Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/geXzy5n79kQpjxCtIRcElIDZlGc.roa
File: geXzy5n79kQpjxCtIRcElIDZlGc.roa (raw, json)
Hash identifier: MVaoHu6ETSlNY1M2VcjNb51KYkAvxquXV5xEGNsgR48=
Subject key identifier: 81:E5:F3:CB:99:FB:F6:44:29:8F:10:AD:21:17:04:94:80:D9:94:67
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 0190E4158AA229911774CD540C8785453003
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/geXzy5n79kQpjxCtIRcElIDZlGc.roa
Signing time: Wed 24 Jul 2024 09:32:15 +0000
ROA not before: Wed 24 Jul 2024 09:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204035
IP address blocks: 37.228.132.0/24 maxlen: 24
37.228.134.0/24 maxlen: 24
37.228.148.0/22 maxlen: 22
37.228.148.0/24 maxlen: 24
37.228.149.0/24 maxlen: 24
37.228.151.0/24 maxlen: 24
146.19.118.0/24 maxlen: 24
185.101.92.0/22 maxlen: 22
185.101.92.0/24 maxlen: 24
185.101.93.0/24 maxlen: 24
185.101.94.0/24 maxlen: 24
185.101.95.0/24 maxlen: 24
185.107.192.0/22 maxlen: 22
185.107.192.0/23 maxlen: 23
185.107.192.0/24 maxlen: 24
185.107.193.0/24 maxlen: 24
185.107.194.0/24 maxlen: 24
185.116.156.0/22 maxlen: 22
185.116.156.0/24 maxlen: 24
185.116.157.0/24 maxlen: 24
185.116.158.0/24 maxlen: 24
185.116.159.0/24 maxlen: 24
185.245.168.0/22 maxlen: 22
193.46.24.0/22 maxlen: 22
193.56.126.0/24 maxlen: 24
193.56.129.0/24 maxlen: 24
193.56.156.0/24 maxlen: 24
193.56.173.0/24 maxlen: 24
194.125.248.0/22 maxlen: 22
194.125.248.0/24 maxlen: 24
194.125.249.0/24 maxlen: 24
194.125.250.0/24 maxlen: 24
194.125.251.0/24 maxlen: 24
2a06:1c40::/29 maxlen: 29
2a06:7f80::/29 maxlen: 29
2a06:7f80:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Nov 2024 16:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:15:8a:a2:29:91:17:74:cd:54:0c:87:85:45:30:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Jul 24 09:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81e5f3cb99fbf644298f10ad2117049480d99467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f2:7b:75:08:c2:9f:1b:ae:c6:f3:33:e7:ee:
ac:67:80:01:ff:a5:0d:8c:d1:ef:b6:2c:3f:52:9f:
21:9a:e5:f8:e5:ce:9b:7f:6d:a3:2e:e1:3f:f7:c8:
7b:a8:a6:ca:b8:01:67:f8:ae:d5:6d:a1:c0:26:34:
08:60:73:e2:40:64:00:a5:17:ec:85:92:c9:2b:2d:
2e:d9:e6:ca:78:dc:dd:c0:7f:34:15:39:e6:cb:b0:
66:ac:40:f4:ac:89:d9:18:e1:42:f0:78:bd:d1:66:
cb:ca:5a:ff:34:c2:bb:d1:0b:00:f0:f1:67:f5:92:
95:56:6c:d4:3c:40:35:19:25:ce:88:3b:2b:8a:49:
3d:67:53:75:35:ad:d4:9d:b8:88:38:61:89:e6:83:
0e:5a:2b:2f:83:27:bb:c7:b9:34:24:1c:a1:fc:09:
45:db:4c:60:df:09:a1:e6:ed:89:37:65:6f:fa:63:
16:20:50:34:d7:16:e1:bc:53:fc:07:29:2d:e3:41:
4a:6b:26:26:6c:ed:ed:a1:07:1d:5f:b7:de:21:45:
5c:88:b9:ed:4b:78:09:b1:9e:7b:50:c2:e2:d2:46:
a0:10:71:de:74:64:ce:b6:78:ca:dc:95:b1:92:a7:
4a:b4:dd:9b:2d:d7:5a:db:15:54:8a:3a:ab:61:b9:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E5:F3:CB:99:FB:F6:44:29:8F:10:AD:21:17:04:94:80:D9:94:67
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/geXzy5n79kQpjxCtIRcElIDZlGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.132.0/24
37.228.134.0/24
37.228.148.0/22
146.19.118.0/24
185.101.92.0/22
185.107.192.0/22
185.116.156.0/22
185.245.168.0/22
193.46.24.0/22
193.56.126.0/24
193.56.129.0/24
193.56.156.0/24
193.56.173.0/24
194.125.248.0/22
IPv6:
2a06:1c40::/29
2a06:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
26:6a:43:3d:ed:6c:0f:17:b2:95:e4:b8:3e:c9:c8:82:18:7e:
89:f6:a0:96:8c:00:e2:e3:46:e8:52:85:e0:98:02:95:f6:15:
86:c1:1f:48:d9:85:69:b1:e0:e5:23:c7:dd:32:7b:83:64:1c:
12:eb:f8:7a:01:88:69:d0:d5:59:5b:2e:af:f0:1a:b1:93:3e:
22:13:cd:b2:25:d5:a3:6a:28:c8:80:af:75:4e:41:44:32:1b:
eb:6c:62:07:ae:56:49:ff:91:67:ac:ea:95:58:c0:f9:66:ae:
a6:e8:9a:bb:83:5a:eb:32:b3:b5:84:44:21:7c:53:0a:85:82:
4f:ac:5b:79:c3:cc:6a:e9:8b:b7:77:43:e8:0a:05:00:5b:8a:
e1:c3:6c:1b:6b:f5:5f:45:d4:7c:c0:f5:bf:13:4c:a2:97:c8:
ec:00:1e:f5:17:fc:3a:55:ff:56:96:db:db:5e:05:a6:63:40:
25:78:f6:34:f3:02:6f:fc:bd:fb:b2:ea:14:cd:18:dc:ed:b4:
65:cd:47:9f:37:aa:c7:06:85:5c:37:f5:6b:ee:b0:9e:20:8a:
37:66:9c:d1:e5:1c:e9:0e:3a:9c:94:13:99:ba:b1:d4:1c:82:
9d:06:ca:3f:ee:e1:0b:c4:81:05:ad:87:27:ce:c1:9b:4f:0e:
30:c7:5e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:56:26 2024 by rpki-client on console-fra.rpki-client.org