Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/2EY7ul1tBGHhnDJiswTKJAdklrQ.roa
File: 2EY7ul1tBGHhnDJiswTKJAdklrQ.roa (raw, json)
Hash identifier: fcDEGnZZRbRbyfH6jIvq9K1+J+eODhSV7wOyf45+OqY=
Subject key identifier: D8:46:3B:BA:5D:6D:04:61:E1:9C:32:62:B3:04:CA:24:07:64:96:B4
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 01941C300E0C3C46C40CFC28F6813E67CFA9
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/2EY7ul1tBGHhnDJiswTKJAdklrQ.roa
Signing time: Tue 31 Dec 2024 10:08:18 +0000
ROA not before: Tue 31 Dec 2024 10:08:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39737
IP address blocks: 37.153.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1c:30:0e:0c:3c:46:c4:0c:fc:28:f6:81:3e:67:cf:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Dec 31 10:08:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8463bba5d6d0461e19c3262b304ca24076496b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:b6:65:ac:64:3e:ca:bc:f5:ac:af:06:32:
fb:b2:3c:44:9a:88:b8:5a:f5:98:6b:ea:cf:3a:f9:
8a:94:b2:c6:3b:52:f9:49:10:c3:01:9f:3a:52:80:
3a:fa:bf:86:c8:2d:4a:2c:95:60:f3:79:ac:75:c5:
50:86:90:35:23:70:4c:ec:71:5d:7b:f5:4d:5a:15:
83:d4:a6:81:5f:e0:13:14:3f:e2:fc:ff:dd:c0:35:
f8:3e:78:41:d4:b6:c3:62:41:7f:db:b0:11:7d:30:
5c:a1:7c:d1:53:7f:2f:d4:b1:6e:87:d7:ba:ea:1c:
84:a2:4e:d5:36:ab:31:13:17:a8:33:d4:b3:30:cc:
e6:b6:ca:e1:6d:86:73:80:13:03:21:a1:be:70:d8:
eb:dd:61:0d:28:e4:91:d1:a5:70:e4:70:a2:e6:72:
32:86:1f:fb:86:9b:ae:37:a6:df:96:95:e3:ca:f8:
59:03:28:07:e3:e8:d1:9a:21:c5:4d:ce:eb:8b:60:
64:58:fe:ab:8f:2c:21:9b:97:1c:d9:24:9d:6f:54:
ab:d3:e9:04:12:1a:a4:e0:66:45:b2:a1:ed:81:dc:
b8:4b:ef:49:b6:e9:7a:92:0c:ee:4b:06:15:21:6a:
f9:46:b0:d3:dc:50:dc:92:45:c0:10:fb:b4:f0:55:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:46:3B:BA:5D:6D:04:61:E1:9C:32:62:B3:04:CA:24:07:64:96:B4
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/2EY7ul1tBGHhnDJiswTKJAdklrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.136.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a8:92:68:11:ab:1c:e7:9e:ea:c6:91:9c:0a:3c:4d:6f:2b:
2c:16:4c:1d:3e:b4:ac:45:3b:2c:61:30:16:eb:aa:94:0e:dd:
be:99:1c:eb:7a:f0:78:71:29:b0:4f:05:94:75:6a:ea:31:06:
83:30:f5:9e:a1:f4:e4:53:a3:ad:39:e0:c6:53:7d:4d:99:aa:
48:98:e1:13:fc:c7:68:fa:c8:12:ea:df:86:43:17:c5:df:44:
1b:6a:08:fc:26:bd:ef:4f:fe:93:55:b6:8a:12:42:02:54:76:
2d:05:5b:fc:13:8b:f9:f9:40:3f:8f:12:65:20:d9:1d:69:e4:
67:d4:f2:73:83:d2:7f:81:d6:73:f0:8b:bf:9a:36:38:9b:e9:
55:37:f1:46:af:15:b9:fe:21:84:88:f3:b7:66:a3:fd:21:cf:
6b:eb:1b:42:51:4a:ee:0a:34:92:94:fa:77:f5:ec:73:8d:28:
fc:30:20:95:f5:14:ec:1e:50:ed:d1:8a:05:ea:d2:da:c1:fe:
6f:17:7f:2a:e4:a8:04:0b:30:06:df:ec:0a:5c:3b:df:7f:14:
02:af:6e:13:b0:66:31:5b:ad:35:0c:19:d7:f8:00:1c:02:f5:
ed:41:3f:87:8a:f4:f4:99:36:91:83:0b:a1:a5:7a:04:57:03:
76:ff:30:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:26 2025 by rpki-client