Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/Zj24ANBnv_oYbTvPViHXAxTKI-o.roa
File: Zj24ANBnv_oYbTvPViHXAxTKI-o.roa (raw, json)
Hash identifier: EVHqxDy/OOpqzWgQ14ungDFXzU2ufK4Zi4cL3YVliIU=
Subject key identifier: 66:3D:B8:00:D0:67:BF:FA:18:6D:3B:CF:56:21:D7:03:14:CA:23:EA
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 01856D13A95AEFB748B37A18977593295A8D
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/Zj24ANBnv_oYbTvPViHXAxTKI-o.roa
Signing time: Sun 01 Jan 2023 11:24:43 +0000
ROA not before: Sun 01 Jan 2023 11:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211612
IP address blocks: 37.19.204.0/24 maxlen: 24
37.19.208.0/24 maxlen: 24
37.19.219.0/24 maxlen: 24
2a02:6ea0:e500::/40 maxlen: 40
2a02:6ea0:e400::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:a9:5a:ef:b7:48:b3:7a:18:97:75:93:29:5a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Jan 1 11:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=663db800d067bffa186d3bcf5621d70314ca23ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c9:dc:cb:a8:62:c1:e8:c1:68:9e:ef:46:2f:
84:97:e0:ce:35:a2:39:f6:08:a5:f3:a5:4e:c8:3e:
31:b7:77:8d:9c:b6:4e:9d:be:9f:2f:e1:49:86:82:
3e:75:62:c7:f4:bc:f2:8d:0b:f4:da:68:98:55:16:
66:50:d0:2b:4b:39:db:c7:b0:75:67:46:9a:a4:be:
f2:eb:1f:89:79:6f:b4:bb:30:4f:76:66:b6:46:ee:
da:70:4a:89:58:dd:f3:ed:75:b8:57:4d:be:ad:8e:
4c:28:71:92:94:cd:83:e9:8f:f8:5d:04:01:03:74:
f7:b1:ee:70:eb:75:1c:7a:11:6c:cd:7f:18:e0:90:
2f:cd:d3:54:58:f4:98:45:bd:a5:d7:7f:3c:c8:99:
46:a3:43:a2:4c:ca:df:b0:29:05:ea:70:ab:8c:08:
c3:a2:5d:44:62:d8:e6:a3:3e:86:a7:e5:e6:ce:49:
a0:22:20:34:1c:5a:47:98:5c:8a:6e:f3:cd:32:d1:
7e:30:8f:25:8e:1d:04:34:00:f2:fd:45:62:f5:d6:
bf:e2:06:ff:8a:ef:16:18:ce:78:69:f2:b6:a8:57:
17:d9:49:20:69:3b:2f:e9:8e:26:72:c7:aa:94:c6:
0c:05:32:b4:8d:aa:df:f6:76:31:9d:ee:ae:c0:f9:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3D:B8:00:D0:67:BF:FA:18:6D:3B:CF:56:21:D7:03:14:CA:23:EA
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/Zj24ANBnv_oYbTvPViHXAxTKI-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.204.0/24
37.19.208.0/24
37.19.219.0/24
IPv6:
2a02:6ea0:e400::/39
Signature Algorithm: sha256WithRSAEncryption
52:4f:73:b2:20:36:4b:15:61:fb:f6:70:ca:95:89:e7:95:9c:
cd:7f:17:bc:08:ab:ac:c9:5c:fe:b2:5d:b7:3b:ab:44:2c:ce:
a8:59:19:09:66:0a:3c:54:e2:37:e0:7d:27:09:05:0b:b9:83:
6b:a6:e7:16:7a:c5:fa:d5:1a:13:0b:3a:a0:c6:30:b9:a7:4e:
79:5a:c7:42:fc:91:82:b3:82:c9:1a:cd:45:49:ab:31:f9:4c:
7b:a4:a2:76:5b:d0:6d:dc:94:f3:2a:b9:7f:28:a9:b9:bb:a1:
fc:28:8d:3d:ad:bd:2c:b5:4e:4d:c8:96:07:56:c7:b2:cf:80:
92:29:26:1d:94:2b:1f:f5:d7:f8:df:9f:1b:68:f3:f8:65:83:
57:16:5d:a5:82:d3:00:ff:a2:71:47:53:41:91:7a:b9:a4:78:
8b:96:dc:9d:d6:13:26:38:ee:c2:dd:4d:62:48:0b:72:9c:f6:
ce:e7:d4:37:66:3f:a2:00:73:1c:27:b8:7f:b4:ef:43:2d:49:
35:48:42:79:c7:a4:f3:5e:15:a2:7e:92:4f:11:83:fc:d6:1c:
30:70:48:40:d0:99:5c:f8:4a:52:ff:c1:a0:6e:ce:97:34:fd:
03:ee:37:78:2a:11:28:c1:8e:e8:b7:f4:c9:23:67:1d:aa:8f:
83:7f:ec:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:06 2024 by rpki-client on console-ams.rpki-client.org