Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/SYHMQFt5aweB5Dcn4w35tuVNdn8.roa
File: SYHMQFt5aweB5Dcn4w35tuVNdn8.roa (raw, json)
Hash identifier: mnupnFSgBsJzBs0TYD0dcFw6ocYMbgml2Yg853+1fFU=
Subject key identifier: 49:81:CC:40:5B:79:6B:07:81:E4:37:27:E3:0D:F9:B6:E5:4D:76:7F
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018F964439D71600AA718F17D99B1703FB2B
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/SYHMQFt5aweB5Dcn4w35tuVNdn8.roa
Signing time: Mon 20 May 2024 13:50:04 +0000
ROA not before: Mon 20 May 2024 13:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 62.204.37.0/24 maxlen: 24
2a13:8e00::/29 maxlen: 29
2a13:9200::/29 maxlen: 29
2a13:9300::/29 maxlen: 29
2a13:a700::/29 maxlen: 29
2a13:b100::/29 maxlen: 29
2a13:b500::/29 maxlen: 29
2a13:b900::/29 maxlen: 29
2a13:da00::/29 maxlen: 29
2a13:e200::/29 maxlen: 29
2a13:e400::/29 maxlen: 29
2a13:fe00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 28 Aug 2024 18:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:44:39:d7:16:00:aa:71:8f:17:d9:9b:17:03:fb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: May 20 13:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4981cc405b796b0781e43727e30df9b6e54d767f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:a5:9a:d8:72:d5:52:27:ed:74:4d:56:3d:
e0:e7:23:e0:af:e9:3c:cc:a9:43:5f:a4:5a:56:a5:
ec:69:c0:d5:1c:d1:ba:39:3d:c4:46:b9:ff:06:a6:
8f:b9:f0:4d:0a:fe:41:c7:ea:96:71:11:27:f6:96:
67:06:05:fa:d7:02:f0:4e:38:06:e7:cb:7e:ab:60:
36:97:06:9b:1f:2b:8a:97:e9:80:d9:0b:5f:76:58:
17:bd:ad:85:73:4d:98:9d:b1:ea:ee:7a:97:fd:60:
95:f9:98:43:c5:92:df:55:4f:7e:d3:51:27:ba:29:
b6:ed:22:de:97:55:6e:3a:92:e5:1a:0c:8e:7e:c5:
86:6f:e1:e5:ad:87:2c:86:3a:04:0d:5c:3c:a8:99:
f7:bb:09:6b:a2:33:f8:cc:47:e5:4a:96:08:50:b9:
e1:bf:8c:ae:03:aa:a4:41:e0:57:43:43:1e:1a:d8:
f2:7c:76:64:a1:87:b3:01:32:3e:5f:12:14:8a:8e:
f3:5a:1f:98:4e:3a:09:d0:d1:af:51:ea:d5:18:23:
6c:61:70:be:cd:f9:5c:d5:f4:a4:aa:51:95:c4:b7:
06:65:e5:dc:be:9e:76:b2:d3:97:8d:83:a7:09:6a:
64:96:a8:97:4d:63:59:4e:73:22:58:9b:29:a8:ce:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:81:CC:40:5B:79:6B:07:81:E4:37:27:E3:0D:F9:B6:E5:4D:76:7F
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/SYHMQFt5aweB5Dcn4w35tuVNdn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.37.0/24
IPv6:
2a13:8e00::/29
2a13:9200::/29
2a13:9300::/29
2a13:a700::/29
2a13:b100::/29
2a13:b500::/29
2a13:b900::/29
2a13:da00::/29
2a13:e200::/29
2a13:e400::/29
2a13:fe00::/29
Signature Algorithm: sha256WithRSAEncryption
0f:18:67:65:35:cf:9c:5d:63:0c:af:90:f5:5d:d6:ba:cd:89:
69:ae:db:24:af:c4:0a:bf:99:22:fa:fa:95:7f:cd:fa:2d:5f:
23:aa:94:bc:fb:f8:1a:29:78:c9:c4:03:c7:fc:c3:2b:5e:27:
2d:f3:e0:96:70:da:68:c1:fc:13:5b:21:f5:ae:2a:b3:18:03:
1d:dc:b1:c4:86:0e:f7:8c:70:f2:67:5b:f5:13:87:8c:a1:7e:
d1:a1:0d:cd:08:b2:b1:62:3e:c9:f6:ec:24:33:92:6d:41:70:
b9:95:11:9f:e5:9f:11:26:6a:47:b2:34:9e:8a:aa:fb:4c:cc:
21:c5:9f:36:45:29:19:c1:0b:c3:7d:55:2d:2a:d4:12:57:26:
8c:3b:3a:5e:1b:e4:63:e9:76:44:2c:c7:82:80:2b:5b:fb:27:
3b:81:65:8e:6b:f9:5a:60:ed:66:b3:6d:7b:5a:fc:d8:9f:98:
07:8f:4b:e6:1a:51:19:a9:b9:98:42:c8:23:46:fe:32:b1:a4:
61:07:f3:d4:ac:17:0f:27:b5:49:b9:df:f6:20:9a:96:78:c7:
35:4f:cd:58:d0:20:7f:e8:25:37:c8:86:a6:d2:78:aa:78:78:
b2:d9:f2:cd:17:3b:65:28:f4:d0:13:b1:f8:80:e0:65:34:f5:
d7:69:5f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 21:40:58 2024 by rpki-client on console-ams.rpki-client.org