Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1ATeKXhUMPcm5NrWr4pnIEMxsNQ.roa
File: 1ATeKXhUMPcm5NrWr4pnIEMxsNQ.roa (raw, json)
Hash identifier: RSy2qLkIEJfVcSfXklDZcvtk5bJXqh3kWZNzQuKZ1TE=
Subject key identifier: D4:04:DE:29:78:54:30:F7:26:E4:DA:D6:AF:8A:67:20:43:31:B0:D4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CCDB3233D24DFEE0292959F9C493F949B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1ATeKXhUMPcm5NrWr4pnIEMxsNQ.roa
Signing time: Wed 03 Jan 2024 05:01:58 +0000
ROA not before: Wed 03 Jan 2024 05:01:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 37.140.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jan 2024 05:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cd:b3:23:3d:24:df:ee:02:92:95:9f:9c:49:3f:94:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 3 05:01:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d404de29785430f726e4dad6af8a67204331b0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:d9:76:d6:ee:1d:a8:bf:02:e7:45:ca:dc:
e3:5a:c1:20:44:4b:c0:68:30:3b:fd:f9:d0:75:38:
04:2f:32:af:8d:c0:8d:6a:50:2e:d0:7e:67:f2:e4:
30:b6:34:33:83:0c:4a:4c:df:d5:a6:a7:ac:ff:97:
7c:b6:47:18:e3:c8:19:a2:e7:b5:3f:c6:16:d7:6c:
49:5d:01:3d:5c:a7:89:9a:c8:00:66:f8:ff:ca:de:
fc:8d:9b:76:7f:af:92:25:ed:de:72:de:10:c7:ca:
bf:b9:be:49:23:10:57:2a:62:59:c1:b2:ab:26:f0:
a1:bc:c2:a2:53:0c:9d:32:a8:05:96:73:57:35:c1:
92:5e:29:16:12:01:87:1b:be:da:0a:84:75:e4:17:
6a:f3:8d:f2:79:8c:54:8e:96:05:b6:d7:1f:9e:64:
cc:88:2b:7c:d1:76:fc:ef:ba:36:03:03:a9:01:eb:
2a:80:bb:f2:42:6a:93:87:44:0d:a4:e5:72:b7:ba:
c3:26:da:3f:ad:a4:c6:26:8d:29:e2:59:32:a3:f8:
c4:0a:82:dd:63:e2:46:72:f1:6d:0e:ca:f9:55:28:
c1:40:04:46:c2:71:4b:3b:63:b4:64:93:9c:00:1a:
4c:05:f2:95:32:eb:4c:8f:8c:db:e9:56:6f:55:3c:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:04:DE:29:78:54:30:F7:26:E4:DA:D6:AF:8A:67:20:43:31:B0:D4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1ATeKXhUMPcm5NrWr4pnIEMxsNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:50:69:35:24:a5:0e:fa:bd:a4:b7:7c:c2:b5:ac:34:00:c7:
56:4a:21:74:cf:c3:76:44:8d:ec:c2:aa:c3:cd:ea:91:ec:ed:
f9:2f:e3:e7:25:aa:75:f3:1a:62:92:c3:02:d9:ba:cc:26:a3:
5d:e5:bf:75:91:82:52:2d:d8:86:2b:a5:82:4d:0b:a6:7a:be:
3b:94:cd:ad:b8:c5:78:cb:8e:66:25:e4:7f:d1:cc:6c:0a:96:
63:29:fb:d7:cd:eb:53:28:52:27:93:a5:98:97:f5:41:63:c4:
56:c6:f4:a1:a4:13:87:aa:5d:08:f8:af:45:18:6c:35:5c:1e:
06:2f:b2:46:59:10:d4:40:a5:62:a3:b8:e9:2b:ca:06:1d:57:
80:43:b2:ee:60:1b:d1:e2:29:d8:08:da:83:4a:e3:85:de:77:
61:3e:5c:c1:27:a0:fe:b6:24:27:79:5c:fd:9b:e1:73:cd:05:
1e:22:e0:27:69:51:04:84:d1:0f:80:4b:29:5d:93:13:cb:eb:
36:46:45:b2:87:27:87:3a:11:35:3a:f0:a0:4a:68:57:f1:76:
53:0a:4f:67:34:fa:a7:1a:c5:50:8b:2a:43:cd:4c:32:e5:e3:
2c:5d:d9:26:01:44:ad:36:b8:d2:d8:05:cd:20:d0:24:b7:45:
b1:63:ba:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org