Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/6OZKIPqzQ8bsZs71QULNwhR8-Xs.roa
File: 6OZKIPqzQ8bsZs71QULNwhR8-Xs.roa (raw, json)
Hash identifier: xmqUPPOM9AAce3uaGEXITVp9u4y/Zn4t29ARcjhiMiQ=
Subject key identifier: E8:E6:4A:20:FA:B3:43:C6:EC:66:CE:F5:41:42:CD:C2:14:7C:F9:7B
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 018CD44877B87D9858F128197072227DBAA5
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/6OZKIPqzQ8bsZs71QULNwhR8-Xs.roa
Signing time: Thu 04 Jan 2024 11:42:48 +0000
ROA not before: Thu 04 Jan 2024 11:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210892
IP address blocks: 37.44.228.0/22 maxlen: 24
37.44.228.0/24 maxlen: 24
37.44.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 11:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d4:48:77:b8:7d:98:58:f1:28:19:70:72:22:7d:ba:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 4 11:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8e64a20fab343c6ec66cef54142cdc2147cf97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:c4:0c:39:a1:23:a3:d3:26:f0:bd:59:51:
74:63:05:17:52:8c:77:18:9b:6c:c1:79:05:3f:fe:
ae:a1:66:a5:3b:a1:10:25:45:0b:21:32:e3:7a:f6:
77:f6:27:45:94:45:76:79:44:fd:c1:17:ca:7b:14:
28:90:a3:f2:df:0f:61:01:26:25:2c:b3:ea:0c:56:
e7:30:3a:55:53:16:ad:ca:13:95:7d:25:f7:7a:07:
fa:d7:9c:2a:28:7f:cc:92:12:72:65:ae:6b:54:40:
9a:f9:8c:05:d2:8b:fa:e2:db:e3:a8:24:4a:31:c8:
15:05:20:dd:21:eb:bf:6a:b4:16:e5:48:11:d1:58:
6b:3f:0d:f6:69:ac:17:ca:3f:e1:27:c3:26:8f:79:
db:10:a4:79:21:04:b9:51:c5:b1:82:bf:dc:01:04:
ee:ab:81:31:2d:d0:17:e6:fe:da:f0:e6:9b:4e:86:
72:50:a6:f7:13:9b:ee:2a:56:ea:19:a0:bb:7a:3a:
83:8c:5f:61:f4:92:6d:e2:96:ff:f0:41:e3:9f:82:
a8:e6:06:35:da:e3:07:ad:9c:cc:bd:c1:e7:ff:b6:
e4:6b:15:b7:d4:2f:2d:e1:ba:83:48:0f:c1:ab:7d:
64:98:75:c1:69:7f:6b:40:5c:fb:7c:13:98:27:80:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E6:4A:20:FA:B3:43:C6:EC:66:CE:F5:41:42:CD:C2:14:7C:F9:7B
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/6OZKIPqzQ8bsZs71QULNwhR8-Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
Signature Algorithm: sha256WithRSAEncryption
67:8c:ae:ed:35:d8:f8:c5:97:97:c3:69:b5:1e:fd:71:1b:1f:
b5:bb:c2:50:3f:d0:a0:0e:ea:de:9b:3b:d3:6d:a5:61:b4:47:
f4:66:ea:7a:45:57:fc:03:f7:f2:25:9b:74:6e:35:66:66:23:
60:86:1c:e6:54:db:bc:a2:d0:9b:33:f0:4b:50:f3:a8:61:ae:
ec:69:3f:aa:52:9c:f3:c3:1a:d3:1b:ec:72:9b:8f:fb:b6:42:
f9:9f:1a:8c:c9:60:85:2b:4e:47:69:b0:85:64:4f:b2:59:c5:
7b:e9:bf:99:51:ab:2f:22:3c:a4:84:59:8a:e6:af:81:51:b4:
56:eb:bc:ab:99:ef:8c:70:e3:9e:f0:55:f1:e0:15:64:ad:c8:
fc:79:d3:7d:42:d5:cb:4a:0a:e5:43:e4:f3:85:9a:80:82:4b:
6f:62:97:07:23:ff:47:bc:69:dd:29:d3:18:6b:ed:90:1f:37:
ed:bc:c8:20:cb:bc:f8:8b:fe:23:68:48:c7:87:68:0c:03:a8:
37:2d:f7:57:26:58:7b:89:73:f9:e0:9e:e8:44:0b:da:fe:20:
38:67:45:c5:d7:94:45:18:25:68:43:1f:af:1e:0c:c8:1f:07:
ec:60:98:fe:17:ad:4f:37:a9:6a:f7:17:b8:fa:d0:91:05:39:
4c:9e:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:08 2024 by rpki-client on console-ams.rpki-client.org