Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/cWJw6Oidq-pqBjDWcvEFeQjNtAg.roa
File: cWJw6Oidq-pqBjDWcvEFeQjNtAg.roa (raw, json)
Hash identifier: t+O67kGV0zPCTDleSbYHR02Nd/7e7FHX7cFTJvIL2IU=
Subject key identifier: 71:62:70:E8:E8:9D:AB:EA:6A:06:30:D6:72:F1:05:79:08:CD:B4:08
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01892A5D687267EA68C869058597837FD6C9
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/cWJw6Oidq-pqBjDWcvEFeQjNtAg.roa
Signing time: Thu 06 Jul 2023 08:41:51 +0000
ROA not before: Thu 06 Jul 2023 08:41:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48881
IP address blocks: 188.212.111.0/24 maxlen: 24
37.156.7.0/24 maxlen: 24
86.105.26.0/24 maxlen: 24
46.102.254.0/24 maxlen: 24
93.113.28.0/24 maxlen: 24
91.250.247.0/24 maxlen: 24
188.209.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:5d:68:72:67:ea:68:c8:69:05:85:97:83:7f:d6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jul 6 08:41:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=716270e8e89dabea6a0630d672f1057908cdb408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:63:b6:a7:ff:e5:d3:1d:52:fa:b5:2e:cb:
65:dd:b2:60:f1:5f:75:9f:ff:ad:a6:07:ed:68:5e:
12:2d:3a:59:3e:67:a7:d2:da:17:77:fa:06:4b:19:
b4:1a:55:66:96:50:45:30:e4:10:64:91:08:d0:d1:
96:12:4b:05:af:0e:61:52:e0:90:0e:52:6a:0f:5e:
4b:c3:7b:08:00:d9:4f:88:16:9a:7b:e5:01:56:73:
8c:61:b3:23:82:3b:85:78:fb:4f:20:c6:b7:9a:f5:
26:9b:bb:cd:82:44:0f:59:89:cf:25:c0:65:92:d8:
36:ac:51:52:8e:28:ed:55:53:a1:4e:6b:22:75:51:
46:e8:ea:2c:89:01:a4:af:aa:01:f0:b8:8e:50:7f:
e2:06:bc:10:01:5b:b8:85:4b:b7:d2:9d:27:74:6d:
29:7e:53:05:a3:68:6c:5a:73:d2:d6:65:3e:d5:f9:
af:db:5f:f1:e3:3a:65:2f:ea:c7:0d:fe:5d:09:bd:
15:9f:e0:53:4b:05:34:7a:dc:5a:1b:48:97:f1:f0:
85:c1:ec:60:f9:19:0d:0c:f3:dc:6f:54:c4:07:f6:
c3:7d:20:8b:59:cc:9c:18:01:c5:f3:60:30:ec:09:
7e:71:17:37:b5:ce:4e:39:59:04:4a:e5:69:8b:1f:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:62:70:E8:E8:9D:AB:EA:6A:06:30:D6:72:F1:05:79:08:CD:B4:08
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/cWJw6Oidq-pqBjDWcvEFeQjNtAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.7.0/24
46.102.254.0/24
86.105.26.0/24
91.250.247.0/24
93.113.28.0/24
188.209.212.0/24
188.212.111.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f2:a0:a8:42:04:f3:74:25:47:0c:28:91:19:37:27:76:42:
dc:a8:d4:13:6b:9a:39:15:66:ad:93:b8:38:4a:e5:08:d8:28:
9b:5c:01:2e:22:bc:de:ee:6d:cd:b0:d1:4b:74:2c:f6:a3:ea:
e1:de:98:42:67:ff:40:92:13:b8:2c:f7:92:15:df:1c:c4:e5:
2a:fc:54:ca:08:ed:1a:54:f0:22:47:d8:72:b7:11:d4:d2:19:
cd:f5:b3:e7:50:fb:9e:0b:69:f4:c6:4f:4d:ca:98:2a:8f:b2:
e9:8f:0a:28:e2:13:d1:09:0c:35:79:83:8a:ac:4b:ae:b9:a4:
07:5f:f5:73:6f:6d:c5:75:02:62:a1:98:47:16:b4:bc:47:6c:
4e:f8:8f:b6:dc:86:a5:7a:0c:11:32:6e:6d:96:19:e8:31:0f:
65:c8:c5:58:ce:c6:57:ff:25:d7:ba:4b:fa:fc:93:f5:44:ae:
d1:df:60:85:1f:85:2a:81:65:79:e3:f7:69:ba:c6:77:0d:28:
d0:6e:9d:c6:99:93:8c:53:6a:44:b9:7e:0b:f0:b8:6c:f7:ab:
ed:be:75:06:e2:fd:68:ad:4f:79:4a:6b:bb:f4:ed:c7:ed:01:
76:bf:62:13:d0:54:d9:a2:d0:38:64:15:31:b4:ee:36:49:c2:
6a:fe:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:41 2024 by rpki-client on console-ams.rpki-client.org