Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/c74DO4q85DwykL-swAvmdZbfFkE.roa
File: c74DO4q85DwykL-swAvmdZbfFkE.roa (raw, json)
Hash identifier: yNSHZVT9wgs7rpKhEcmN6vxgIjo08X0d4ay77zkO30E=
Subject key identifier: 73:BE:03:3B:8A:BC:E4:3C:32:90:BF:AC:C0:0B:E6:75:96:DF:16:41
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019421B1F3B33B00E05CD9704A8032913F92
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/c74DO4q85DwykL-swAvmdZbfFkE.roa
Signing time: Wed 01 Jan 2025 11:48:17 +0000
ROA not before: Wed 01 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213807
IP address blocks: 37.202.224.0/22 maxlen: 24
37.202.228.0/22 maxlen: 24
37.202.232.0/22 maxlen: 24
37.202.236.0/22 maxlen: 24
37.202.240.0/23 maxlen: 24
37.202.242.0/24 maxlen: 24
94.182.101.0/24 maxlen: 24
94.182.104.0/22 maxlen: 24
94.182.108.0/24 maxlen: 24
94.182.128.0/23 maxlen: 24
94.182.131.0/24 maxlen: 24
94.182.134.0/24 maxlen: 24
94.182.136.0/23 maxlen: 24
94.182.145.0/24 maxlen: 24
94.182.147.0/24 maxlen: 24
94.182.149.0/24 maxlen: 24
94.182.150.0/24 maxlen: 24
94.182.152.0/24 maxlen: 24
94.182.223.0/24 maxlen: 24
185.73.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 12:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f3:b3:3b:00:e0:5c:d9:70:4a:80:32:91:3f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73be033b8abce43c3290bfacc00be67596df1641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:5a:69:8f:a7:77:07:6b:ec:36:29:1f:f9:
e5:be:d0:69:e0:e4:93:ea:4b:a3:02:ef:6d:45:bc:
a4:59:1a:28:33:13:a2:c3:76:13:56:f3:aa:22:b5:
de:e3:ff:50:98:8b:be:a4:fa:42:82:4f:a5:ff:08:
58:0f:97:da:a7:bb:ff:15:c2:9e:4d:88:03:ff:f2:
0e:b4:58:a0:df:50:78:c6:84:67:be:f0:15:ac:88:
4e:63:8c:02:35:7f:e9:83:d0:54:71:3c:03:64:7f:
06:bc:1f:24:4e:d1:c2:c9:f6:9c:ba:68:60:a6:b7:
b0:06:e7:de:2c:38:0f:c7:6a:a9:a9:2a:29:a7:e1:
fc:ae:71:7e:a4:67:24:52:68:f8:28:51:75:dd:e2:
30:a8:ae:d2:cd:96:35:c1:3d:0f:e7:fc:1c:89:15:
4e:ee:05:fb:2f:9f:a6:d2:e6:a3:33:51:57:e6:04:
d2:e8:29:16:c4:3e:ff:94:fb:47:c5:f0:57:37:26:
43:51:d8:5c:ab:64:ad:b4:81:ef:1b:19:49:d3:ca:
ac:dc:af:83:8c:78:b2:e9:61:31:ea:2f:6c:2d:86:
d8:89:15:49:66:4b:35:12:a2:7a:c1:0d:0c:91:e7:
e0:63:5a:38:43:1b:bb:2e:6c:b6:10:f0:31:94:9a:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BE:03:3B:8A:BC:E4:3C:32:90:BF:AC:C0:0B:E6:75:96:DF:16:41
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/c74DO4q85DwykL-swAvmdZbfFkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.224.0-37.202.242.255
94.182.101.0/24
94.182.104.0-94.182.108.255
94.182.128.0/23
94.182.131.0/24
94.182.134.0/24
94.182.136.0/23
94.182.145.0/24
94.182.147.0/24
94.182.149.0-94.182.150.255
94.182.152.0/24
94.182.223.0/24
185.73.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:cc:7c:d8:07:76:aa:80:ed:db:3c:c6:90:e6:85:78:ea:d4:
bc:9a:67:9c:d1:82:68:37:99:4d:ef:b8:e2:b7:a4:57:07:ff:
98:72:43:7a:f2:37:97:3a:82:32:66:b3:f4:42:3f:0a:00:95:
b4:4a:c1:64:a6:ed:cc:cc:02:39:15:a1:50:1d:48:d5:ef:3d:
06:50:ed:fb:c4:b1:61:ba:4a:6f:be:3b:ad:52:0a:75:95:f7:
f2:06:40:4a:1c:fb:80:b8:fd:a7:99:2f:8b:41:b8:2a:8d:a4:
58:2b:2e:5b:b7:1b:95:78:93:3a:d1:9c:1c:39:39:6d:41:85:
83:dc:5a:41:a1:43:ba:49:9b:b8:49:ca:56:e0:ac:6d:0a:7f:
4f:55:1c:5c:a3:d1:d4:c9:3d:be:79:1d:b1:0f:ca:b9:fc:f9:
32:3e:03:20:20:42:ba:ba:70:d6:cf:27:72:95:b3:03:65:6c:
be:1e:e7:82:39:6f:70:3b:01:3c:f8:11:f8:a5:9a:96:02:25:
f8:ad:0e:95:30:62:27:26:77:ef:12:26:b7:c3:59:2f:6e:22:
c2:e9:8d:e4:41:31:b6:1a:a1:fc:70:68:a1:15:7e:7a:ef:4d:
1d:0b:0b:a9:e2:79:15:30:ef:3b:bb:2f:22:d4:f8:35:49:ba:
12:f8:36:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:08:18 2025 by rpki-client