Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/kFRpUqnqgvpf7KZ8Vx4npxbXtvw.roa
File: kFRpUqnqgvpf7KZ8Vx4npxbXtvw.roa (raw, json)
Hash identifier: rtyI9rZTtZVCOruRj/8dGW0mLPDWrRciT4baCKvAyUs=
Subject key identifier: 90:54:69:52:A9:EA:82:FA:5F:EC:A6:7C:57:1E:27:A7:16:D7:B6:FC
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 0194457ABC135C88C907D58A76DF36CC0A44
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/kFRpUqnqgvpf7KZ8Vx4npxbXtvw.roa
Signing time: Wed 08 Jan 2025 10:34:18 +0000
ROA not before: Wed 08 Jan 2025 10:34:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.153.152.0/24 maxlen: 24
37.153.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 09:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:7a:bc:13:5c:88:c9:07:d5:8a:76:df:36:cc:0a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Jan 8 10:34:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90546952a9ea82fa5feca67c571e27a716d7b6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:6c:17:e8:b2:b2:e9:92:11:97:0d:2c:02:
b6:93:bf:e4:e5:42:4e:fd:5d:49:61:36:da:f3:81:
df:20:b0:aa:2f:f9:e9:bc:d1:70:6d:97:71:fd:d2:
27:a4:8f:7d:08:35:c9:5c:aa:c7:ab:38:28:7d:6b:
cd:26:f3:0d:55:4e:9a:81:35:73:11:7c:41:71:e7:
1c:db:da:2c:28:f7:d1:c9:76:5d:b7:d4:98:4b:95:
58:3e:63:03:71:21:27:27:26:3e:3a:9f:9f:60:87:
eb:c1:08:c3:14:dc:48:dc:b8:18:55:b3:41:68:41:
41:3d:dc:cc:2e:c5:15:42:13:ac:8c:3d:c2:46:81:
62:d6:e6:87:d1:63:f1:af:4f:f5:2f:8c:c8:ce:32:
9c:ed:fd:ab:5f:cd:d0:7f:c6:0a:7f:27:87:dd:20:
1f:29:4d:bb:a1:de:83:17:1c:9a:a9:0d:cc:b0:87:
67:79:37:81:7e:21:87:17:2d:06:f2:19:87:32:85:
76:df:20:0b:73:9d:fb:ce:ef:b9:f5:6f:b8:4c:e9:
63:08:c5:7b:13:1d:1c:b3:3b:c1:e5:80:9f:1c:6e:
6a:b7:2f:79:0e:08:a2:1b:1e:65:e4:cf:88:cb:01:
b4:e8:74:63:e8:78:d6:e4:f2:9c:93:49:23:f4:58:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:54:69:52:A9:EA:82:FA:5F:EC:A6:7C:57:1E:27:A7:16:D7:B6:FC
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/kFRpUqnqgvpf7KZ8Vx4npxbXtvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.152.0/24
37.153.154.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ce:e7:3b:5a:e4:8f:68:c0:f4:d2:a1:4d:a8:79:9a:c3:da:
b1:31:0a:7c:32:27:33:9f:c8:c6:52:15:65:13:09:ca:c4:8f:
0a:de:3f:1b:be:a6:87:c7:fa:64:11:79:2f:7e:f8:88:eb:91:
01:23:4b:f1:ab:75:22:b1:7a:a2:a3:04:7c:2c:85:39:d1:57:
cc:82:7e:4c:2e:33:9c:bd:f8:79:22:8d:d7:5e:60:4b:57:4d:
ac:31:78:ee:e5:ef:59:8a:65:b6:d7:34:1d:a5:0c:45:20:59:
15:62:9a:2d:11:b4:41:47:8d:25:9c:5b:e1:12:99:a3:79:89:
35:c8:e0:d3:65:4e:26:8e:24:ce:c4:43:11:ca:0b:55:aa:7a:
da:fd:56:15:52:2e:65:a8:61:b9:2e:ae:46:00:77:97:39:2a:
77:c8:cb:9e:1c:0a:58:6e:0a:8a:a1:6b:39:02:5a:64:04:71:
51:4a:fd:f4:a7:32:6d:c1:9e:0f:56:e1:5c:a4:50:8f:db:48:
07:12:c4:a6:e6:ca:a7:33:e4:6f:4b:45:9c:a1:94:f6:4d:c4:
bf:2e:e7:ea:3b:3e:d3:b7:28:e5:1b:8d:43:ea:ef:78:2f:93:
64:cf:fd:55:80:88:1a:57:36:2a:91:f3:66:22:f6:9a:71:4f:
a2:e5:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:34 2025 by rpki-client