Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/PS8apoWPp3WAcmvL2YjOVsAmSyM.roa
File: PS8apoWPp3WAcmvL2YjOVsAmSyM.roa (raw, json)
Hash identifier: S9n0OlldxzXrXGwwnTWDFsaua1wO8HfVK6+EE3pywI0=
Subject key identifier: 3D:2F:1A:A6:85:8F:A7:75:80:72:6B:CB:D9:88:CE:56:C0:26:4B:23
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941838BD484D7F989C4AA46D9C48A88E38
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/PS8apoWPp3WAcmvL2YjOVsAmSyM.roa
Signing time: Mon 30 Dec 2024 15:39:19 +0000
ROA not before: Mon 30 Dec 2024 15:39:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34597
IP address blocks: 37.230.232.0/24 maxlen: 24
37.230.246.0/24 maxlen: 24
141.101.243.0/24 maxlen: 24
178.170.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:38:bd:48:4d:7f:98:9c:4a:a4:6d:9c:48:a8:8e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Dec 30 15:39:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d2f1aa6858fa77580726bcbd988ce56c0264b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:89:e6:70:d0:fa:41:8c:69:68:38:42:1f:
e9:fb:c5:cf:da:ef:57:2c:4c:cb:c1:be:b8:20:37:
76:ff:b5:9a:d9:ae:6d:70:3e:17:65:f6:a7:41:20:
a4:72:04:df:81:4b:87:8f:a9:fa:27:95:9b:91:d9:
dd:51:48:75:54:57:af:af:53:8e:fe:7b:ea:69:dc:
64:d8:78:9f:a7:c1:ab:79:4c:ab:23:8e:5c:13:76:
b7:34:7b:2f:2f:d5:51:df:a0:8c:d4:70:31:da:27:
21:db:20:34:f8:fe:37:bb:57:f4:b9:0b:41:18:ca:
97:21:f0:8c:69:b4:8c:7a:e5:81:66:0a:a9:c1:3b:
63:02:f0:62:a4:43:a0:01:cc:70:74:df:e1:03:4f:
fe:be:72:9f:32:12:0f:a7:10:39:f3:67:3b:d7:21:
86:84:31:d3:71:7f:77:a3:b8:02:86:1f:bd:df:6d:
1d:9c:6c:26:13:1a:cc:69:50:27:82:9e:d8:2b:2a:
52:a1:95:1d:c1:a3:26:57:8a:9a:e1:8b:20:b0:10:
be:81:b9:6f:a5:b3:36:5a:27:ab:7a:20:b6:46:e0:
09:00:e8:88:be:30:5b:e0:16:a5:3c:d3:37:ec:e4:
b5:bc:10:f0:20:a4:7e:03:af:53:1b:79:ce:6b:ad:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2F:1A:A6:85:8F:A7:75:80:72:6B:CB:D9:88:CE:56:C0:26:4B:23
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/PS8apoWPp3WAcmvL2YjOVsAmSyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.232.0/24
37.230.246.0/24
141.101.243.0/24
178.170.173.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d9:3d:45:43:b2:c7:a2:67:d5:57:9e:08:47:2e:1f:96:94:
bb:e4:f4:a8:45:23:bd:98:77:3a:91:3c:35:ca:db:e3:a6:79:
72:cb:9d:ba:1e:33:3c:c8:bf:4b:8c:4f:ba:02:3b:02:70:6d:
2e:1a:0a:39:da:f9:81:56:e7:c1:9c:02:9a:01:cd:cc:62:55:
be:2a:ee:e7:32:e4:9f:1e:e2:06:65:7a:a0:31:d7:07:e0:8b:
81:0e:cf:71:0d:f1:11:b1:e8:d9:d9:6d:24:b6:a7:13:a8:b4:
51:cb:74:cc:a5:f0:b3:fc:eb:fa:63:cb:60:8e:91:3c:c2:65:
e5:6c:c7:3d:07:44:9a:25:56:46:3a:36:3f:9e:35:2e:2d:95:
f7:de:45:08:43:f7:2c:2a:b4:cc:76:54:09:e3:a2:38:30:2c:
77:3c:7f:b2:28:5f:4a:c6:0e:b0:68:ba:24:fa:c0:0f:c7:22:
e7:4a:b2:c4:35:56:65:83:a5:87:e5:06:15:9d:4f:66:ea:5a:
b4:e6:f9:c7:6b:4c:f2:e4:d3:d0:54:5c:8a:9a:dc:20:28:50:
aa:eb:0a:e6:9b:aa:4a:0d:24:48:ea:2d:18:30:49:95:2d:5e:
96:59:e0:35:c3:99:f7:08:36:7d:f9:ec:bb:ea:13:7a:2a:40:
8c:11:65:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:45:55 2025 by rpki-client