Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/leyMw49TIfUUka2v8YcUoAXEnt8.roa
File: leyMw49TIfUUka2v8YcUoAXEnt8.roa (raw, json)
Hash identifier: VjX2MgM0OJKQiLseBKuV/1N6jp5/kDPTbHnG3OfmeK8=
Subject key identifier: 95:EC:8C:C3:8F:53:21:F5:14:91:AD:AF:F1:87:14:A0:05:C4:9E:DF
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 018CC2DB2FCD8494BC1CDEBEBD059A65D5C2
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/leyMw49TIfUUka2v8YcUoAXEnt8.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198612
IP address blocks: 37.208.0.0/19 maxlen: 19
185.166.208.0/22 maxlen: 22
2a00:c640::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2f:cd:84:94:bc:1c:de:be:bd:05:9a:65:d5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95ec8cc38f5321f51491adaff18714a005c49edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:e5:8a:6f:37:73:c5:e0:07:43:d8:55:c5:
31:2a:39:68:65:6d:c9:27:d6:7e:34:53:a2:b0:26:
8b:e0:15:8c:ce:3f:ef:66:88:31:ab:fb:cf:b5:5c:
a4:29:d9:f2:da:07:f9:2f:d5:3a:31:cf:4b:f7:2b:
1d:67:1e:1d:ad:43:f9:0f:07:0f:99:9d:e7:6c:d4:
e9:d3:e3:11:b7:f1:b2:80:48:f4:8f:02:f4:b3:c2:
e3:55:82:e5:2f:b7:03:60:c1:e7:ca:b3:63:8f:5e:
61:e4:fd:27:bb:7a:ee:ba:43:3e:be:30:df:8a:c5:
95:bc:41:1e:25:d8:b9:ba:a3:c4:03:66:2e:4e:ec:
26:33:1e:a3:bd:1c:56:3a:d5:04:34:d5:ad:42:09:
b7:f0:f1:04:97:dc:0e:34:41:19:d6:17:3d:52:e6:
d3:4d:86:4b:f8:78:99:64:eb:0b:86:cc:f0:28:09:
1f:40:6f:3d:9f:4d:08:e0:c7:06:b2:73:72:13:c6:
66:07:b9:08:3a:b0:28:70:4a:90:14:6b:b2:0f:f4:
7f:4f:e2:d4:cb:cc:e9:02:b9:21:3d:f8:87:3f:63:
3c:a5:0c:10:76:00:05:e9:38:fd:78:e8:0e:a5:76:
ba:1a:96:06:3a:d7:cc:6d:34:02:ec:2d:63:65:e2:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EC:8C:C3:8F:53:21:F5:14:91:AD:AF:F1:87:14:A0:05:C4:9E:DF
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/leyMw49TIfUUka2v8YcUoAXEnt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.0.0/19
185.166.208.0/22
IPv6:
2a00:c640::/32
Signature Algorithm: sha256WithRSAEncryption
8a:c3:84:e7:14:6a:b5:d6:6f:1a:02:a5:8d:2c:71:9d:5e:9f:
00:73:15:c2:bc:47:39:49:2b:b4:09:a7:27:31:2e:6c:3b:bc:
84:a2:15:17:5f:4c:1d:da:e6:f7:96:24:a1:7f:5e:86:79:99:
ee:e3:db:d5:62:0d:b2:7a:d1:d4:61:d2:fe:e6:3d:26:c0:52:
59:40:ce:a2:7c:90:87:38:e4:98:f5:2a:75:c5:66:17:34:b7:
06:a1:b4:fd:e6:fb:bd:5c:fa:42:3d:6d:d3:e5:8b:8f:e5:60:
ba:df:c2:4d:f3:97:a4:85:54:f7:d6:b5:38:c0:12:f6:fe:81:
12:ba:cf:ce:36:2a:b8:70:0c:82:61:17:a6:64:2e:12:4f:de:
59:a5:84:8c:9c:7a:89:54:be:31:03:87:c8:c4:af:92:c2:b0:
6f:fb:f5:58:24:8a:9d:b4:c8:bc:5e:66:aa:e0:c8:b5:61:0f:
f9:74:2d:ef:63:42:14:7d:e4:ef:66:3f:ce:81:f5:d9:87:d8:
43:b8:b4:39:c8:3f:0a:19:f9:9c:ba:17:35:34:36:fc:3e:3d:
5e:98:42:29:25:ae:dc:f5:8c:30:68:4c:6d:54:b6:3f:84:46:
9d:fa:57:1a:20:f8:66:e1:94:88:10:5d:04:81:c8:bc:88:3c:
bc:0d:56:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:26 2025 by rpki-client