Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/jGiZA-mvYPCLNj7JOG5fMf2RTjI.roa
File: jGiZA-mvYPCLNj7JOG5fMf2RTjI.roa (raw, json)
Hash identifier: LdvCXsxNWe0juplcKbfj7gin1LCqQcq5kzOnbJKF9bg=
Subject key identifier: 8C:68:99:03:E9:AF:60:F0:8B:36:3E:C9:38:6E:5F:31:FD:91:4E:32
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01910F9405FD66B8B5177ECEFE83B847A654
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/jGiZA-mvYPCLNj7JOG5fMf2RTjI.roa
Signing time: Thu 01 Aug 2024 20:14:04 +0000
ROA not before: Thu 01 Aug 2024 20:14:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207252
IP address blocks: 37.114.40.0/24 maxlen: 24
37.114.58.0/24 maxlen: 24
43.251.160.0/24 maxlen: 24
43.251.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 10:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0f:94:05:fd:66:b8:b5:17:7e:ce:fe:83:b8:47:a6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Aug 1 20:14:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c689903e9af60f08b363ec9386e5f31fd914e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ff:51:0d:8c:91:1f:8d:68:dc:d3:ea:86:f1:
7c:42:ee:68:5c:5a:62:04:8d:3c:06:56:72:24:29:
57:cb:71:09:b0:fd:20:9c:4e:c7:27:61:58:a2:ea:
a8:45:6c:76:a9:f6:c5:e3:7d:3e:bd:f9:53:19:4c:
d3:60:0f:3c:1b:35:ad:8f:99:8d:0e:e0:d2:22:1b:
70:d9:5f:b9:dc:d3:02:54:8a:17:39:8a:7f:4d:e3:
f9:d5:0d:5d:29:38:ed:8a:b7:7a:bc:64:e3:e6:cb:
6d:29:0e:a6:e8:90:7e:91:0c:21:c6:2c:bf:61:dd:
63:a3:7e:a0:e8:ca:ee:6b:da:5a:c4:ef:10:30:62:
bf:ca:79:e9:70:78:70:02:32:be:68:16:d8:5a:62:
79:db:e7:13:cd:df:34:17:00:86:d5:ec:b5:f4:95:
c0:3c:c0:87:39:ca:a4:99:54:31:b5:63:53:70:80:
c9:da:bd:da:0a:71:1a:0e:9a:bb:0b:a4:ba:a9:c9:
98:2f:dd:e0:8a:73:2f:22:9b:f9:1e:96:e2:19:ee:
cd:0e:00:24:6b:1f:d0:2c:e0:42:1f:11:86:c9:1e:
4d:93:ef:36:3a:4d:ab:5d:48:ad:f1:ea:2f:0a:2c:
c9:e6:0c:04:05:2b:14:8c:fb:d5:64:32:72:31:ff:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:68:99:03:E9:AF:60:F0:8B:36:3E:C9:38:6E:5F:31:FD:91:4E:32
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/jGiZA-mvYPCLNj7JOG5fMf2RTjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.40.0/24
37.114.58.0/24
43.251.160.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:e7:b1:f3:e5:66:fe:01:cb:cc:9c:ab:e8:be:d1:6b:f7:cc:
cc:5b:60:15:a1:d4:a5:99:c9:5e:3e:5a:47:eb:88:4d:5a:17:
cf:6d:04:43:cb:0e:f8:47:77:62:cc:9d:b5:8c:51:fb:52:1b:
cd:ff:91:e1:22:10:ee:2e:05:dc:81:cc:e3:bc:e4:0e:86:8c:
c1:fc:51:75:8a:b4:10:6e:bf:a4:0e:93:69:93:6c:9a:cf:48:
0d:ae:51:fb:cf:64:2b:f8:2b:8b:e0:65:e7:91:65:7f:d0:fa:
b4:b7:cc:9b:7d:a9:92:0f:7f:21:eb:ed:e9:f5:a4:1f:ed:4b:
ff:20:6f:59:e6:22:81:23:d2:7c:60:9d:df:b8:43:1e:66:27:
94:43:98:b8:7b:a2:cb:f1:c5:29:49:79:84:be:e9:34:b2:da:
7d:d3:35:3d:99:a1:68:1b:09:c6:a5:fc:f9:d6:4a:41:1d:1f:
de:94:c9:1c:d2:cf:b0:65:bf:aa:e7:ab:75:7c:65:16:24:bb:
aa:da:2f:ac:c9:e9:20:8d:b5:56:26:eb:40:56:20:84:51:65:
d2:f4:24:51:39:b7:58:80:eb:e3:e8:d4:23:af:a2:6f:84:a0:
de:a5:e9:0c:90:ee:df:f3:4b:d5:83:9c:27:c8:a3:cb:a2:24:
5c:21:dc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 13:10:08 2024 by rpki-client on console-ams.rpki-client.org