Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/sMSVBBsXkpeAJxjUu513ipKOA8M.roa
File: sMSVBBsXkpeAJxjUu513ipKOA8M.roa (raw, json)
Hash identifier: SSyoQ63sd9QDFKG+dwT6qa6kVq77nffqOrqz3tdIzCY=
Subject key identifier: B0:C4:95:04:1B:17:92:97:80:27:18:D4:BB:9D:77:8A:92:8E:03:C3
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 018CC3B70A45FC4708C04ECB185199068CE7
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/sMSVBBsXkpeAJxjUu513ipKOA8M.roa
Signing time: Mon 01 Jan 2024 06:30:01 +0000
ROA not before: Mon 01 Jan 2024 06:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44592
IP address blocks: 37.228.149.0/24 maxlen: 24
193.56.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 15:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0a:45:fc:47:08:c0:4e:cb:18:51:99:06:8c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Jan 1 06:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0c495041b179297802718d4bb9d778a928e03c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:5d:06:f9:24:2a:21:2d:d0:89:ac:e6:68:
1d:9b:de:82:f4:ab:50:b4:fd:7d:19:b4:a7:6a:4d:
cc:8a:dc:e3:c9:43:38:b1:b6:08:a4:e7:ba:dd:65:
52:1d:04:94:1d:29:05:dc:77:5e:84:8d:0e:72:46:
7a:d9:ab:7a:58:75:5c:fa:c7:4e:fe:f6:1a:35:ed:
38:f9:00:5a:85:53:9a:96:6d:12:5b:da:4a:e5:21:
ad:f0:eb:ae:ad:9d:3f:a2:8d:26:e5:00:b4:da:07:
50:78:d7:8f:84:31:32:e9:02:e3:c8:6c:7e:79:75:
ff:fa:b5:be:47:a4:e5:b7:3a:07:35:8a:6c:b2:d0:
d7:0f:1d:04:44:27:06:61:fd:57:a4:78:87:91:0b:
84:e8:d1:d2:83:4b:85:1e:82:17:78:62:16:05:5d:
35:9f:53:e4:67:61:0b:0e:24:89:51:b5:1b:5e:d8:
ee:34:1c:66:ed:f3:33:06:60:18:d8:de:59:01:de:
66:b5:1c:4f:60:21:af:9e:81:2f:12:3a:1e:e0:cd:
e5:e7:14:41:75:a1:2f:7c:ea:49:51:25:e7:f5:f9:
bf:1f:1d:8b:f6:02:8f:fe:b4:c3:22:b2:ed:91:e8:
e0:a4:8f:cf:dc:49:aa:e2:5d:97:76:42:2e:e8:bf:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C4:95:04:1B:17:92:97:80:27:18:D4:BB:9D:77:8A:92:8E:03:C3
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/sMSVBBsXkpeAJxjUu513ipKOA8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.149.0/24
193.56.129.0/24
Signature Algorithm: sha256WithRSAEncryption
21:83:1c:0b:0f:38:6b:53:5b:2a:1b:b1:b6:c1:84:e9:0c:71:
1e:11:da:8d:49:6f:14:c6:09:ae:41:c1:af:e6:ee:a9:34:d7:
a6:6a:cd:22:9c:67:85:81:c4:ae:66:ed:b9:21:b2:08:ed:aa:
78:1a:bb:55:b0:80:1f:a1:49:27:f6:99:69:70:eb:09:0e:76:
e1:23:51:8b:7d:51:15:e0:f0:74:14:26:23:9d:79:88:88:d5:
c4:e0:9f:34:dd:b3:dc:fb:06:0d:0f:e4:3a:9b:74:6a:ec:08:
73:eb:8f:4e:77:29:ba:95:6f:f4:ee:2f:92:00:49:e0:d1:1a:
c3:62:a1:c0:f3:6f:3b:ef:93:21:97:26:e5:be:50:5e:07:2c:
ce:e9:e6:4e:37:3d:d4:e7:3a:34:a6:46:03:07:67:83:6f:b6:
22:a5:75:8f:a6:36:7c:4e:4c:ab:ed:18:81:a3:0a:f4:0c:04:
47:58:79:80:81:ae:17:bc:85:91:af:52:17:2b:18:8c:81:22:
58:5e:74:99:5a:2f:92:24:a3:b3:07:a3:2f:e7:a0:24:6c:94:
97:d2:56:14:bf:4a:bb:e4:78:c3:73:f5:c5:e8:72:58:67:4b:
5a:93:08:c5:91:93:37:6d:b2:eb:48:c1:30:42:3b:d1:ec:48:
c7:59:1b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:42 2024 by rpki-client on console-ams.rpki-client.org