Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6A0g8MQbdeYuOsLT2HKsxMztz6k.roa
File: 6A0g8MQbdeYuOsLT2HKsxMztz6k.roa (raw, json)
Hash identifier: +TNoV+ck7ssQSawbeUYZFuTDHr1G3sjKEO1FYO24o1Q=
Subject key identifier: E8:0D:20:F0:C4:1B:75:E6:2E:3A:C2:D3:D8:72:AC:C4:CC:ED:CF:A9
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018D7DEA2D4DF0767C3440EF5B43B23A2624
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6A0g8MQbdeYuOsLT2HKsxMztz6k.roa
Signing time: Tue 06 Feb 2024 10:15:15 +0000
ROA not before: Tue 06 Feb 2024 10:15:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47376
IP address blocks: 37.32.44.0/24 maxlen: 24
37.32.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 19:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:ea:2d:4d:f0:76:7c:34:40:ef:5b:43:b2:3a:26:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 6 10:15:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e80d20f0c41b75e62e3ac2d3d872acc4ccedcfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:eb:91:df:4b:2f:6b:c0:9c:de:cd:05:78:70:
a9:cd:86:03:f9:64:0c:b8:0a:e5:b3:b2:77:4d:ce:
12:04:a7:b7:15:b7:f8:0d:9d:86:55:6c:1c:77:2a:
8b:28:b2:00:49:71:1a:9e:0a:17:60:e1:f3:b1:6c:
c1:b0:e1:e5:eb:db:ca:17:7f:b2:fc:b2:f4:0b:ff:
75:72:83:6b:8c:b7:5b:4d:8b:32:5c:ef:22:f1:21:
37:90:97:f7:c6:95:b3:10:2b:86:f8:9e:f7:8b:f4:
74:25:71:0c:67:99:e3:5f:a8:53:f3:ca:9f:a6:a8:
4d:42:62:16:35:5f:75:40:6b:5d:29:99:ec:14:30:
3e:c6:ae:fb:97:bf:9b:62:1d:ca:c0:85:d8:b2:d3:
46:e8:5a:e1:2a:8f:b2:06:c4:04:d5:2c:89:d0:70:
0f:9f:93:9d:3e:68:5a:e3:21:71:0f:91:8c:04:04:
3c:6e:7b:72:c8:f5:ca:de:23:7d:f5:74:f0:2a:03:
5e:b7:d7:90:bd:28:b0:8c:60:31:d1:6b:cd:a0:f2:
ec:6e:46:44:0f:0e:bc:61:4e:ae:1c:65:f9:96:74:
03:9a:e7:49:ca:3e:db:5c:48:62:13:c5:6d:fc:f4:
41:e9:f1:b2:ca:bf:89:eb:49:5b:19:3d:17:f6:e7:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0D:20:F0:C4:1B:75:E6:2E:3A:C2:D3:D8:72:AC:C4:CC:ED:CF:A9
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/6A0g8MQbdeYuOsLT2HKsxMztz6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.44.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:2d:da:88:6e:57:89:8a:a8:69:16:fd:1b:63:62:0f:9b:df:
15:db:7b:67:0d:b7:b2:ec:b5:59:7e:9e:a6:bb:68:e0:ae:07:
d4:44:c5:e9:31:94:e6:bd:ea:9c:f8:9f:29:58:36:c7:20:fb:
57:e2:07:d5:94:91:7c:38:ca:03:db:42:f3:4b:1d:a4:54:46:
a7:74:5c:ac:72:2e:ea:28:1d:fa:fd:fd:23:19:3d:3e:47:e5:
c5:5e:0b:7c:cb:ef:7a:e8:eb:74:81:ad:5d:f6:ea:93:84:6d:
c6:cd:26:74:b3:95:39:49:09:56:a3:8e:22:6b:d7:23:ba:95:
6f:a3:4f:b1:3a:3b:a0:f5:91:8e:de:a5:64:7b:81:83:b8:48:
12:0e:26:9d:af:a6:92:50:1a:67:70:3f:85:b2:af:ef:cf:aa:
c5:84:87:d3:d3:6e:d7:64:9f:06:bb:dc:7c:e0:80:2e:e6:35:
7a:34:08:df:b3:40:13:83:c1:0b:c3:da:97:ee:63:18:cc:89:
94:ca:21:7a:67:03:68:98:6f:10:f2:15:4a:5e:6d:41:ec:c2:
d9:58:3a:18:6b:fa:dc:29:06:82:d6:4f:4e:f3:e9:4b:c7:f8:
0e:a0:67:33:b8:e1:9e:20:65:cb:c8:b1:fa:bb:d9:83:35:57:
93:e8:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:04:04 2025 by rpki-client