Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/tTeu-FiWFjYJX4UnGAbSfHSXWTk.roa
File: tTeu-FiWFjYJX4UnGAbSfHSXWTk.roa (raw, json)
Hash identifier: J3kUjg764fcdLyCpo4TLuRk33tv9CshHJ2YHgwcHpnI=
Subject key identifier: B5:37:AE:F8:58:96:16:36:09:5F:85:27:18:06:D2:7C:74:97:59:39
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 019252736C61B6101FE4B9D18B859845CFC1
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/tTeu-FiWFjYJX4UnGAbSfHSXWTk.roa
Signing time: Thu 03 Oct 2024 12:55:48 +0000
ROA not before: Thu 03 Oct 2024 12:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212192
IP address blocks: 5.157.164.0/22 maxlen: 24
37.35.32.0/22 maxlen: 22
37.35.38.0/24 maxlen: 24
146.66.211.0/24 maxlen: 24
188.74.156.0/22 maxlen: 22
188.74.244.0/24 maxlen: 24
188.119.164.0/24 maxlen: 24
188.119.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:51:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:73:6c:61:b6:10:1f:e4:b9:d1:8b:85:98:45:cf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Oct 3 12:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b537aef858961636095f85271806d27c74975939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1b:d4:eb:86:03:70:60:06:ac:db:cb:83:c8:
88:54:3b:c3:6e:cd:21:ae:bb:ff:d9:6c:74:00:50:
55:d3:ba:b8:c6:15:04:38:58:66:06:4d:ea:b6:c5:
9e:de:90:4a:cc:c2:1b:c7:a1:34:f1:84:22:8e:91:
25:02:de:d7:07:56:09:62:9b:a0:bc:4e:46:9a:e3:
da:f8:d0:bf:3b:aa:15:5e:45:f4:07:5f:a5:bd:09:
14:ad:99:a6:09:46:4a:0f:7d:52:90:4f:e8:fe:0d:
b4:39:8f:94:06:90:eb:ad:66:27:8a:dc:56:f2:ac:
91:12:1f:f5:60:42:71:3a:04:5f:7e:b1:6f:6d:e0:
de:be:1f:67:5d:0a:3b:ad:67:46:78:53:3d:5e:03:
d0:bd:95:a2:24:2c:47:26:77:ee:1e:96:b8:a3:ca:
7f:33:de:c4:0a:b9:16:56:9c:c4:6a:a8:60:77:be:
e1:a8:b7:bf:a0:72:f5:2b:e3:9c:7b:c3:3f:f1:31:
7c:d5:c8:7d:ea:b2:82:73:5d:81:2a:18:c8:6c:20:
bb:52:69:26:95:21:88:f5:15:42:2f:cd:32:fb:8d:
c0:59:e0:59:d6:3c:32:d2:01:b8:08:85:6f:1f:43:
4e:b6:0e:5a:58:72:0c:d9:71:d2:a7:e8:f5:44:24:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:37:AE:F8:58:96:16:36:09:5F:85:27:18:06:D2:7C:74:97:59:39
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/tTeu-FiWFjYJX4UnGAbSfHSXWTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.164.0/22
37.35.32.0/22
37.35.38.0/24
146.66.211.0/24
188.74.156.0/22
188.74.244.0/24
188.119.164.0/24
188.119.167.0/24
Signature Algorithm: sha256WithRSAEncryption
35:32:af:43:f9:8d:0b:3e:ef:54:ec:16:8f:c6:77:0b:8e:a3:
96:cd:a6:81:1d:31:01:08:fe:06:ee:31:67:a8:7b:36:97:09:
34:70:ae:22:65:86:6a:ad:4b:91:76:9a:7d:13:40:b2:a2:ff:
2f:9f:cc:63:62:bb:cd:0b:f2:f1:6b:eb:cc:a0:65:e3:22:a6:
ca:e7:86:b6:b3:8a:61:cd:7c:bd:ad:62:e3:4d:4a:48:24:7c:
e2:0a:b8:a7:b4:2a:05:40:b5:10:d4:df:cb:b1:f7:87:bb:60:
6a:69:e7:9d:4b:c7:3c:04:0d:0d:1b:36:76:e0:3c:8c:07:3c:
9d:3a:24:f4:8c:23:79:91:0a:ab:6a:00:42:aa:f4:e9:c0:4d:
ed:d9:91:f1:c2:4d:65:12:3f:af:66:a0:d6:ac:50:9d:ae:99:
30:aa:f9:51:00:e1:52:b9:44:dc:d9:90:67:c1:8d:97:43:63:
ff:46:5c:36:c1:1d:67:ac:1a:7f:b9:f2:5a:fb:93:7e:bf:0d:
01:3a:b2:1e:ab:25:1c:07:e4:19:0a:fa:5e:f4:59:84:6d:20:
50:01:51:89:6b:3b:2a:bc:48:a1:02:81:10:3d:4f:19:85:b3:
d3:50:ec:0c:e2:16:2f:4d:fd:dc:13:cb:e2:aa:fc:85:93:d1:
dc:ac:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:00 2025 by rpki-client