Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/6vYQ-toxg3cnFL6mOmFDvMNyf5s.roa
File: 6vYQ-toxg3cnFL6mOmFDvMNyf5s.roa (raw, json)
Hash identifier: 4Cyp8ORzix9Ngk7JzyPQJtKWOTS8Kktj3wl+jc3ofYM=
Subject key identifier: EA:F6:10:FA:DA:31:83:77:27:14:BE:A6:3A:61:43:BC:C3:72:7F:9B
Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b
Certificate serial: 01856CC1644B69844D375C3F283F948BBA92
Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/6vYQ-toxg3cnFL6mOmFDvMNyf5s.roa
Signing time: Sun 01 Jan 2023 09:54:51 +0000
ROA not before: Sun 01 Jan 2023 09:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43356
IP address blocks: 37.218.198.0/24 maxlen: 24
37.218.199.0/24 maxlen: 24
37.218.196.0/24 maxlen: 24
37.218.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:64:4b:69:84:4d:37:5c:3f:28:3f:94:8b:ba:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b
Validity
Not Before: Jan 1 09:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaf610fada3183772714bea63a6143bcc3727f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:34:59:89:5d:74:0c:d3:9b:20:2d:61:be:80:
0d:ca:db:c5:aa:93:02:d7:8f:fc:40:e0:a1:bb:c8:
79:41:71:a2:7b:c9:d6:5c:e8:cf:3a:2f:e5:35:d0:
38:e0:76:e8:c1:5d:b7:56:81:9d:76:e7:4b:81:8d:
f0:16:4c:99:96:28:01:85:df:6a:0d:35:25:f9:56:
e9:37:da:8a:6c:57:1a:64:09:05:16:a2:25:39:19:
70:b9:0b:ce:f1:49:f3:96:77:f3:d6:cd:ac:cf:b3:
e0:4c:f1:81:ff:b8:49:da:16:89:01:4b:cd:3d:85:
32:af:fc:1c:64:ae:50:ea:f4:90:2b:3e:46:03:5f:
d2:68:f7:1a:84:c2:51:e7:cd:30:49:5b:78:56:8d:
ea:26:1b:74:64:ad:e2:0d:8d:76:50:f3:18:dd:4a:
4b:e8:2a:77:98:68:ca:94:30:c8:c8:21:ae:b1:57:
ed:0d:0a:ec:e2:ad:53:68:7e:43:9f:a1:f2:1e:d3:
1a:bf:50:90:50:c4:01:84:bb:e7:27:e7:1f:99:b7:
c1:9f:54:a0:c7:13:77:b1:35:76:6a:05:96:c2:75:
bd:c7:72:70:f9:94:08:b1:d0:45:c7:53:87:41:7c:
9f:bc:ae:5d:83:7c:02:5e:92:b8:fb:7d:04:cd:a0:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F6:10:FA:DA:31:83:77:27:14:BE:A6:3A:61:43:BC:C3:72:7F:9B
X509v3 Authority Key Identifier:
keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/6vYQ-toxg3cnFL6mOmFDvMNyf5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.196.0/22
Signature Algorithm: sha256WithRSAEncryption
30:34:7e:17:fe:01:5e:27:65:70:88:21:66:c2:47:60:bb:ad:
88:97:1c:5f:f9:b3:4a:dc:f1:79:79:15:3a:fa:76:74:88:fe:
69:5c:26:bc:a0:b1:23:02:44:b6:09:1f:d9:59:3e:c5:6e:c4:
ac:dd:04:40:24:30:82:d9:3f:c8:6f:36:50:bb:6a:ae:44:7f:
2f:c9:fe:98:74:0a:9a:38:6e:4a:8a:b7:59:53:45:d1:bf:eb:
07:0a:fd:9f:05:9c:21:ca:69:97:7c:15:9c:b4:18:09:7a:b1:
40:ae:26:53:d3:62:94:6c:4b:14:ce:5c:3f:97:dc:1f:77:f3:
72:a8:6d:fb:59:c6:68:ed:2c:d1:56:a4:a5:d2:ce:80:5a:f7:
68:1b:2a:ea:9c:ed:60:3f:e2:a3:7a:7f:df:8b:c5:74:f5:8f:
31:b7:5f:bb:ab:7e:66:ae:7e:7b:ea:4a:41:22:18:4e:ee:77:
74:89:ad:11:d8:1e:f8:cb:e3:d0:7d:6a:c5:3d:da:88:b2:a9:
49:43:de:0a:e6:1d:a0:4b:12:c4:c7:3d:cc:55:55:f3:c9:bf:
ad:69:64:c5:b4:ac:16:d8:28:a0:0f:73:ae:97:82:86:a5:6d:
03:6d:3d:55:cc:b6:d6:0d:77:74:c7:bc:e5:48:ca:d2:8c:56:
dc:58:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:18 2024 by rpki-client on console-ams.rpki-client.org