Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/DWTIV4HTS8VT22Oa2NXTFWXQupA.roa
File: DWTIV4HTS8VT22Oa2NXTFWXQupA.roa (raw, json)
Hash identifier: qljZAH+VUSCo+Unm9CAL+H5M/vRcZ4PLLn046PfQ/Qs=
Subject key identifier: 0D:64:C8:57:81:D3:4B:C5:53:DB:63:9A:D8:D5:D3:15:65:D0:BA:90
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0190D4C01F4E0279A25A1A3096FF25362FFA
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/DWTIV4HTS8VT22Oa2NXTFWXQupA.roa
Signing time: Sun 21 Jul 2024 10:04:38 +0000
ROA not before: Sun 21 Jul 2024 10:04:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204650
IP address blocks: 37.32.44.0/24 maxlen: 24
37.32.45.0/24 maxlen: 24
178.239.156.0/24 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.172.0/22 maxlen: 24
185.124.173.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
185.212.48.0/24 maxlen: 24
185.243.49.0/24 maxlen: 24
185.243.50.0/24 maxlen: 24
2a00:7040::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 Aug 2024 05:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d4:c0:1f:4e:02:79:a2:5a:1a:30:96:ff:25:36:2f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jul 21 10:04:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d64c85781d34bc553db639ad8d5d31565d0ba90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:b8:1c:ed:6b:80:dc:06:4d:44:02:78:2e:
4c:86:92:87:ea:2f:b1:3d:ba:4a:1b:5d:15:59:f5:
4a:fe:2a:93:14:f8:5a:f1:76:a0:5f:f9:19:64:2a:
07:0a:7a:35:d3:d8:70:20:dd:13:8d:7d:98:89:cb:
cc:77:e7:b2:24:e2:b5:99:98:2f:b5:50:b3:1e:e4:
b4:52:e8:47:4e:c8:79:a0:10:7d:cd:02:a5:4f:c1:
ed:46:82:c6:71:38:66:4e:0b:cd:d2:11:3b:ac:50:
d5:31:b7:f0:e9:52:eb:aa:ca:17:63:9a:f2:4a:7a:
4d:d7:56:97:38:58:4e:45:28:6a:95:2a:aa:d4:3f:
9b:19:a3:06:ff:6b:74:74:64:ad:61:94:48:b7:bd:
d7:69:07:32:39:72:a6:68:4b:a5:8b:7a:ec:4d:ad:
c9:43:0f:34:e6:2c:fa:eb:b6:e2:d4:4c:48:65:bc:
43:74:3c:23:a0:87:3e:7b:fd:db:3d:d9:26:d8:ab:
95:e5:2b:09:34:58:37:5a:23:3b:8a:ed:a9:ce:82:
ea:39:a5:be:a5:2e:e5:43:33:d1:b2:60:fc:0a:a0:
e9:99:c2:ae:81:d9:86:47:a4:6c:66:48:f7:9a:61:
f8:58:03:95:60:f5:d2:e2:f2:de:df:78:1a:c5:4f:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:64:C8:57:81:D3:4B:C5:53:DB:63:9A:D8:D5:D3:15:65:D0:BA:90
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/DWTIV4HTS8VT22Oa2NXTFWXQupA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.44.0/23
178.239.156.0/24
178.239.159.0/24
185.26.34.0/23
185.124.172.0/22
185.212.48.0/24
185.243.49.0-185.243.50.255
IPv6:
2a00:7040::/32
Signature Algorithm: sha256WithRSAEncryption
9f:15:d8:6c:55:c6:67:32:13:c9:59:a8:aa:ed:24:d9:dd:36:
b7:67:bb:bd:4b:12:41:45:8a:e1:0d:ee:e7:74:e4:6f:d3:49:
fa:29:50:d5:30:13:3c:6d:bd:87:e8:ab:49:71:c0:f0:44:fd:
51:fc:fa:8d:bc:e7:5f:37:95:b7:76:d0:e4:f4:d3:4c:2e:be:
1e:1e:d8:84:d7:4c:e9:d7:6e:15:6f:37:c6:84:0a:7d:46:50:
6e:c5:b1:45:bb:16:f8:5f:33:92:4c:a5:09:36:9f:f2:e5:33:
8a:9b:05:6e:0a:bd:0b:55:7f:fd:38:a3:c7:0e:14:5b:d8:e6:
f0:e5:83:7c:8a:53:23:0a:d1:0d:ff:1d:fb:eb:67:fe:6b:79:
16:c4:a3:c6:e0:cd:0e:51:d4:8b:50:4d:66:28:99:e5:00:fc:
51:0a:e5:0a:a9:e8:5b:6f:81:b5:b0:6d:61:47:e0:9b:88:96:
cd:d5:71:81:00:38:ae:76:3d:c4:80:75:41:c5:77:f3:27:24:
3c:92:d7:ce:b6:04:53:06:00:2e:3c:2f:15:6b:9a:2c:f8:45:
23:89:10:b1:ea:1d:37:60:14:c0:6e:6a:97:5c:98:8f:30:00:
3d:9b:7c:2f:d2:e8:ca:31:55:c6:b1:ec:89:df:21:75:8c:81:
cb:77:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:28:52 2024 by rpki-client on console-ams.rpki-client.org