Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/TA4CiWssZOMhr0qKIQJE6tmyMDU.roa
File: TA4CiWssZOMhr0qKIQJE6tmyMDU.roa (raw, json)
Hash identifier: gfNWUBd/0lzswrzUhy4ikWl3aRsJVtzWzoxWC0Cyu2Y=
Subject key identifier: 4C:0E:02:89:6B:2C:64:E3:21:AF:4A:8A:21:02:44:EA:D9:B2:30:35
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 019407DC34BEF6E9BAE129B5B36321AB8A1C
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/TA4CiWssZOMhr0qKIQJE6tmyMDU.roa
Signing time: Fri 27 Dec 2024 11:24:19 +0000
ROA not before: Fri 27 Dec 2024 11:24:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200154
IP address blocks: 37.32.77.0/24 maxlen: 24
37.32.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:dc:34:be:f6:e9:ba:e1:29:b5:b3:63:21:ab:8a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Dec 27 11:24:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c0e02896b2c64e321af4a8a210244ead9b23035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:a5:66:ca:be:9a:5f:f5:1f:a9:c7:68:aa:
86:61:4c:5b:61:b2:2b:6e:b9:1d:08:56:be:b6:5a:
78:44:29:b1:50:10:93:e4:8e:37:3a:41:6d:d2:99:
8f:fc:e5:01:00:15:0d:ee:48:54:1a:a7:d7:13:2e:
3b:57:50:44:6d:43:fe:dc:c3:3b:e1:b4:1a:33:40:
f2:34:26:e9:ec:e5:8c:53:83:54:ac:20:97:83:ef:
6e:e8:6a:2d:65:89:58:d7:93:21:3f:c5:28:ab:1a:
43:d5:a5:97:83:d9:38:e7:30:44:5b:b5:ab:b1:09:
13:a8:d5:75:28:00:b2:d5:f1:b2:0d:76:2b:d0:2f:
0e:d3:24:7e:c3:b8:60:36:25:c2:65:21:95:5e:36:
25:1f:f4:f8:db:cd:aa:b1:c9:8b:88:ec:19:fc:81:
b1:7a:bf:f1:44:12:dc:13:ab:48:0a:21:b9:93:63:
a8:32:db:0f:e1:29:aa:62:60:89:a9:66:8d:45:f2:
d9:3d:29:52:12:c4:8f:29:b8:49:64:0e:3b:1c:57:
7e:4c:2a:1e:5e:a6:c6:8f:c6:2f:00:3e:c8:8d:64:
35:f7:55:08:ab:6e:d7:7e:92:14:11:c3:df:f8:cd:
37:09:06:c7:13:da:6b:92:59:03:6c:3e:5d:15:7d:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0E:02:89:6B:2C:64:E3:21:AF:4A:8A:21:02:44:EA:D9:B2:30:35
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/TA4CiWssZOMhr0qKIQJE6tmyMDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.77.0/24
37.32.79.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f0:32:d9:f8:2a:41:c6:6b:78:05:07:fb:5f:01:8e:83:df:
3e:e9:a9:f4:68:52:57:88:af:25:d1:b6:6f:ef:21:e5:d2:d8:
e1:ee:d4:32:cf:4c:28:14:90:c1:a2:c0:62:a8:ec:18:27:4a:
56:62:89:8c:d0:2f:ad:20:f1:b2:93:cc:a9:73:35:ba:e5:7f:
62:b8:d6:2c:3e:03:f2:07:43:dc:48:0c:50:b9:b7:10:89:af:
5a:58:e2:4f:23:1d:32:e0:1d:2f:9b:c3:c0:f6:c1:5d:be:bb:
57:4f:35:42:ef:bc:35:9b:bc:3e:ed:a0:54:96:80:a2:db:55:
31:d4:68:a6:d0:9f:b9:7d:ac:51:ea:89:af:da:60:3f:24:30:
20:da:17:67:91:63:d8:91:9d:83:5b:3d:ad:18:bf:d1:4b:27:
a4:a2:a7:8e:58:ab:33:e4:04:98:16:d8:89:74:0d:68:fb:35:
f1:2d:66:2b:f5:5a:75:ae:71:a7:bd:56:ee:b9:46:84:4e:c2:
34:97:16:c3:98:c6:4d:8e:f3:38:2a:0c:53:fe:0d:b3:71:30:
ba:fa:bb:60:d3:12:67:f3:d6:17:29:c0:4c:dc:65:a5:0e:5f:
8d:79:67:30:c1:d4:38:e4:43:d1:e7:89:f6:46:36:54:e8:11:
0d:7c:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:00:14 2025 by rpki-client