Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/g740jVbVtbeZDVOLZ8RrD3KRTHw.roa
File: g740jVbVtbeZDVOLZ8RrD3KRTHw.roa (raw, json)
Hash identifier: 07fJ1YOa+hkeRCS0hFb2Vd4kC4fpGSvchD79siTeAaM=
Subject key identifier: 83:BE:34:8D:56:D5:B5:B7:99:0D:53:8B:67:C4:6B:0F:72:91:4C:7C
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 018F1A57F54FC583C7C281E1798CE67EE162
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/g740jVbVtbeZDVOLZ8RrD3KRTHw.roa
Signing time: Fri 26 Apr 2024 12:18:43 +0000
ROA not before: Fri 26 Apr 2024 12:18:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44252
IP address blocks: 37.153.174.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.235.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
93.113.250.0/24 maxlen: 24
94.228.227.0/24 maxlen: 24
94.228.229.0/24 maxlen: 24
94.228.230.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.233.0/24 maxlen: 24
94.228.234.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
94.228.238.0/24 maxlen: 24
176.67.192.0/24 maxlen: 24
176.67.193.0/24 maxlen: 24
176.67.194.0/24 maxlen: 24
176.67.196.0/24 maxlen: 24
176.67.198.0/24 maxlen: 24
176.67.200.0/23 maxlen: 24
176.67.202.0/23 maxlen: 24
176.67.204.0/24 maxlen: 24
176.67.205.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.208.0/24 maxlen: 24
176.67.210.0/24 maxlen: 24
176.67.211.0/24 maxlen: 24
176.67.212.0/24 maxlen: 24
176.67.214.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.219.0/24 maxlen: 24
176.67.220.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
176.67.223.0/24 maxlen: 24
178.17.19.0/24 maxlen: 24
178.17.22.0/24 maxlen: 24
178.17.23.0/24 maxlen: 24
178.17.24.0/24 maxlen: 24
178.17.26.0/24 maxlen: 24
178.17.27.0/24 maxlen: 24
178.17.28.0/24 maxlen: 24
178.17.30.0/24 maxlen: 24
185.27.128.0/24 maxlen: 24
185.27.131.0/24 maxlen: 24
185.36.255.0/24 maxlen: 24
188.215.30.0/24 maxlen: 24
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 14:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1a:57:f5:4f:c5:83:c7:c2:81:e1:79:8c:e6:7e:e1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Apr 26 12:18:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83be348d56d5b5b7990d538b67c46b0f72914c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:d2:38:9f:e8:08:f7:33:5e:15:be:d5:99:
87:8d:de:4d:b5:ac:c4:ff:13:28:a0:62:be:3e:b6:
40:80:03:82:d6:fc:d4:85:4a:04:43:7f:2a:6a:27:
8f:af:09:26:bb:8e:16:75:8b:22:14:03:a6:ed:c6:
62:0c:4c:c7:f0:44:f0:5b:07:a8:0e:2f:99:a3:71:
3e:7c:90:19:82:6a:23:d1:7c:ac:76:4d:d9:a3:28:
db:92:47:41:09:6f:ec:fe:33:73:66:9d:a2:7f:67:
88:42:ee:4a:49:7e:85:55:50:94:ac:8e:16:37:16:
36:98:5a:bf:59:9e:d0:d5:02:82:13:28:a6:43:cc:
33:48:71:04:e7:0e:17:a3:d1:6c:d6:7e:f2:73:74:
b1:14:bb:00:b2:b8:03:21:d0:84:c1:54:d8:e7:6f:
51:43:23:20:f3:46:b0:ce:0e:61:fe:b2:c8:91:77:
82:e4:b5:8a:6e:d1:0b:53:99:69:eb:21:90:a3:bd:
65:65:17:2a:c7:86:b4:c0:0f:f0:1d:ee:17:58:33:
85:f0:72:ab:42:4e:35:c1:ec:6a:6a:c3:be:ab:d6:
d8:22:92:14:8b:86:ac:a7:ba:a1:6d:b5:74:26:f6:
66:2e:29:d3:e1:7e:8a:10:e4:eb:7c:31:d0:8a:b9:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BE:34:8D:56:D5:B5:B7:99:0D:53:8B:67:C4:6B:0F:72:91:4C:7C
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/g740jVbVtbeZDVOLZ8RrD3KRTHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.174.0/24
92.60.224.0-92.60.233.255
92.60.235.0/24
92.60.237.0-92.60.239.255
93.113.250.0/24
94.228.227.0/24
94.228.229.0-94.228.231.255
94.228.233.0-94.228.234.255
94.228.237.0-94.228.238.255
176.67.192.0-176.67.194.255
176.67.196.0/24
176.67.198.0/24
176.67.200.0-176.67.208.255
176.67.210.0-176.67.212.255
176.67.214.0/24
176.67.217.0-176.67.221.255
176.67.223.0/24
178.17.19.0/24
178.17.22.0-178.17.24.255
178.17.26.0-178.17.28.255
178.17.30.0/24
185.27.128.0/24
185.27.131.0/24
185.36.255.0/24
188.215.30.0/24
188.240.200.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:85:f7:07:f5:a5:44:a5:19:91:21:dc:06:e9:f6:f7:42:f7:
7f:f0:36:f8:21:d9:cd:9b:44:a5:6c:2e:73:cb:6c:46:bd:24:
bb:ea:49:05:65:d4:c6:d7:5d:5b:71:03:23:43:fc:7d:62:ed:
cb:50:b3:b1:5b:90:14:98:2b:e8:b9:a1:fc:82:14:4f:c6:94:
95:31:1f:19:44:c1:7d:ae:d6:58:57:c1:b0:0e:52:40:b5:a4:
e4:6a:a0:bc:44:fa:34:61:2e:58:08:fc:c4:ec:bb:a8:87:c8:
05:1c:d7:5e:54:8c:e2:76:59:9c:be:ad:1b:f8:2f:a0:80:c3:
94:92:5d:d6:29:90:75:2c:ce:9d:cb:67:c4:f5:57:d0:fa:a9:
c6:d9:8c:ff:50:3c:9f:07:3a:e5:61:64:3e:c2:01:c3:5f:dd:
8f:79:f7:08:6d:21:f6:44:7b:37:5e:4f:1a:9b:42:83:dc:1b:
9a:1f:2d:03:5f:51:a7:36:7f:29:6a:ee:12:38:8b:9e:ab:18:
c7:ce:30:60:f4:ab:01:88:c3:2a:af:c5:b1:77:d5:db:0c:cc:
92:d5:c1:e4:a3:48:6a:20:cb:ce:bb:75:73:68:e7:8a:ba:55:
54:6d:c9:14:ec:99:b4:e3:50:26:5f:db:a1:fc:98:c8:35:8b:
dc:da:51:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 18:02:45 2024 by rpki-client on console-fra.rpki-client.org