Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/S7bsKrXMJaK801sMIXLl0Qxh1AI.roa
File: S7bsKrXMJaK801sMIXLl0Qxh1AI.roa (raw, json)
Hash identifier: jQ6gNGRdQrMfjz9qdZQkmPEZA4vtyPtFDvOMnk6GuHY=
Subject key identifier: 4B:B6:EC:2A:B5:CC:25:A2:BC:D3:5B:0C:21:72:E5:D1:0C:61:D4:02
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 01917AB22BFAD6FC31CB64028FADF1CE4D31
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/S7bsKrXMJaK801sMIXLl0Qxh1AI.roa
Signing time: Thu 22 Aug 2024 15:26:22 +0000
ROA not before: Thu 22 Aug 2024 15:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3920
IP address blocks: 37.49.229.0/24 maxlen: 24
77.247.111.0/24 maxlen: 24
117.18.118.0/24 maxlen: 24
117.55.202.0/24 maxlen: 24
117.55.203.0/24 maxlen: 24
185.53.91.0/24 maxlen: 24
212.237.231.0/24 maxlen: 24
2a13:adc0::/48 maxlen: 48
2a13:adc0:1::/48 maxlen: 48
2a13:adc0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Aug 2024 13:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:b2:2b:fa:d6:fc:31:cb:64:02:8f:ad:f1:ce:4d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Aug 22 15:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bb6ec2ab5cc25a2bcd35b0c2172e5d10c61d402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:3e:52:91:28:fa:bf:8d:5c:86:ad:3b:f9:
6f:b4:73:9a:bb:63:0e:64:29:88:ba:eb:ed:98:49:
ed:a1:0c:46:ed:6e:8e:b4:db:9d:ab:a6:9f:61:b4:
4d:73:f8:36:fa:e9:79:31:b2:bd:97:07:ff:0f:e9:
34:c0:d2:bb:dd:e2:0d:11:74:00:a8:a2:ff:c0:28:
98:44:82:6a:e2:88:2e:ae:cf:3a:4c:c9:b9:38:72:
bc:ba:51:a0:6c:38:ad:52:68:63:fd:4e:94:4f:35:
e4:b1:fc:13:8c:5c:bc:5d:80:1d:50:e4:7e:e8:b4:
be:bd:68:98:53:a9:9f:4e:df:55:91:78:39:33:0f:
7f:ee:ae:bd:eb:a2:5c:b2:80:4b:1b:11:a2:02:e1:
44:8d:16:1d:52:59:08:2a:75:bb:7f:62:94:45:2d:
5e:6b:40:fe:85:6b:1b:ea:1c:e9:34:c0:86:be:f3:
16:a2:0e:a1:52:c0:47:c0:b0:8b:e2:d6:48:50:c3:
e7:43:af:fb:43:88:01:84:d2:23:b3:a9:d5:b2:da:
36:c6:fd:66:31:1f:18:1c:16:97:04:03:81:5d:74:
7c:6e:1c:b3:dc:c1:1b:ee:31:a9:ca:e5:83:1e:22:
1f:de:18:24:69:c8:b0:8c:87:f4:31:70:39:29:b8:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:EC:2A:B5:CC:25:A2:BC:D3:5B:0C:21:72:E5:D1:0C:61:D4:02
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/S7bsKrXMJaK801sMIXLl0Qxh1AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.229.0/24
77.247.111.0/24
117.18.118.0/24
117.55.202.0/23
185.53.91.0/24
212.237.231.0/24
IPv6:
2a13:adc0::-2a13:adc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1f:ce:1e:cf:e6:bc:07:77:db:3a:a8:4e:e0:11:96:66:f1:f0:
d1:5b:9e:e5:5c:99:f4:bf:a0:9b:7f:f1:93:d8:79:ab:72:69:
e3:bb:41:30:46:d9:f7:02:af:64:9f:0d:e7:1a:ec:5f:50:46:
07:93:dd:3f:4c:2f:29:0a:38:72:78:1c:4c:06:5e:1f:98:2b:
6f:b8:27:24:6b:25:67:40:a3:39:6d:15:ab:d6:e5:70:6a:cd:
63:09:0e:74:09:a0:18:2b:60:c5:df:7f:21:3b:53:50:f9:be:
f2:3f:c7:c2:0c:df:ca:06:08:21:39:02:59:74:d5:7b:dd:28:
30:4b:bb:a2:b2:40:94:0b:f7:bb:8a:e1:7b:6f:29:43:b5:31:
ea:f0:94:a5:3a:d9:72:4f:d1:52:41:1d:6c:e5:38:f2:52:fa:
7a:ac:70:3d:68:e1:3b:60:37:bf:4e:14:a3:c8:89:01:ff:f3:
37:b8:78:22:85:a0:27:aa:6e:16:74:0d:15:b2:af:21:56:f4:
9b:f0:65:67:05:b8:4c:2a:5d:5c:41:c9:2d:91:a3:0a:78:4a:
d9:23:6f:49:9e:67:28:77:08:ce:3a:54:e9:05:e9:59:81:70:
f3:c0:dc:e9:bf:25:b0:0d:a9:30:0e:da:52:92:c7:10:d7:6b:
b9:55:19:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:33 2025 by rpki-client