Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/JW1O9Sv5jMBBCR8Sp9Vc7ptrBJM.roa
File: JW1O9Sv5jMBBCR8Sp9Vc7ptrBJM.roa (raw, json)
Hash identifier: iGr7kFPIC4j4zZVqpL/7wquoVxWgnqfbI9ArvP5ej/0=
Subject key identifier: 25:6D:4E:F5:2B:F9:8C:C0:41:09:1F:12:A7:D5:5C:EE:9B:6B:04:93
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01871A994EB04485E70609CCF1F20D17BDD4
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/JW1O9Sv5jMBBCR8Sp9Vc7ptrBJM.roa
Signing time: Sat 25 Mar 2023 21:07:47 +0000
ROA not before: Sat 25 Mar 2023 21:07:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33185
IP address blocks: 37.221.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1a:99:4e:b0:44:85:e7:06:09:cc:f1:f2:0d:17:bd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 25 21:07:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=256d4ef52bf98cc041091f12a7d55cee9b6b0493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:d1:82:7a:0b:15:a5:6c:ab:b1:5c:e5:f3:
b7:5f:5b:79:3b:86:b1:cb:b0:40:34:98:15:8d:97:
d2:e3:48:0a:31:f8:a3:4d:5e:e7:32:24:df:43:f6:
6d:9d:4a:58:f5:5e:5a:b3:1d:86:83:83:70:4e:07:
1a:c8:ca:04:21:d5:4e:a2:b7:3a:b5:79:16:ba:a4:
6d:08:e3:87:4f:da:49:41:2b:55:05:ef:ff:49:4b:
c7:2a:9c:4a:74:7e:a4:51:75:85:08:e0:fd:1d:03:
ea:a0:d3:4f:f3:f4:27:e1:9a:d6:40:15:c3:09:3d:
f1:65:79:a3:03:e5:4c:a1:15:c7:2b:ca:25:ae:9c:
ae:45:41:74:07:59:af:ec:d0:c1:95:29:49:60:90:
1c:8a:18:3a:85:5e:a0:9b:b7:f9:c2:fd:3b:d7:65:
8e:c1:27:7d:85:ed:09:0c:a4:32:39:01:7e:12:cc:
81:9d:cc:3a:22:4d:fb:0e:d5:ad:37:ef:31:14:1d:
b6:06:68:6b:db:31:f7:63:2f:05:11:d0:6e:14:3e:
d6:f8:85:23:d7:c4:8a:8f:a6:42:5b:e8:78:c3:c6:
7c:f6:b6:de:ce:d7:79:c2:45:d5:77:dd:37:fb:da:
36:fb:7c:8f:0d:9c:79:a5:92:12:5e:29:1d:30:de:
78:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6D:4E:F5:2B:F9:8C:C0:41:09:1F:12:A7:D5:5C:EE:9B:6B:04:93
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/JW1O9Sv5jMBBCR8Sp9Vc7ptrBJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.110.0/24
Signature Algorithm: sha256WithRSAEncryption
17:14:a4:50:8f:8f:f5:bb:76:68:f7:4e:57:bc:17:2a:d9:62:
c7:9c:74:8b:2a:9a:bf:80:03:2d:11:0e:7c:64:7a:aa:ad:6d:
97:fd:c3:fd:49:48:19:db:e4:28:3a:c3:11:ee:30:bc:26:81:
01:36:16:1c:b4:3a:0e:64:d5:52:12:b6:5f:91:db:7c:f2:20:
6a:f3:a3:41:a8:0c:91:b7:3a:bf:2d:df:d8:18:95:d2:89:d4:
df:33:3b:54:1f:c4:08:85:fe:72:d6:7d:c6:22:6f:7b:bf:13:
b6:b5:27:42:c7:16:b4:d6:5b:37:7d:fd:7f:d0:6f:8f:89:a2:
2d:c1:e1:c3:29:0c:7b:8e:37:27:66:18:9f:8d:8e:28:f0:52:
6c:96:34:c4:f0:1d:20:24:fe:f4:d8:63:10:7e:5c:5b:81:f3:
3d:93:d1:ae:65:08:e6:98:33:3b:65:57:0d:df:f6:1a:fc:37:
64:6e:9f:4c:8f:94:25:5b:ee:fc:9f:10:f5:64:c5:bb:af:42:
20:0c:0b:c5:d0:74:da:87:77:94:af:ca:0e:b9:21:93:02:e1:
19:a0:f9:dd:1c:d8:aa:46:e9:90:d8:97:37:c8:43:98:5a:ba:
9d:13:b2:4f:fc:73:cb:7f:b9:89:ba:66:ca:db:48:b7:23:8b:
ce:79:59:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:20 2024 by rpki-client on console-ams.rpki-client.org