Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/Fy0G2B2h7WOTDckwmNzs5pO4iFY.roa
File: Fy0G2B2h7WOTDckwmNzs5pO4iFY.roa (raw, json)
Hash identifier: XxiYRxioeRXQ249Off4DcGOXyMyZPqQCod6mtXrWKZU=
Subject key identifier: 17:2D:06:D8:1D:A1:ED:63:93:0D:C9:30:98:DC:EC:E6:93:B8:88:56
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 018CD3F7E72992596D19CE4469E0544D4A39
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/Fy0G2B2h7WOTDckwmNzs5pO4iFY.roa
Signing time: Thu 04 Jan 2024 10:14:48 +0000
ROA not before: Thu 04 Jan 2024 10:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210892
IP address blocks: 37.44.228.0/22 maxlen: 22
37.44.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jan 2024 11:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:f7:e7:29:92:59:6d:19:ce:44:69:e0:54:4d:4a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 4 10:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=172d06d81da1ed63930dc93098dcece693b88856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:56:1a:4f:51:72:7f:60:4e:c0:76:1e:87:
9f:97:4b:09:f7:a9:6f:49:cc:f4:e0:b0:27:7c:ae:
d3:c2:6c:69:63:65:5c:59:10:f9:b9:f7:b6:9d:65:
77:7f:87:18:bf:c7:b8:7e:54:de:f2:e3:e0:bb:d8:
2c:1c:77:3e:2a:0a:40:14:0c:c8:c4:0f:9c:2e:c5:
32:57:a2:b4:80:db:b1:ca:ac:a8:c9:e0:80:48:73:
6b:ba:df:d2:dd:f6:29:1d:f5:27:3e:c1:d2:bd:78:
1c:e2:74:4d:8b:82:1c:2f:80:6b:5a:fb:91:03:0e:
9c:41:dd:7f:3f:c0:e3:1d:b3:88:48:07:7b:9d:c8:
d0:a4:bd:2b:2d:2d:5d:56:40:f7:a9:fd:61:0e:86:
23:70:ba:17:cb:b0:b1:28:87:8b:d0:2a:f4:47:e7:
fb:3b:e4:06:e2:d8:01:79:ff:6e:4b:71:de:18:44:
80:fa:80:a0:14:ce:89:41:9d:00:e3:34:6c:7a:e9:
42:87:73:0e:71:15:72:f2:f5:a8:e3:eb:4b:46:1f:
96:b6:d2:8d:63:b7:22:06:dd:5b:cb:9b:50:01:11:
b0:ce:1e:f5:b5:03:27:a3:3c:2c:e1:5b:88:3d:af:
c2:ec:3e:16:9c:81:85:eb:15:44:34:14:34:0b:68:
ff:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:06:D8:1D:A1:ED:63:93:0D:C9:30:98:DC:EC:E6:93:B8:88:56
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/Fy0G2B2h7WOTDckwmNzs5pO4iFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:f9:55:98:7c:4c:74:2a:ea:89:96:29:11:b1:47:97:7e:33:
64:e1:93:d8:fd:e8:fd:7c:3a:5c:94:2d:01:23:c2:b2:03:b8:
7a:cf:82:e1:b0:2d:47:d1:df:1b:3f:96:93:17:54:8e:74:b3:
b8:d6:4a:56:a1:cd:59:93:34:bd:b5:68:6a:d7:63:ef:02:cb:
99:42:01:69:c3:ac:54:05:50:d4:cf:34:ed:0c:25:c2:1a:b6:
8c:64:a1:94:a5:ef:44:f3:fa:26:c5:14:6a:cf:79:44:9c:87:
02:dd:40:cf:f8:36:42:ad:b5:6e:ac:46:e2:82:47:2f:7f:dd:
3e:b2:7b:d2:0c:c7:e9:26:8a:36:8a:6e:56:63:f3:74:5e:d1:
31:dc:ca:96:94:7c:eb:a4:d0:5a:19:a7:6e:a9:d8:6f:bc:6e:
de:9a:a0:a9:54:6f:32:7f:bc:dd:91:3a:c1:00:42:dd:19:e4:
be:d8:e5:1f:74:da:cc:9a:b4:42:88:17:5e:be:8f:6b:0f:5a:
4e:6a:83:ea:7e:60:2e:a1:fc:09:9f:ae:18:f0:15:b6:85:ad:
72:ae:5b:17:4e:7c:c6:32:16:52:17:40:03:e3:98:fd:95:53:
bd:19:f1:e1:fa:af:b8:06:79:e7:8e:af:02:5e:c1:dd:b6:05:
36:f9:9e:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzT9+cpklltGc5EaeBUTUo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjQwMTA0MTAxNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzJkMDZkODFkYTFlZDYzOTMwZGM5MzA5OGRjZWNlNjkzYjg4ODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2RWGk9Rcn9gTsB2Hoefl0sJ96lv
Scz04LAnfK7TwmxpY2VcWRD5ufe2nWV3f4cYv8e4flTe8uPgu9gsHHc+KgpAFAzI
xA+cLsUyV6K0gNuxyqyoyeCASHNrut/S3fYpHfUnPsHSvXgc4nRNi4IcL4BrWvuR
Aw6cQd1/P8DjHbOISAd7ncjQpL0rLS1dVkD3qf1hDoYjcLoXy7CxKIeL0Cr0R+f7
O+QG4tgBef9uS3HeGESA+oCgFM6JQZ0A4zRseulCh3MOcRVy8vWo4+tLRh+WttKN
Y7ciBt1by5tQARGwzh71tQMnozws4VuIPa/C7D4WnIGF6xVENBQ0C2j/5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBctBtgdoe1jkw3JMJjc7OaTuIhWMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvRnkwRzJCMmg3V09URGNrd21OenM1cE80aUZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJSzkMA0G
CSqGSIb3DQEBCwUAA4IBAQB8+VWYfEx0KuqJlikRsUeXfjNk4ZPY/ej9fDpclC0B
I8KyA7h6z4LhsC1H0d8bP5aTF1SOdLO41kpWoc1ZkzS9tWhq12PvAsuZQgFpw6xU
BVDUzzTtDCXCGraMZKGUpe9E8/omxRRqz3lEnIcC3UDP+DZCrbVurEbigkcvf90+
snvSDMfpJoo2im5WY/N0XtEx3MqWlHzrpNBaGaduqdhvvG7emqCpVG8yf7zdkTrB
AELdGeS+2OUfdNrMmrRCiBdevo9rD1pOaoPqfmAuofwJn64Y8BW2ha1yrlsXTnzG
MhZSF0AD45j9lVO9GfHh+q+4Bnnnjq8CXsHdtgU2+Z4A
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:08 2024 by rpki-client on console-ams.rpki-client.org