3b:
0e:f3:1e:53:36:eb:bc:db:76:96:60:42:9c:0f:58:70:0e:ce:
3c:88:d3:95:9a:c1:4c:d0:06:6c:90:0e:47:34:b1:50:7e:6c:
48:3f:80:b3:99:95:36:fe:62:15:89:a3:ba:42:19:96:1c:a1:
78:20:0c:74:7e:f5:91:9c:9f:ca:34:86:41:dd:9c:5e:3a:e0:
da:7d:9b:c0:48:8e:ca:58:f0:8b:89:09:a0:4a:1d:b1:78:1c:
7a:31:a2:0d:53:e4:df:28:d4:8f:b4:dc:96:96:8e:d9:5f:66:
89:04:71:2d:38:38:2a:d0:b6:43:cf:cc:ef:f6:2e:2a:a8:5a:
35:d8:44:e7:0b:93:67:8c:94:bd:bf:72:d9:5a:4f:35:44:50:
79:06:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org