Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0i49Lfuj1HpW3BQF9vYfTUoMoTw.roa
File: 0i49Lfuj1HpW3BQF9vYfTUoMoTw.roa (raw, json)
Hash identifier: CEnLzOypkH4bQ8ediBBciRfx97/e+K6E+kwoX5yWmtc=
Subject key identifier: D2:2E:3D:2D:FB:A3:D4:7A:56:DC:14:05:F6:F6:1F:4D:4A:0C:A1:3C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0193109CF2BAEF845EDCBBE9498E230A66A2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0i49Lfuj1HpW3BQF9vYfTUoMoTw.roa
Signing time: Sat 09 Nov 2024 11:09:01 +0000
ROA not before: Sat 09 Nov 2024 11:09:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.202.206.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 13:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:9c:f2:ba:ef:84:5e:dc:bb:e9:49:8e:23:0a:66:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 9 11:09:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d22e3d2dfba3d47a56dc1405f6f61f4d4a0ca13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:cd:11:b7:bc:d9:bb:df:a0:a4:2f:94:05:
14:0e:64:c6:60:51:1c:b7:db:53:00:32:58:67:9b:
7e:21:cb:ee:d9:49:61:a9:40:98:d2:fd:15:f0:57:
a8:5a:bf:bf:6d:ae:47:2d:fb:06:1d:d6:2d:e6:92:
1f:bc:2d:d6:bc:75:4a:e6:41:e3:d6:8c:52:e6:d6:
c9:b0:2d:ce:8a:cb:a7:b8:0b:49:55:cb:72:38:ff:
18:22:a5:8b:f7:60:e7:ad:9a:a7:c9:c2:de:13:d4:
d0:75:85:a5:94:75:d3:79:7c:e7:3e:9d:00:44:c0:
74:b5:a0:82:b0:0a:0a:65:d0:2e:38:4f:03:fe:1a:
ad:51:77:b7:07:78:99:67:64:99:6e:db:b4:44:3b:
cf:68:69:94:67:90:88:6c:b4:8e:6a:b9:ed:59:d4:
46:e3:f1:c8:6f:f1:c1:cd:18:d5:c6:c8:f8:73:6f:
58:bd:cc:3a:bc:86:94:c9:9c:0c:5e:53:04:4b:93:
9d:19:a3:df:e3:06:ad:a8:ee:30:59:68:63:ba:bc:
43:66:2a:a6:b2:66:cf:e3:4d:d9:13:d2:52:35:86:
c4:a5:0e:3a:2d:2e:4f:ab:48:41:3f:f2:6c:0e:f3:
23:3e:30:b2:cf:3a:76:14:f8:9a:26:ad:11:5e:80:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2E:3D:2D:FB:A3:D4:7A:56:DC:14:05:F6:F6:1F:4D:4A:0C:A1:3C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0i49Lfuj1HpW3BQF9vYfTUoMoTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.206.0/24
37.202.208.0-37.202.210.255
Signature Algorithm: sha256WithRSAEncryption
92:4e:10:51:4a:1d:ab:99:ea:12:d3:cb:0b:e4:cb:ff:01:98:
98:b2:54:2f:78:da:2b:c4:1a:54:1e:10:b3:23:c7:ac:8f:13:
ca:02:da:39:ba:34:12:b8:94:54:61:59:e4:61:2b:bb:d6:e0:
15:e6:ec:c1:a8:02:26:03:cf:01:2a:2e:f6:45:d3:97:06:9f:
c4:b0:82:69:25:22:fd:5d:aa:48:ec:e0:5c:d2:8f:7e:d9:2f:
ed:21:61:d7:84:a2:b2:44:49:a9:66:04:b7:ef:61:2f:fd:45:
85:a1:86:46:f5:07:f3:25:f6:d8:a4:62:05:3a:50:89:20:fa:
99:7a:0b:5e:2f:7d:16:ad:aa:52:2a:de:7a:13:20:d2:06:c7:
2e:55:6a:df:5a:8c:75:81:c7:93:7f:87:a0:35:94:09:eb:85:
d9:04:f8:ed:d4:47:02:1c:9b:9b:d9:0c:02:a4:92:32:ee:0c:
57:0c:88:47:b3:15:ea:f6:25:fb:99:02:02:7f:3d:61:32:bf:
75:06:b1:e1:04:6d:a8:26:1c:a3:cf:73:e3:27:61:fd:c6:86:
24:87:85:dc:78:25:4e:29:ad:02:8c:d4:62:f9:d7:a5:da:ad:
f1:ba:bc:68:57:ab:60:a7:d2:a3:73:d1:65:ca:46:6d:ec:a3:
6e:00:7e:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 17 14:38:35 2024 by rpki-client on console-fra.rpki-client.org