Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/l0xsmMPMgpLmwQ8zpKNBBATIac8.roa
File: l0xsmMPMgpLmwQ8zpKNBBATIac8.roa (raw, json)
Hash identifier: aOPESxXVYUNdi0j7zkg1gI6qYEdMj4kJnJJdubeOhBA=
Subject key identifier: 97:4C:6C:98:C3:CC:82:92:E6:C1:0F:33:A4:A3:41:04:04:C8:69:CF
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 018CC794CFBAA53880790471352D47863063
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/l0xsmMPMgpLmwQ8zpKNBBATIac8.roa
Signing time: Tue 02 Jan 2024 00:31:07 +0000
ROA not before: Tue 02 Jan 2024 00:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203378
IP address blocks: 37.216.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:cf:ba:a5:38:80:79:04:71:35:2d:47:86:30:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Jan 2 00:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=974c6c98c3cc8292e6c10f33a4a3410404c869cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7d:bc:34:7d:b5:04:c1:84:fa:66:2d:6b:d7:
82:10:13:ff:a5:78:49:62:39:e8:be:f8:fe:a9:29:
6f:9c:fd:37:61:be:e0:e6:0b:5a:7b:40:44:47:53:
f4:e7:ab:7d:85:0b:57:a2:c3:5e:57:c6:c4:78:ec:
8f:ed:d6:75:6d:b9:90:37:9c:56:0c:b3:dc:ae:d4:
7a:f8:43:60:21:2e:b2:9f:48:19:05:34:04:b2:62:
19:8a:ca:62:cd:6e:d9:53:97:26:2f:16:4b:55:ac:
55:ff:e8:ee:01:b8:98:41:b4:52:4e:53:4a:cb:fc:
f3:b0:84:8b:c1:9e:61:50:c0:47:b4:1c:38:d4:07:
b1:f7:40:75:4a:14:70:ba:86:e7:3f:ba:1b:45:e0:
93:e7:71:d6:47:64:ec:67:93:51:8d:8e:5c:a9:65:
78:72:14:e1:8e:13:6d:60:45:90:4d:a8:89:13:9e:
4d:0b:3a:40:92:22:d0:e6:36:36:eb:cf:b9:a5:38:
7e:70:1b:97:51:97:a6:87:f5:95:a9:59:0b:a5:55:
08:65:ee:66:f7:1b:ce:85:77:2d:f3:0c:ea:ce:1b:
ea:82:10:d2:d4:4f:84:f3:25:75:c0:54:71:6a:f3:
ce:3c:f4:50:e6:da:5c:7c:41:e4:6a:b3:22:a5:f8:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4C:6C:98:C3:CC:82:92:E6:C1:0F:33:A4:A3:41:04:04:C8:69:CF
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/l0xsmMPMgpLmwQ8zpKNBBATIac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.216.202.0/24
Signature Algorithm: sha256WithRSAEncryption
43:01:94:2f:d4:3c:39:8a:9e:81:72:dd:41:9c:aa:d7:32:96:
85:24:d5:41:18:99:9c:2b:f7:2e:cb:0a:9e:c9:b0:ce:54:c5:
d3:e4:55:f3:61:4b:73:4f:79:06:b4:11:58:dd:d9:2c:1c:d1:
49:35:8c:2d:70:77:b7:45:52:91:77:1b:9f:de:fc:57:5e:26:
97:62:13:be:c7:61:ab:14:2e:c5:e8:6d:26:46:b5:41:b0:5e:
71:c3:b7:68:c5:ea:ae:72:a1:c1:e9:ed:74:45:7e:4a:23:3a:
af:4c:2b:b9:5e:45:f1:32:69:78:3a:29:51:0b:32:18:6c:91:
81:87:8c:8b:01:b5:de:3b:db:72:da:f5:e3:c4:87:44:1e:b1:
98:13:79:64:6f:4f:30:9f:ca:3d:e8:4c:8a:89:04:cc:72:fe:
45:70:bf:fc:b2:89:be:1b:dd:0b:9b:b8:f3:c0:6f:58:18:75:
28:19:3f:a5:50:74:01:f9:b5:1c:8f:29:ff:45:ba:46:3e:b7:
0a:49:8f:3a:52:44:d9:24:49:de:bd:8d:d5:6c:bb:22:e2:cb:
fc:f0:26:6d:c7:1e:8a:de:90:77:e0:50:df:46:20:e7:87:82:
4b:eb:06:5e:68:a6:00:69:1a:3f:57:1d:13:14:2f:74:b6:bb:
cc:bc:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:57:18 2025 by rpki-client