Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/G9DjbofO7Jho8xGCefJOsHygop0.roa
File: G9DjbofO7Jho8xGCefJOsHygop0.roa (raw, json)
Hash identifier: JDyWe2lkLkUTnfC80+kupQIy07xQF9WTTVcLG8PNBFE=
Subject key identifier: 1B:D0:E3:6E:87:CE:EC:98:68:F3:11:82:79:F2:4E:B0:7C:A0:A2:9D
Certificate issuer: /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial: 018570429D35BD91DAFD968EAD38E5ADF04A
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/G9DjbofO7Jho8xGCefJOsHygop0.roa
Signing time: Mon 02 Jan 2023 02:14:51 +0000
ROA not before: Mon 02 Jan 2023 02:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205978
IP address blocks: 37.203.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:9d:35:bd:91:da:fd:96:8e:ad:38:e5:ad:f0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Validity
Not Before: Jan 2 02:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bd0e36e87ceec9868f3118279f24eb07ca0a29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:ed:85:5b:07:d1:5c:18:01:7f:bb:1c:cb:
12:e3:09:4f:66:3c:7c:ea:86:a1:2e:01:e2:75:b6:
5d:77:79:d6:de:7d:5e:98:cb:aa:b1:24:3e:c3:de:
ae:05:6b:c3:df:3a:29:4d:09:d5:48:e1:b8:0e:c8:
5a:ca:20:d0:58:fd:90:d4:0c:be:10:1e:62:24:c5:
55:87:62:5b:0c:01:fd:77:86:66:0f:e2:72:83:b1:
aa:e9:e2:27:a2:df:36:60:58:c2:70:5c:52:0e:a3:
42:a4:f5:07:65:98:9d:fb:ca:19:86:d6:7f:be:3c:
0d:86:5d:d9:30:45:0e:92:8d:05:f3:38:e9:6f:46:
d1:40:cd:61:65:10:e3:fd:86:0a:86:3a:0d:e5:eb:
f8:0f:24:97:a7:fb:39:9a:61:ed:92:b7:82:9f:0f:
7e:df:f8:e7:69:08:83:23:63:ba:95:98:8f:f2:a9:
f8:88:14:15:d7:b5:ac:55:98:86:8a:80:15:6b:66:
f9:4c:2b:b1:4c:67:ea:c3:ce:17:67:ec:31:c0:b3:
b3:e4:e2:43:0e:cc:09:0f:f5:94:09:68:eb:01:c0:
99:95:9c:00:3e:c2:2d:ee:ae:4b:e4:11:1e:ef:e9:
54:ec:a7:33:8a:82:a1:4a:0d:cf:24:ef:2e:f6:cd:
25:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D0:E3:6E:87:CE:EC:98:68:F3:11:82:79:F2:4E:B0:7C:A0:A2:9D
X509v3 Authority Key Identifier:
keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/G9DjbofO7Jho8xGCefJOsHygop0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:8a:d2:fb:bb:41:af:d2:4e:e5:4c:5e:55:8f:29:b6:f9:5a:
c0:e5:b2:81:f0:2a:d2:07:f1:a0:e1:63:92:ae:70:f3:23:37:
ce:72:11:4b:d7:66:c7:79:d9:de:ab:ff:58:df:30:52:15:f8:
3f:79:33:7c:8a:86:50:0e:10:b8:6d:6e:6f:52:f7:5b:94:ad:
f9:fa:b9:a6:a8:79:81:75:c2:65:21:f2:0d:9d:a1:e2:2d:4e:
d1:9a:97:cd:4d:65:74:b7:b3:e9:25:da:a6:c4:8b:40:b6:c1:
d1:9d:bc:fe:1f:41:1d:5f:3d:2c:3d:31:85:90:57:06:95:2e:
77:61:08:d2:c9:a2:5a:4e:ff:a7:9c:2b:3f:5d:92:32:34:a4:
ff:cb:ce:bf:74:29:67:a2:b8:f5:d2:83:ea:b0:de:e9:5b:f5:
7d:d9:1f:f5:f8:f5:f8:a1:f9:38:e4:03:b0:a3:3a:2c:9c:51:
fa:d6:7b:de:21:0c:af:89:82:bb:08:0e:9b:cd:3b:97:7a:cf:
ed:94:bc:2a:10:98:10:b6:be:34:0c:62:50:79:d8:13:4e:f0:
f9:87:68:88:33:15:b3:7d:68:9c:12:c3:d9:1e:76:3a:c8:ea:
c6:2e:0b:30:c9:d2:0b:74:e0:45:e1:14:7b:e0:d7:2c:96:93:
ba:8d:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:37 2024 by rpki-client on console-fra.rpki-client.org