Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Eye4YXUt7jgh8fwamPrig8v8ZLg.roa
File: Eye4YXUt7jgh8fwamPrig8v8ZLg.roa (raw, json)
Hash identifier: rbe78O3fD8d8zAXxtWmWfKWa82gq4oX5iES8yIjDveY=
Subject key identifier: 13:27:B8:61:75:2D:EE:38:21:F1:FC:1A:98:FA:E2:83:CB:FC:64:B8
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018FD9A9B0D09FC6A0BE2484E084D5C5F98F
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Eye4YXUt7jgh8fwamPrig8v8ZLg.roa
Signing time: Sun 02 Jun 2024 15:55:27 +0000
ROA not before: Sun 02 Jun 2024 15:55:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216344
IP address blocks: 37.32.43.0/24 maxlen: 24
185.212.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 07:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d9:a9:b0:d0:9f:c6:a0:be:24:84:e0:84:d5:c5:f9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 2 15:55:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1327b861752dee3821f1fc1a98fae283cbfc64b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:57:7d:11:74:58:d4:f1:e2:24:46:99:1b:18:
f2:db:da:4c:60:14:0e:a3:36:22:da:07:3e:ed:3b:
39:b8:24:16:df:2e:19:9c:71:dd:70:cd:62:7b:f1:
68:4e:f4:7e:aa:cf:5d:d7:1d:db:03:9b:7c:d1:80:
63:2e:01:a7:fa:9d:db:6c:eb:c7:03:a1:b9:01:8c:
17:11:8c:2f:d2:87:68:59:58:e4:4a:81:6c:59:02:
2f:6a:17:ab:94:2d:9b:81:3d:8b:1b:f3:65:a7:dd:
9f:76:af:45:eb:b4:9e:15:b2:e2:da:70:80:e4:60:
a7:94:94:04:42:82:b7:f4:37:db:b4:95:2e:3a:30:
6a:4d:9b:e0:94:8a:aa:58:02:9a:e2:95:aa:57:8d:
64:4f:08:96:64:32:e8:85:7c:13:f0:be:65:01:f9:
d3:51:33:92:4e:f2:ac:46:0c:7f:8d:3c:a7:25:43:
cd:d5:5d:63:33:f8:f9:87:50:0b:97:bd:3f:b2:9d:
70:d7:f2:06:36:bc:12:cd:55:43:85:9e:cd:16:3e:
93:4c:35:41:20:3e:ad:2c:4a:8b:15:de:47:05:6e:
36:cd:8b:c9:03:b2:02:49:41:70:85:e9:61:71:a7:
4f:36:56:e6:f5:46:a9:dc:e4:0d:1d:c0:c6:7a:37:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:27:B8:61:75:2D:EE:38:21:F1:FC:1A:98:FA:E2:83:CB:FC:64:B8
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Eye4YXUt7jgh8fwamPrig8v8ZLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.43.0/24
185.212.51.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b8:48:c0:31:58:16:61:df:d5:ff:a0:dc:17:6a:75:8b:85:
e7:7a:95:34:c1:98:6e:81:97:54:ed:54:e4:32:5d:1a:9d:62:
26:6d:0c:f9:24:a2:75:55:25:4b:27:d1:63:6a:79:40:67:d3:
f1:c6:2e:86:4b:ae:6e:00:5d:48:95:43:32:ae:21:db:bd:86:
09:0e:c9:a7:c4:e8:53:e6:ed:ab:72:1f:8d:6b:91:06:99:2e:
09:e9:31:e4:58:38:98:4f:39:16:34:88:06:85:4e:e4:4b:b1:
ae:0d:28:a9:33:63:b1:4f:21:d8:63:23:21:18:dc:13:10:9f:
6e:90:f7:1f:dd:fe:19:f0:28:40:99:15:3f:a8:10:11:cb:95:
7a:b5:63:01:6e:e7:77:98:64:41:9f:43:7a:5a:7a:80:1b:a8:
3f:dc:bd:c4:04:3d:34:35:4d:5b:91:cb:10:94:67:40:d0:aa:
61:3c:a8:0b:0d:cf:56:cf:8d:1c:c1:83:42:e5:81:28:5c:12:
03:13:73:1c:d9:e3:ca:43:93:41:fd:ac:93:44:31:1d:38:25:
ae:b2:d3:88:ee:6c:d7:83:25:40:d8:9b:ad:17:83:0f:8a:53:
f0:0b:76:c9:e8:6f:b8:38:42:b0:aa:52:ac:d3:9c:f9:37:e2:
9e:b2:3f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:35:54 2025 by rpki-client