Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/STmuBL8ZQfM77U08M7eOMXt8bDU.roa
File: STmuBL8ZQfM77U08M7eOMXt8bDU.roa (raw, json)
Hash identifier: WRwMwZykr5xArkrinug+8Rgn1++ofcUdjvXLEQS1uns=
Subject key identifier: 49:39:AE:04:BF:19:41:F3:3B:ED:4D:3C:33:B7:8E:31:7B:7C:6C:35
Certificate issuer: /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Certificate serial: 0186E48F620C2503D84D73B4EE4CD1B28E04
Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/STmuBL8ZQfM77U08M7eOMXt8bDU.roa
Signing time: Wed 15 Mar 2023 09:17:27 +0000
ROA not before: Wed 15 Mar 2023 09:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13170
IP address blocks: 85.29.64.0/18 maxlen: 18
185.69.72.0/22 maxlen: 22
212.116.32.0/19 maxlen: 19
62.145.160.0/19 maxlen: 19
77.223.32.0/19 maxlen: 19
213.145.192.0/19 maxlen: 19
213.143.160.0/19 maxlen: 19
46.254.96.0/21 maxlen: 21
185.69.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:8f:62:0c:25:03:d8:4d:73:b4:ee:4c:d1:b2:8e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Validity
Not Before: Mar 15 09:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4939ae04bf1941f33bed4d3c33b78e317b7c6c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:fb:9c:33:bf:84:e0:e5:82:98:f3:cf:81:
9f:d4:ed:9c:34:85:96:d2:e6:7d:d9:01:2c:a7:17:
42:32:99:60:a8:ff:24:9d:e1:6f:20:bb:39:fc:bf:
21:e9:9c:f8:dc:d9:39:2f:0b:91:87:94:a4:2e:ba:
13:8b:ec:6b:ae:0f:ae:07:73:38:42:4a:d0:03:83:
a9:f9:81:81:90:36:ed:4d:1f:29:91:17:7a:b7:25:
fd:55:bd:a7:73:cc:a6:6c:7c:b0:35:a6:21:f2:cb:
27:2d:d6:83:f4:2d:76:7b:32:5a:f0:ee:e8:9b:d1:
27:d1:5e:45:14:af:ec:ed:0a:23:37:50:62:36:ad:
a1:05:3c:92:55:10:e3:dc:9c:ff:5c:1f:f6:85:7d:
c8:b1:53:52:aa:2a:61:7a:b0:0b:42:82:28:5c:ca:
45:e9:f8:b8:67:a6:37:f7:d6:b6:da:fe:5c:25:bc:
bc:cc:e6:18:57:5b:04:8d:93:52:3c:9f:c8:b2:a2:
ce:7f:a8:30:ec:36:e6:64:ff:e9:cd:81:5e:f0:38:
65:ec:df:37:2b:73:15:4b:f1:6d:17:b4:b0:87:2e:
fb:93:71:1c:c4:6e:7e:34:ac:c1:13:b9:ab:e5:74:
70:cd:99:3d:19:88:a7:e6:33:4d:5f:b5:a5:f2:38:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:39:AE:04:BF:19:41:F3:3B:ED:4D:3C:33:B7:8E:31:7B:7C:6C:35
X509v3 Authority Key Identifier:
keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/STmuBL8ZQfM77U08M7eOMXt8bDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.96.0/21
62.145.160.0/19
77.223.32.0/19
85.29.64.0/18
185.69.36.0/22
185.69.72.0/22
212.116.32.0/19
213.143.160.0/19
213.145.192.0/19
Signature Algorithm: sha256WithRSAEncryption
70:50:a5:a5:fa:a1:df:88:11:30:95:98:8a:03:41:28:48:41:
ba:42:bd:8c:c0:8f:90:aa:72:90:99:3b:e6:e4:5f:ea:a7:5e:
3d:01:e0:76:6f:b3:a3:1f:3a:ca:52:35:d3:c2:6b:09:27:29:
83:25:7d:b9:c2:b1:e4:74:da:a4:10:a3:0d:25:75:37:a6:b1:
47:53:7f:1a:0c:cc:e2:d4:06:c3:ed:aa:c9:00:9b:cd:2a:48:
99:d0:28:6b:a3:72:59:e7:cc:4a:20:99:b3:cc:29:05:62:d0:
64:6b:78:83:34:52:0b:5c:21:1c:fb:b0:bf:76:c5:9e:8f:5e:
55:1b:91:3c:fe:48:bf:b9:da:3c:57:d0:f5:37:c0:ce:2a:31:
9a:e1:bb:3e:eb:ea:e8:02:c2:e6:d2:ac:d3:23:8d:0d:b3:22:
e6:7a:59:8c:2b:16:ab:17:14:27:f8:c4:1b:ae:80:9a:04:a5:
79:71:29:e0:92:5c:50:65:85:84:38:79:2e:cf:76:4b:58:0b:
fc:88:86:bb:37:36:4b:db:9a:f5:69:d0:3f:b5:c0:09:5f:ea:
a9:80:cc:d7:23:3b:03:17:c7:46:3f:67:8b:b1:51:8a:64:74:
bc:fe:0a:5e:de:7a:22:f2:1b:de:07:ba:de:8d:0b:33:c3:5a:
5e:c5:94:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:12 2024 by rpki-client on console-fra.rpki-client.org