Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/scnDf2WCNfwaKfAuDNEPSsslsxo.roa
File: scnDf2WCNfwaKfAuDNEPSsslsxo.roa (raw, json)
Hash identifier: A4riGFJOJn3JsQqFV8qUXBAN1n9Jvf2EVT5zyoDWB+g=
Subject key identifier: B1:C9:C3:7F:65:82:35:FC:1A:29:F0:2E:0C:D1:0F:4A:CB:25:B3:1A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D6D522481785FD50FC3EC4054836718C8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/scnDf2WCNfwaKfAuDNEPSsslsxo.roa
Signing time: Sat 03 Feb 2024 04:55:16 +0000
ROA not before: Sat 03 Feb 2024 04:55:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.140.247.0/24 maxlen: 24
86.107.51.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.34.202.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.90.75.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 04:14:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6d:52:24:81:78:5f:d5:0f:c3:ec:40:54:83:67:18:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 3 04:55:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1c9c37f658235fc1a29f02e0cd10f4acb25b31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:fc:79:0d:1f:a3:b5:4f:de:5e:12:eb:cd:
d1:28:56:f1:f2:55:20:a7:e3:95:ad:fe:22:70:3f:
82:62:f1:c1:65:72:4f:62:cc:5b:d9:ef:52:8f:b0:
5d:a6:51:b0:c7:6f:0c:a7:da:71:66:e8:ca:7d:74:
ff:6c:7f:b5:d0:31:3d:55:d1:0d:0c:cf:35:a9:87:
38:ab:9a:fb:ee:2b:6d:b2:54:e2:38:68:03:46:26:
cc:87:fa:d8:89:13:6b:44:69:0f:d7:37:3d:dd:73:
4f:05:d1:82:97:11:f9:c9:20:5a:15:a4:08:cd:92:
bc:ab:fb:3c:39:b8:00:33:71:17:b6:8b:f8:66:74:
54:f8:83:79:09:53:48:2a:72:23:8f:8b:89:81:31:
15:ba:67:b0:4f:7a:78:86:bd:e5:5e:f6:38:30:97:
6d:51:e5:70:d3:c8:07:be:0e:32:7f:d0:76:9a:37:
ca:6b:3f:68:8e:4f:f3:8e:ea:9e:20:63:7f:e0:07:
d0:a3:db:1b:98:36:5b:a7:23:52:4b:ab:15:a7:59:
b6:4e:d8:8d:33:46:f3:49:8a:ca:94:47:9e:60:4e:
73:ad:91:2b:2a:d4:1b:77:a2:38:af:bf:2d:c7:5a:
0c:86:c4:3e:28:6d:a7:cb:2d:d1:e7:3a:bd:9d:f6:
82:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:C3:7F:65:82:35:FC:1A:29:F0:2E:0C:D1:0F:4A:CB:25:B3:1A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/scnDf2WCNfwaKfAuDNEPSsslsxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.247.0/24
86.107.51.0/24
89.34.106.0/24
89.34.202.0/24
89.34.219.0/24
89.35.129.0/24
89.35.131.0/24
89.37.192.0/24
89.40.215.0/24
89.43.62.0/24
91.132.51.0/24
93.90.75.0/24
93.114.183.0/24
128.0.41.0/24
188.241.137.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c8:e6:34:05:e3:a6:78:e4:20:eb:a5:c8:2b:49:8e:50:98:
61:8a:d7:fc:35:c7:b6:11:fe:aa:83:25:a5:9f:7a:c4:dc:64:
20:ff:44:61:62:b2:5a:d7:e2:48:5b:f1:e7:42:78:b9:c8:38:
b2:de:4e:a8:a5:df:86:d5:7f:fe:4a:76:46:e1:44:3d:2f:d2:
08:19:83:85:05:c5:47:28:ce:c5:ff:49:a4:5a:f3:77:ab:e0:
f5:30:3e:59:ba:24:e2:bd:c6:30:48:1b:e0:79:5d:82:81:6d:
49:cb:b5:79:27:09:b7:9c:14:d4:61:37:21:fa:fb:b7:4a:ab:
e6:9f:eb:18:64:c2:b7:c1:6d:af:bd:80:75:89:b1:d3:1e:ce:
57:45:f2:d1:e8:99:76:f9:cf:aa:38:73:a5:30:b1:d5:23:ac:
21:f8:28:47:39:3c:11:dd:0a:6b:e1:eb:ef:ab:d4:b4:29:83:
4d:8e:ad:f8:65:a5:3c:f2:a6:aa:0a:7b:fa:fb:9b:3e:5b:c4:
ec:5e:dd:c9:73:ed:2b:78:76:13:e4:12:3e:3d:21:a9:f2:29:
4a:98:9f:a7:e5:64:7c:cd:15:45:13:a1:eb:58:7d:16:41:51:
ab:03:be:13:29:29:56:cc:2d:cc:9d:83:1a:53:4f:16:3f:68:
7c:60:a2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org