Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/g0g13ckZz6i5Y0x6vpuIigRMPMg.roa
File: g0g13ckZz6i5Y0x6vpuIigRMPMg.roa (raw, json)
Hash identifier: kC2cp2Fdfx/st5rmM6ADxoXDNfJlUpKCWxxww/wbxWQ=
Subject key identifier: 83:48:35:DD:C9:19:CF:A8:B9:63:4C:7A:BE:9B:88:8A:04:4C:3C:C8
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 01856C5CB8ECEF084DB781933B1FB321C552
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/g0g13ckZz6i5Y0x6vpuIigRMPMg.roa
Signing time: Sun 01 Jan 2023 08:04:54 +0000
ROA not before: Sun 01 Jan 2023 08:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397229
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:b8:ec:ef:08:4d:b7:81:93:3b:1f:b3:21:c5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 08:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=834835ddc919cfa8b9634c7abe9b888a044c3cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:dd:70:26:26:07:eb:6e:74:6c:5a:65:06:
a6:d1:18:5c:6e:ef:c5:f6:f9:ff:d9:05:cf:6d:90:
f1:28:57:f9:89:ea:d0:95:f0:1e:c1:70:bf:df:a2:
0c:f1:1c:04:4b:11:6b:9f:3d:83:a6:ae:6d:3e:65:
bb:41:84:1f:75:8b:16:f2:5e:ed:74:7d:99:9a:f5:
f3:da:0d:a3:00:3d:58:3d:af:55:72:0e:c2:89:b7:
36:07:9a:73:bc:e3:09:a6:19:85:2b:77:86:1a:a8:
0b:78:b6:bc:a1:23:10:6b:81:ea:ce:81:44:8f:42:
cf:59:7f:39:7e:7a:fe:e9:63:22:39:24:7e:ef:24:
19:9d:58:f7:31:1f:56:d5:cb:60:aa:f8:29:78:ea:
9e:7d:0c:f9:cd:32:11:03:3f:88:9d:60:00:30:e0:
84:fa:7f:26:f9:ae:24:88:86:6a:ee:5b:13:c4:6c:
a8:b1:17:29:bc:a0:49:e4:cd:42:b6:a3:04:34:d2:
4f:3b:91:dc:a1:ee:86:b6:1f:74:eb:2f:79:3d:e0:
6e:dd:a4:87:df:7d:8e:6d:34:7d:c9:9e:9b:b7:19:
c7:2d:56:43:7b:93:ad:b3:ab:eb:7e:a6:12:fc:fb:
22:4c:51:1d:a1:61:88:d2:ee:9a:16:cd:81:17:4a:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:35:DD:C9:19:CF:A8:B9:63:4C:7A:BE:9B:88:8A:04:4C:3C:C8
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/g0g13ckZz6i5Y0x6vpuIigRMPMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8d:ef:60:6b:e0:5d:0c:1b:63:d4:e1:8e:54:83:55:8f:91:
2d:fc:f8:f3:ff:19:37:bd:a2:cf:e9:cf:21:d1:4e:c8:51:d1:
56:d2:79:7d:6d:db:c8:d4:dc:5c:72:13:1c:ef:79:d5:1b:10:
b8:95:a9:46:17:7a:d7:3e:c1:ef:6b:43:73:43:6b:68:5d:12:
eb:00:5b:d4:00:98:97:30:22:57:88:e0:97:e5:6d:ae:b1:80:
d2:41:13:85:1b:b8:57:6b:74:8c:99:85:8a:6d:e6:bd:5f:12:
71:bd:0c:92:df:63:b0:48:76:ef:09:e4:c0:7f:7e:61:e6:7d:
37:ec:b5:5a:6a:a1:4f:37:0c:76:13:d6:2b:de:e9:c0:56:85:
5b:e9:91:d6:76:9c:ed:08:cd:6d:c9:04:28:e5:28:4f:e8:62:
e5:4f:02:ab:70:d4:77:05:06:2c:05:3f:f8:73:1d:51:25:95:
4f:ce:d5:87:b7:0d:7b:8c:dd:63:8e:4b:e7:01:cf:55:df:ff:
d6:85:7b:0d:a3:a9:ce:01:e3:56:bd:88:cb:58:9a:53:63:7a:
80:99:51:e5:58:0e:45:d0:16:2e:bd:99:9c:df:33:6a:fd:d5:
a3:f9:52:c2:36:df:f3:4c:f7:44:35:2c:df:59:36:ac:71:73:
c2:20:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:37 2024 by rpki-client on console-ams.rpki-client.org