Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/dNJmvhIwZ7sh9mPiHR6OAAZqr7E.roa
File: dNJmvhIwZ7sh9mPiHR6OAAZqr7E.roa (raw, json)
Hash identifier: ywLWCymMKy2qFiqzgR/lyh1IY9RtJSsrFm7RuD71qOo=
Subject key identifier: 74:D2:66:BE:12:30:67:BB:21:F6:63:E2:1D:1E:8E:00:06:6A:AF:B1
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018E02DC7DFE789004FC259A55D6C5A2C8E1
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/dNJmvhIwZ7sh9mPiHR6OAAZqr7E.roa
Signing time: Sun 03 Mar 2024 05:49:48 +0000
ROA not before: Sun 03 Mar 2024 05:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 37.220.87.0/24 maxlen: 24
45.129.184.0/24 maxlen: 24
85.92.109.0/24 maxlen: 24
185.166.199.0/24 maxlen: 24
185.247.184.0/24 maxlen: 24
195.80.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 09:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:02:dc:7d:fe:78:90:04:fc:25:9a:55:d6:c5:a2:c8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Mar 3 05:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74d266be123067bb21f663e21d1e8e00066aafb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fa:c4:00:b7:fd:a6:d4:53:93:d8:83:2b:c2:
40:48:7b:4a:4d:f8:3c:cb:52:3b:28:4d:3f:be:3a:
ee:3d:cd:d0:6b:9a:dd:12:fb:34:80:b1:4d:e7:2f:
6d:4c:2c:7f:80:57:00:68:6f:2e:ef:ee:01:0f:4a:
a3:0d:e8:15:f3:19:00:69:2d:d2:a8:f4:96:c3:76:
8d:13:33:9e:cb:b2:74:e5:3f:89:79:5e:8b:9c:53:
41:e3:f7:0b:f2:e3:d9:98:96:16:3a:f8:a2:92:b3:
fb:ae:38:b2:79:6f:93:ba:bb:ab:1c:cb:da:3c:1d:
0f:c4:be:f6:7d:99:41:58:77:84:8a:32:f7:07:e6:
43:ff:31:8f:62:a3:cd:24:13:f8:14:aa:45:ed:13:
50:8b:c8:e8:c3:6c:c8:cb:e0:db:d8:79:9e:7e:9c:
57:ff:ef:78:b8:e8:44:d0:3d:22:9d:c8:f6:ed:ef:
b0:da:be:4a:ce:74:5f:8f:ba:23:f6:4a:29:9c:c5:
bc:7e:05:a3:0e:7a:2a:c4:a8:02:18:44:ad:31:9b:
fd:68:29:ee:0f:61:f7:ee:4b:dc:d8:af:83:39:a3:
ba:bc:3b:c9:e5:78:d8:ee:31:a1:dc:09:98:67:18:
d2:1b:05:a6:ed:18:f1:29:93:60:f9:6b:ae:5a:e9:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D2:66:BE:12:30:67:BB:21:F6:63:E2:1D:1E:8E:00:06:6A:AF:B1
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/dNJmvhIwZ7sh9mPiHR6OAAZqr7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.87.0/24
45.129.184.0/24
85.92.109.0/24
185.166.199.0/24
185.247.184.0/24
195.80.48.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7d:7d:8b:ad:57:b7:dc:45:20:80:e8:7b:3c:f9:55:f2:bb:
9c:c9:01:ae:51:21:8c:db:fb:35:5d:4d:8a:cc:dd:58:3d:45:
a5:4f:da:1f:ba:e0:9c:69:a5:4f:db:0c:59:c4:83:db:53:20:
72:02:45:6a:d8:64:75:ca:97:ce:13:92:5b:63:15:d7:7f:82:
e9:af:3d:73:95:a2:75:3f:2c:e5:6b:4f:1d:6c:44:b3:fd:5e:
eb:66:44:c6:88:39:c7:86:80:54:d6:25:19:98:41:e3:18:f3:
93:44:2f:29:d9:09:b0:ef:17:94:06:ed:a4:e4:a7:4e:b5:84:
78:ae:ae:6b:da:45:c8:02:a2:79:9a:3d:06:15:28:d5:91:b7:
a4:14:89:c0:3d:0d:8d:aa:09:af:4f:ea:04:07:ba:64:e3:7d:
9b:1a:b2:c2:77:fb:6d:36:f2:39:80:90:04:93:db:80:d1:55:
cb:89:ac:ba:95:d4:d7:d8:e4:23:5f:40:32:90:91:66:9c:ea:
91:27:e7:e0:d4:6c:ad:47:f4:9e:b8:55:07:f9:64:d2:97:e2:
1c:cf:ee:ea:44:57:91:1c:bb:48:0a:26:43:d3:c3:fb:b7:86:
fc:1a:6f:b7:60:51:ac:36:83:45:38:c9:ed:34:a6:5b:0a:4e:
8e:ee:52:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org