Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/nGrQK9hkfD3b1JFO_26-_wIxnWM.roa
File: nGrQK9hkfD3b1JFO_26-_wIxnWM.roa (raw, json)
Hash identifier: yAMP2xtxWc485XkrlSCgJwCA7pPYCY3wsNtdxl9ssRU=
Subject key identifier: 9C:6A:D0:2B:D8:64:7C:3D:DB:D4:91:4E:FF:6E:BE:FF:02:31:9D:63
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018E316D861B750961E013788B8FD377F31C
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/nGrQK9hkfD3b1JFO_26-_wIxnWM.roa
Signing time: Tue 12 Mar 2024 06:50:44 +0000
ROA not before: Tue 12 Mar 2024 06:50:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.153.132.0/24 maxlen: 24
84.247.20.0/24 maxlen: 24
89.34.171.0/24 maxlen: 24
89.37.106.0/24 maxlen: 24
89.42.213.0/24 maxlen: 24
94.177.113.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 07:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:6d:86:1b:75:09:61:e0:13:78:8b:8f:d3:77:f3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Mar 12 06:50:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c6ad02bd8647c3ddbd4914eff6ebeff02319d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4d:ee:78:6f:d6:69:fc:f2:6c:55:fc:50:ba:
94:8c:a9:31:27:f5:e6:7f:1d:1d:ea:d8:50:d9:76:
3e:37:c0:2a:2b:9c:e0:dc:d7:78:c4:66:7c:fc:0c:
6f:7f:53:c1:cb:9f:22:ef:d5:61:97:3c:37:13:72:
41:a9:c4:71:70:ef:71:9b:e7:de:2d:bc:86:f3:6c:
e6:9a:4b:04:0c:4e:01:be:f8:1f:f6:cc:3e:aa:10:
92:da:97:f7:a1:32:ab:24:52:6f:9d:6f:70:4d:79:
83:30:5c:23:2a:00:74:88:cc:2f:c4:34:17:c9:f5:
2f:f1:fd:5f:80:f8:70:10:5e:65:1d:9c:cb:bb:a6:
10:44:ff:00:c6:1a:ae:00:f1:ed:e3:35:1e:c0:dd:
4a:a4:7b:d6:0f:a5:88:53:13:e5:38:dc:85:4d:b9:
59:dc:28:83:0f:e1:6f:02:32:f2:fe:dc:1f:42:08:
d0:44:78:94:a5:a2:73:96:ff:f8:74:62:3f:73:b3:
5d:17:34:d9:9b:68:de:f3:c1:f7:59:10:d3:04:5d:
c3:8b:d6:84:e0:ae:c5:64:0b:f3:e9:a0:bc:61:74:
67:b6:6a:7f:80:d3:69:e1:57:0b:73:7f:56:22:b1:
1a:c2:7c:cf:a8:33:60:d2:5e:fc:97:68:48:32:12:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6A:D0:2B:D8:64:7C:3D:DB:D4:91:4E:FF:6E:BE:FF:02:31:9D:63
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/nGrQK9hkfD3b1JFO_26-_wIxnWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.132.0/24
84.247.20.0/24
89.34.171.0/24
89.37.106.0/24
89.42.213.0/24
94.177.113.0/24
94.177.118.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f8:c2:77:ee:97:e7:1a:aa:1b:79:4b:4d:c7:01:9b:88:32:
21:40:d9:1e:1c:15:38:9f:cf:1e:3d:25:8c:ac:62:34:8d:a5:
eb:2d:b2:b9:f3:5f:40:92:c2:63:61:e1:9c:05:ef:b2:a8:d1:
e2:55:ee:8a:71:48:b0:a0:f4:52:54:3b:83:cd:76:e3:84:90:
9e:eb:84:a1:91:83:d3:e0:01:66:01:e8:c4:d7:f8:1a:1e:98:
42:1d:35:1b:2f:63:ed:07:f5:d2:f4:e2:ef:b0:b0:0a:aa:68:
bf:36:85:87:93:39:e9:8c:c3:29:a0:f0:3f:17:f2:d4:e0:61:
4a:02:ff:97:b2:69:13:0b:3b:a3:95:82:69:94:02:7c:ed:6f:
7a:56:b7:97:67:9c:00:d8:34:cc:a6:3b:3d:b1:3a:2f:96:b7:
19:29:5a:86:03:31:85:f3:64:01:4c:22:00:32:00:98:57:6b:
17:ca:56:69:ce:72:37:e3:66:1c:20:da:4b:99:e2:4a:2b:b5:
b1:ac:c6:26:bb:07:72:92:87:05:77:6a:73:97:0c:17:76:ec:
50:7e:c6:e4:54:22:6e:75:0b:4c:b9:c2:be:1a:b7:b7:a9:70:
75:1a:5e:be:4a:82:94:95:cb:27:3d:44:21:67:b4:95:c9:00:
c7:7e:e4:45
-----BEGIN CERTIFICATE-----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Generated at Tue Mar 19 10:08:32 2024 by rpki-client on console-ams.rpki-client.org