Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/iPb917fIXdGjQ6mO5mjc0jg41CA.roa
File: iPb917fIXdGjQ6mO5mjc0jg41CA.roa (raw, json)
Hash identifier: WQ6BBgeyuynLHSOkQe1iVkfrkdvtD+fI/D8+mpYbPog=
Subject key identifier: 88:F6:FD:D7:B7:C8:5D:D1:A3:43:A9:8E:E6:68:DC:D2:38:38:D4:20
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 018CCA29CF03444EEB85A7249F53C1E15DE7
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/iPb917fIXdGjQ6mO5mjc0jg41CA.roa
Signing time: Tue 02 Jan 2024 12:33:06 +0000
ROA not before: Tue 02 Jan 2024 12:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196750
IP address blocks: 37.153.64.0/21 maxlen: 21
37.153.0.0/18 maxlen: 18
2a0e:ba00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:cf:03:44:4e:eb:85:a7:24:9f:53:c1:e1:5d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Jan 2 12:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88f6fdd7b7c85dd1a343a98ee668dcd23838d420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:78:59:2b:bd:33:21:0e:ec:ed:16:e0:6b:06:
38:9e:be:98:8d:d9:ac:c1:26:d1:4c:f7:35:ac:50:
94:14:a3:52:7d:4b:3d:f0:20:6b:2e:69:76:c2:79:
96:0b:12:5d:0c:27:06:2a:e8:15:c6:62:77:d1:97:
a1:c3:cd:ff:da:6b:b7:78:fe:4e:7d:26:81:b9:91:
95:b9:ed:08:6c:0c:a9:6e:b5:87:d2:a3:9d:0b:0a:
3c:0b:d2:81:05:ef:f7:2f:d5:2e:fa:47:5f:cd:0d:
48:a3:d4:a2:4a:e7:82:04:1a:ba:92:65:7b:eb:5f:
78:10:fa:53:27:b0:8b:e8:e6:4c:cc:64:96:85:96:
80:db:70:d6:30:c4:7a:74:bc:c6:4a:c2:33:b3:d2:
e1:2d:90:1e:b5:61:22:78:0a:fb:d5:b3:23:19:dd:
85:ca:a8:b5:4f:bb:24:d6:ba:72:42:ae:18:3a:29:
17:f1:1d:58:83:6f:ff:bd:2e:20:be:74:10:1f:4e:
05:3d:16:2d:af:6a:6a:83:2e:83:73:64:55:3e:6e:
64:85:52:58:b3:35:83:6a:16:65:a0:d4:a5:47:3a:
83:9a:e0:32:17:32:96:bc:b4:95:2b:e3:22:99:24:
55:a3:04:87:2a:07:e2:d6:b2:9d:73:c3:ea:ff:cc:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F6:FD:D7:B7:C8:5D:D1:A3:43:A9:8E:E6:68:DC:D2:38:38:D4:20
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/iPb917fIXdGjQ6mO5mjc0jg41CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.0.0-37.153.71.255
IPv6:
2a0e:ba00::/29
Signature Algorithm: sha256WithRSAEncryption
08:d4:21:c5:e2:0b:31:60:8c:04:93:01:5f:54:eb:c9:87:26:
ba:ac:15:68:82:fb:1c:4d:fa:df:b0:eb:70:37:66:de:9c:88:
f1:39:12:a4:40:68:55:5f:3c:8b:1a:ed:a0:5d:08:8d:50:c5:
2c:e9:e6:f6:58:9f:87:47:de:16:c1:62:a7:69:6f:33:b4:0e:
fe:b6:4f:68:fd:15:e8:d1:ee:03:05:9c:9d:0d:42:f7:69:f9:
34:d6:9a:a7:08:e9:71:c5:5d:3d:74:72:91:0d:62:8f:71:7b:
8a:bc:60:d0:6a:ce:d9:7d:57:95:73:e4:ee:53:92:59:fb:63:
33:1a:13:4b:5f:3e:59:61:7a:cb:82:ce:a6:a1:7c:b2:f1:cd:
9f:c9:21:70:32:81:80:8a:63:58:a7:d7:7b:51:bb:8b:09:08:
6f:6d:c6:ed:dc:e7:d5:25:a4:38:68:b9:74:f0:36:ad:d5:6a:
13:e4:ae:86:41:eb:d9:2d:80:41:a0:6c:fc:23:4e:dc:bb:15:
d7:76:9c:6a:3c:a8:c0:22:99:a8:88:7f:2b:5e:c1:d5:bd:e0:
f3:5a:91:b8:17:e6:3c:2e:15:d9:74:74:dc:05:00:70:00:0f:
14:74:36:bd:29:e2:6f:f4:0e:8a:3d:c2:24:75:4a:e9:43:51:
31:ba:40:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:24 2025 by rpki-client