Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eZCV9b7-1UobJ043bMWBsYKhdtI.roa
File: eZCV9b7-1UobJ043bMWBsYKhdtI.roa (raw, json)
Hash identifier: OvOtH5naDB7L5+KEmqmEVTMtR/REVQrRxj41L1dJkHI=
Subject key identifier: 79:90:95:F5:BE:FE:D5:4A:1B:27:4E:37:6C:C5:81:B1:82:A1:76:D2
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018EA4D681AC4776742D68D63DC2C8DE36DB
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eZCV9b7-1UobJ043bMWBsYKhdtI.roa
Signing time: Wed 03 Apr 2024 16:41:45 +0000
ROA not before: Wed 03 Apr 2024 16:41:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.153.132.0/24 maxlen: 24
84.247.20.0/24 maxlen: 24
89.34.171.0/24 maxlen: 24
89.37.106.0/24 maxlen: 24
89.42.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Apr 2024 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a4:d6:81:ac:47:76:74:2d:68:d6:3d:c2:c8:de:36:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 3 16:41:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=799095f5befed54a1b274e376cc581b182a176d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:25:ed:83:32:f6:b2:82:52:fa:16:da:0b:f7:
f2:de:f9:03:27:d1:80:60:90:91:88:20:e5:16:b7:
9c:7a:a5:a1:f2:77:dd:96:a3:22:18:d2:99:9b:f0:
f4:1a:a9:3b:42:00:9c:b2:61:cd:75:a9:ea:23:d6:
d1:6e:f4:26:3e:9a:39:0d:11:d2:82:40:f7:e4:b5:
b3:b5:72:75:78:34:1b:87:77:64:9e:54:ca:d5:f8:
92:4f:cb:42:2a:af:41:51:47:fb:e6:9a:30:91:10:
e1:52:18:d0:de:fd:e5:24:a3:25:ed:75:fb:50:f3:
87:f1:9f:33:24:d6:a3:73:29:a7:16:ec:a8:38:4b:
2f:a7:5e:89:f1:4d:3c:8c:22:25:a5:e7:26:7f:73:
a0:67:53:e1:5c:ce:43:42:7f:0b:55:bd:b4:8b:14:
ad:42:08:77:bf:9d:36:7c:ae:6d:cc:f6:f7:fe:15:
3e:ca:5b:62:08:da:ec:0c:4d:0f:9d:91:c3:5c:06:
b6:ec:9b:1e:a1:f9:02:37:a9:03:ee:36:99:37:51:
96:44:21:2e:3c:f6:28:da:25:60:61:52:88:5a:0e:
d1:4d:5d:bc:1a:2c:a8:09:c1:87:7e:e3:2e:12:39:
cb:4b:6c:5f:23:89:3e:ec:f5:89:88:cc:66:f1:30:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:90:95:F5:BE:FE:D5:4A:1B:27:4E:37:6C:C5:81:B1:82:A1:76:D2
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eZCV9b7-1UobJ043bMWBsYKhdtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.132.0/24
84.247.20.0/24
89.34.171.0/24
89.37.106.0/24
89.42.213.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:8f:22:6d:f1:16:cb:06:a9:5d:c3:bf:e9:0f:15:fd:f8:86:
f8:dc:24:00:a0:7a:68:4b:b6:49:2d:af:80:02:27:1c:b0:21:
ec:41:db:33:c4:cf:58:b8:d3:a5:da:95:98:1c:b9:fa:93:af:
6f:46:77:c3:72:ff:bf:c7:9f:f5:1d:05:12:b2:fb:b5:bd:33:
98:6f:03:21:a3:fd:94:98:d0:ac:e6:99:87:26:58:23:e5:fd:
c1:4c:b5:ab:7b:e8:3c:5e:78:18:a5:c4:21:a5:5a:56:74:00:
34:d5:e1:91:83:b1:2a:48:b0:d1:3a:6a:9a:a4:7d:40:8e:4f:
67:1c:b3:85:d0:da:51:36:d5:13:e4:ed:fd:8c:3d:d5:3d:90:
f5:4d:69:98:5d:f5:2a:72:7a:98:95:5e:40:c0:4e:59:f3:95:
e7:0b:97:04:72:f2:16:48:a1:89:04:1a:93:8b:17:90:2f:ea:
4d:81:a3:ab:c7:f2:70:9a:56:38:e6:60:93:a0:3b:9c:ec:e2:
7b:4d:36:52:86:34:1f:7c:5a:18:b6:f4:07:7f:29:10:6d:97:
0e:2d:cc:9e:0e:61:d4:c6:ac:7a:df:d5:87:7d:66:c6:83:be:
a5:c3:34:00:c7:1c:07:4a:db:a8:8b:3e:0e:42:4b:ad:c7:07:
38:4c:b5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 18:41:04 2024 by rpki-client on console-fra.rpki-client.org