Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/eVVQLvCMhI8cp0jOEeaT0kyXIEw.roa
File: eVVQLvCMhI8cp0jOEeaT0kyXIEw.roa (raw, json)
Hash identifier: ET1PM133+dRdRBCghjqy12TBzGF/KIY+HozBKXRUJxs=
Subject key identifier: 79:55:50:2E:F0:8C:84:8F:1C:A7:48:CE:11:E6:93:D2:4C:97:20:4C
Certificate issuer: /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Certificate serial: 018CC5DC9EE9548810A5F4A190A18015F82B
Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/eVVQLvCMhI8cp0jOEeaT0kyXIEw.roa
Signing time: Mon 01 Jan 2024 16:30:19 +0000
ROA not before: Mon 01 Jan 2024 16:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57961
IP address blocks: 37.139.114.0/24 maxlen: 24
37.139.116.0/22 maxlen: 22
37.139.112.0/21 maxlen: 22
2a00:9f40:5::/48 maxlen: 48
2a00:9f40::/32 maxlen: 32
2a00:9f40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:9e:e9:54:88:10:a5:f4:a1:90:a1:80:15:f8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Validity
Not Before: Jan 1 16:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7955502ef08c848f1ca748ce11e693d24c97204c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:b6:fb:d0:e6:bb:43:bf:77:9f:a0:4f:89:
cc:31:f2:48:67:15:83:ac:ee:3a:c6:2f:f5:42:14:
07:c7:2b:3e:e3:3b:eb:be:71:2d:b9:eb:32:d5:6a:
93:20:c7:83:9e:cb:3d:51:1e:b9:08:e9:1b:c4:42:
26:6a:bc:6e:ab:f4:9f:5d:bf:5d:fa:25:d7:be:9e:
14:51:9b:45:e2:50:37:29:84:c0:a2:47:1a:66:08:
f4:1e:84:ab:75:41:6a:da:72:a3:1d:8b:57:66:ab:
98:be:ef:48:ba:87:20:57:8e:af:44:4b:20:86:05:
08:b7:7a:c4:4b:44:29:aa:ca:a7:45:0c:b2:18:52:
97:63:48:41:bb:b7:39:8a:b5:01:c6:d3:6e:43:b8:
45:a6:8f:e7:dc:49:c6:fb:19:28:4a:ed:82:a9:98:
01:6d:56:91:f9:fb:8f:1c:27:99:78:25:be:76:5a:
97:73:fd:cf:36:ef:1a:b4:4a:2a:26:c0:b5:81:e2:
cb:b4:33:cc:c8:49:b5:cd:c6:1f:cc:cd:6d:de:d8:
57:b4:63:45:b6:54:32:2b:e1:0f:22:8f:d8:94:2e:
0c:a6:36:e1:d3:eb:07:86:45:b3:8d:3a:12:32:fd:
1e:1e:9f:42:60:cc:e0:fa:d3:06:15:5b:d6:79:57:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:55:50:2E:F0:8C:84:8F:1C:A7:48:CE:11:E6:93:D2:4C:97:20:4C
X509v3 Authority Key Identifier:
keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/eVVQLvCMhI8cp0jOEeaT0kyXIEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.112.0/21
IPv6:
2a00:9f40::/32
Signature Algorithm: sha256WithRSAEncryption
96:5e:97:b0:49:1b:20:88:f6:60:7e:0a:13:5e:96:59:3d:17:
3b:14:e9:21:2e:e1:32:ab:9e:c4:20:45:13:13:93:f4:8c:ae:
41:7c:94:0f:aa:a7:c9:db:22:eb:e8:5a:2b:b5:3b:cb:d5:2e:
19:94:ff:0c:f3:b7:38:b9:8c:4d:19:06:c6:40:e8:02:90:ed:
b7:bb:fb:87:5b:87:f3:fc:50:f6:21:71:33:51:b1:60:90:54:
03:70:28:4b:17:2c:f5:8b:18:7e:86:35:ca:87:3d:34:ca:ea:
bb:bc:bd:e5:c4:2b:93:77:10:ba:14:2d:ab:34:18:96:c9:f5:
78:b8:11:aa:da:ae:db:22:bc:e4:44:35:b1:19:ad:37:f4:ed:
58:f5:ea:85:6e:d9:47:48:aa:f7:e0:55:ae:09:3e:cc:93:de:
5a:54:b7:02:14:83:39:a6:9a:55:21:c7:66:2c:47:7e:66:67:
03:b2:d9:f6:49:9a:0e:db:b5:c6:ce:de:3f:53:2a:23:f9:e3:
bb:cf:9a:3a:2f:0b:aa:00:12:3c:61:83:96:ee:80:a7:85:70:
a5:17:82:bb:b8:88:a8:b9:af:c1:5c:e7:67:c5:4d:d5:3a:e2:
b7:0d:fd:0e:2f:15:a3:49:9a:2b:d1:93:a2:0e:d7:fd:e5:1c:
e9:86:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:01 2025 by rpki-client