Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/2d881Bg9hob87bpsb9zQ4AtnjDQ.roa
File: 2d881Bg9hob87bpsb9zQ4AtnjDQ.roa (raw, json)
Hash identifier: yF9VtPJgIFw3coi0AMQi/S3IKl+0TauI8A3RqnVu/Ik=
Subject key identifier: D9:DF:3C:D4:18:3D:86:86:FC:ED:BA:6C:6F:DC:D0:E0:0B:67:8C:34
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 01907CA6B52FEF08442D0B2CCE97D9798379
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/2d881Bg9hob87bpsb9zQ4AtnjDQ.roa
Signing time: Thu 04 Jul 2024 07:30:18 +0000
ROA not before: Thu 04 Jul 2024 07:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62167
IP address blocks: 37.202.25.0/24 maxlen: 24
2a00:be40:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7c:a6:b5:2f:ef:08:44:2d:0b:2c:ce:97:d9:79:83:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Jul 4 07:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9df3cd4183d8686fcedba6c6fdcd0e00b678c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:1b:dc:fb:38:a3:bc:48:9b:42:b5:6b:f0:
4a:c6:d2:23:f5:9b:f0:01:96:f0:76:36:31:62:96:
7d:e9:2b:5e:de:76:52:c3:c5:4c:ef:fa:98:13:f4:
28:f4:5a:9b:35:ea:ce:aa:3d:43:85:3b:3d:9d:8d:
a3:a7:04:8f:10:22:4f:f1:87:36:a8:a5:74:3c:f3:
26:02:f7:ce:ee:8d:d4:4f:ea:97:a2:e3:b5:78:66:
5f:b9:28:9b:cc:61:86:64:8b:4f:05:1e:cc:a5:c4:
60:cc:89:ae:10:21:d7:e0:6d:5c:8e:19:1f:e8:b9:
12:d2:b3:b6:fa:a8:76:b2:18:8e:58:22:b7:09:1f:
8d:75:6e:43:72:39:2d:66:a0:d7:86:8c:4b:1b:cc:
ef:5b:ec:33:42:97:4e:da:f7:20:28:69:f2:f0:dc:
bc:0c:1c:37:74:30:98:cd:72:f9:80:58:d8:46:d3:
47:d4:0f:b2:5c:20:3e:f7:14:c8:66:e8:79:7a:f6:
68:64:38:8d:f2:5a:df:c5:f8:a1:52:36:96:b4:2d:
e1:7e:3f:cb:65:a3:47:ff:4d:a0:7a:e3:d7:f5:47:
42:b2:de:c1:a7:ef:a3:2e:44:c6:da:ad:84:8c:5f:
b3:9e:bd:a0:78:d4:19:00:82:7c:2b:c5:85:27:dc:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DF:3C:D4:18:3D:86:86:FC:ED:BA:6C:6F:DC:D0:E0:0B:67:8C:34
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/2d881Bg9hob87bpsb9zQ4AtnjDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.25.0/24
IPv6:
2a00:be40:2::/48
Signature Algorithm: sha256WithRSAEncryption
52:3c:bf:37:1f:b2:ea:84:94:5c:a6:c8:06:d7:d3:66:3c:e4:
d3:cc:f9:03:e6:fe:c7:52:e2:1c:87:99:61:e7:68:85:f4:61:
e1:66:00:15:df:fc:16:87:08:fb:c1:70:42:c3:81:97:54:85:
25:55:6a:ea:51:d5:03:46:60:92:9b:d1:de:30:5b:c9:26:93:
34:b9:b4:c9:86:f2:c8:e7:e4:0e:7c:26:a3:e5:b3:7f:1c:92:
4b:a1:84:3a:a2:be:06:40:d2:e4:2d:2f:2f:09:df:dd:24:a0:
04:92:9e:18:c5:77:81:d8:b4:57:84:3b:b3:98:0c:4d:04:74:
8d:a5:11:b3:94:bb:3e:88:a6:4d:2e:bd:d4:fa:c9:e3:dc:85:
20:d9:c9:32:77:59:1e:b1:82:af:d8:57:a4:21:2b:b7:2c:1a:
fb:73:e3:a9:19:be:23:f4:cb:65:54:a1:38:0c:30:54:f0:5c:
7d:93:b7:2c:65:a7:63:10:1e:7b:84:d1:29:c5:08:28:fc:69:
9e:21:e8:79:f6:d6:f4:e0:d3:d6:14:43:39:49:b7:55:45:7b:
fa:23:fd:85:5b:b0:e6:d6:fe:cd:83:20:60:8b:e7:6c:1b:40:
f1:0a:db:f3:59:8e:6b:f8:6a:05:50:72:b4:1f:3c:b4:b0:da:
fa:63:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:42 2025 by rpki-client