Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/RtjTM7UYaguH-dsF8ZvwGNmZ-Bo.roa
File: RtjTM7UYaguH-dsF8ZvwGNmZ-Bo.roa (raw, json)
Hash identifier: EAsH5owDMqG4VHJfopRqig9PiqHyaVlztw+n+SNPMeY=
Subject key identifier: 46:D8:D3:33:B5:18:6A:0B:87:F9:DB:05:F1:9B:F0:18:D9:99:F8:1A
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 0194CC6DF7C059DDC8F127B77EED2C0795A1
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/RtjTM7UYaguH-dsF8ZvwGNmZ-Bo.roa
Signing time: Mon 03 Feb 2025 15:29:06 +0000
ROA not before: Mon 03 Feb 2025 15:29:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398748
IP address blocks: 37.228.148.0/22 maxlen: 22
37.228.148.0/24 maxlen: 24
37.228.149.0/24 maxlen: 24
37.228.150.0/24 maxlen: 24
37.228.151.0/24 maxlen: 24
2a06:1c40::/32 maxlen: 32
2a06:1c41::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Feb 2025 15:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:6d:f7:c0:59:dd:c8:f1:27:b7:7e:ed:2c:07:95:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Feb 3 15:29:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46d8d333b5186a0b87f9db05f19bf018d999f81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:32:3d:32:f2:5b:3f:a9:77:6d:48:c8:f3:
d2:8c:e2:95:b6:ad:be:e6:95:da:fe:c4:2e:21:73:
38:cb:72:e9:82:14:78:a2:d8:ca:3a:ed:5a:48:64:
e2:72:aa:b9:3b:e5:01:58:c3:65:75:f8:12:e2:aa:
46:75:e3:60:09:db:20:4d:ee:08:85:31:99:1e:2c:
c0:82:3b:39:c4:cb:f6:bf:6b:32:a3:6a:90:0f:67:
d1:17:04:c0:8d:d6:46:73:f9:8c:47:c3:d2:ea:63:
30:73:13:5f:3a:cb:99:81:fd:9c:ef:5f:82:54:2a:
d3:e8:9f:21:9f:c1:38:da:cc:cb:e4:29:d8:d0:01:
83:af:e1:c6:0b:d0:68:42:39:1e:95:d2:45:1a:95:
ec:3c:2e:a7:1d:be:5e:ed:a8:7a:01:6c:9d:4d:58:
1d:03:68:de:51:96:83:db:76:72:c8:a3:fe:c1:b8:
65:aa:e1:8f:9e:63:7c:95:d4:a3:0b:61:06:90:df:
90:c8:37:f1:98:44:15:c9:97:4f:c6:44:73:e7:74:
ab:c1:ed:2b:47:36:88:ff:85:5b:bb:83:db:57:45:
47:74:59:6c:bb:2b:ca:00:58:ae:9a:a7:c6:4f:33:
4d:ac:00:bc:7a:c0:d2:dd:7a:57:a0:64:62:a0:36:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D8:D3:33:B5:18:6A:0B:87:F9:DB:05:F1:9B:F0:18:D9:99:F8:1A
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/RtjTM7UYaguH-dsF8ZvwGNmZ-Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.148.0/22
IPv6:
2a06:1c40::/31
Signature Algorithm: sha256WithRSAEncryption
a6:9e:44:19:6c:83:1e:75:6d:bd:0b:eb:9d:a7:8e:7c:92:f6:
a8:60:e7:98:69:41:d3:ea:e1:e4:dd:b3:c9:16:75:40:06:2d:
6b:a2:42:2e:eb:de:6d:08:e8:7b:0b:82:a2:54:36:8c:99:e7:
b5:8c:14:58:fc:76:f9:c9:c5:01:cd:9f:99:3c:b0:8d:f6:53:
a2:84:6e:ab:0e:7b:24:28:b8:94:23:83:99:45:11:cd:5b:bf:
69:de:21:52:62:56:95:91:c2:45:b7:24:b7:a8:74:45:a6:64:
ab:7e:da:da:18:1f:be:3d:35:b3:0c:47:0a:46:b4:58:bd:b5:
dc:30:3b:36:2e:70:f4:5d:0b:ae:38:fb:8a:f3:53:d9:02:ad:
5a:44:28:4c:f0:40:24:05:71:e3:8c:c5:3e:e4:f0:7f:00:68:
2e:67:43:97:36:61:a1:bf:99:0c:d5:66:2b:dc:6d:e3:03:4b:
2b:95:72:13:91:24:f2:8c:d6:bc:b2:b9:15:a9:9d:e6:b7:42:
22:46:54:1c:ba:49:b7:fa:03:78:83:63:a4:c0:30:44:cb:14:
12:50:55:d3:c9:b3:f9:cf:5b:fe:1e:2d:2b:b7:37:9a:a6:cd:
1a:4c:2d:9e:5c:7f:69:84:a0:87:1d:82:be:3f:9a:64:74:de:
fa:51:e2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:18:14 2025 by rpki-client