Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DDsXkbiiqRSL1_yIF2G5CS8nBiQ.roa
File: DDsXkbiiqRSL1_yIF2G5CS8nBiQ.roa (raw, json)
Hash identifier: dPGjmAWs1jf7AYrQzyQ099pCmqqtozFuQ7oxVRq9GV0=
Subject key identifier: 0C:3B:17:91:B8:A2:A9:14:8B:D7:FC:88:17:61:B9:09:2F:27:06:24
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0192FFBF51F92952FA4EF28073CFC7395F54
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DDsXkbiiqRSL1_yIF2G5CS8nBiQ.roa
Signing time: Wed 06 Nov 2024 04:33:01 +0000
ROA not before: Wed 06 Nov 2024 04:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.192.0/24 maxlen: 24
37.202.194.0/24 maxlen: 24
37.202.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ff:bf:51:f9:29:52:fa:4e:f2:80:73:cf:c7:39:5f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 6 04:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c3b1791b8a2a9148bd7fc881761b9092f270624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:a3:6b:9b:7a:15:af:d4:14:6e:a7:50:ae:
4d:77:d7:3c:69:8f:87:5c:12:88:2b:5f:f4:16:97:
d2:c2:58:fb:6c:00:4c:df:17:b6:6f:df:7f:ff:6f:
d9:2d:bd:da:7c:91:8f:26:62:3e:fb:14:fa:3b:8e:
14:ac:fd:d8:6b:a8:b5:e6:56:1e:2e:fb:ae:90:c3:
21:59:1e:b7:ca:fc:66:ce:cb:80:ee:0e:3d:3e:8a:
6f:14:29:b7:72:8f:bc:dc:3a:07:65:b1:3b:81:bf:
8b:9f:33:27:b7:76:44:8a:e2:3e:29:30:29:83:f2:
37:01:ae:a6:c4:c7:46:01:1e:76:fa:c9:6d:82:22:
99:2c:b9:b2:fe:61:ae:90:7a:36:dd:d2:70:23:38:
90:84:78:2e:ac:41:f4:73:36:24:03:85:82:e0:9c:
6c:5e:21:15:2d:b9:3e:e8:56:22:9b:8a:d9:fd:51:
13:6c:6c:d2:95:68:47:f1:9e:a7:3e:8c:e6:aa:6b:
ee:2c:67:ea:a8:c6:4b:f8:f2:8b:98:94:c7:a6:6b:
99:f2:db:34:16:a8:b0:f7:05:a8:d9:4d:59:63:c2:
6a:ae:53:01:af:aa:1e:b5:18:c3:89:cd:77:04:7b:
2c:0c:0e:a3:56:6c:8e:58:1b:37:0a:77:66:24:7a:
28:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3B:17:91:B8:A2:A9:14:8B:D7:FC:88:17:61:B9:09:2F:27:06:24
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DDsXkbiiqRSL1_yIF2G5CS8nBiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.192.0/24
37.202.194.0/24
37.202.202.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5b:d1:11:d2:9d:72:15:6b:64:18:19:ca:51:af:2b:77:c8:
e5:76:2d:bb:d8:6f:26:f4:6b:40:26:22:06:47:00:ee:7d:fc:
db:a2:c0:4a:4f:95:9d:fc:31:15:65:8b:42:2f:c4:c2:95:7b:
df:0b:d4:c0:15:56:99:a3:90:47:eb:37:a9:a1:39:59:f2:3b:
7d:88:e0:0a:0b:12:77:2b:22:9f:22:45:9f:80:e6:f4:a4:db:
7a:a6:ae:99:6e:1c:8f:36:b2:96:0f:1c:bc:c3:39:40:31:4b:
64:7b:8c:05:14:8a:ad:ee:cf:c4:2c:7e:f8:91:35:eb:c1:2b:
d3:cc:72:fc:56:37:65:52:71:bb:74:d1:06:87:d3:04:17:51:
7a:45:8b:16:76:c2:0f:55:4b:98:a1:2c:66:f0:30:49:66:7b:
b6:d5:ff:08:04:62:c7:db:2a:99:71:c3:79:b6:a4:37:97:73:
88:31:e3:f3:64:fb:fa:df:ef:58:6a:ad:8a:47:20:0b:26:f0:
61:c7:5c:eb:9d:41:a2:48:67:18:65:5d:c5:8b:fb:fb:5b:ca:
41:3a:05:81:4a:5f:db:94:11:55:fa:99:7b:3e:e0:2a:31:bd:
19:46:e1:19:f4:72:4b:a1:19:36:b0:3f:f4:cb:e0:0e:53:b8:
3b:5f:25:7b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZL/v1H5KVL6TvKAc8/HOV9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjQxMTA2MDQzMzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzNiMTc5MWI4YTJhOTE0OGJkN2ZjODgxNzYxYjkwOTJmMjcwNjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9aja5t6Fa/UFG6nUK5Nd9c8aY+H
XBKIK1/0FpfSwlj7bABM3xe2b99//2/ZLb3afJGPJmI++xT6O44UrP3Ya6i15lYe
LvuukMMhWR63yvxmzsuA7g49PopvFCm3co+83DoHZbE7gb+LnzMnt3ZEiuI+KTAp
g/I3Aa6mxMdGAR52+sltgiKZLLmy/mGukHo23dJwIziQhHgurEH0czYkA4WC4Jxs
XiEVLbk+6FYim4rZ/VETbGzSlWhH8Z6nPozmqmvuLGfqqMZL+PKLmJTHpmuZ8ts0
Fqiw9wWo2U1ZY8JqrlMBr6oetRjDic13BHssDA6jVmyOWBs3CndmJHooxQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAw7F5G4oqkUi9f8iBdhuQkvJwYkMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRERzWGtiaWlxUlNMMV95SUYyRzVDUzhuQmlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJcrAAwQA
JcrCAwQAJcrKMA0GCSqGSIb3DQEBCwUAA4IBAQBFW9ER0p1yFWtkGBnKUa8rd8jl
di272G8m9GtAJiIGRwDuffzbosBKT5Wd/DEVZYtCL8TClXvfC9TAFVaZo5BH6zep
oTlZ8jt9iOAKCxJ3KyKfIkWfgOb0pNt6pq6ZbhyPNrKWDxy8wzlAMUtke4wFFIqt
7s/ELH74kTXrwSvTzHL8VjdlUnG7dNEGh9MEF1F6RYsWdsIPVUuYoSxm8DBJZnu2
1f8IBGLH2yqZccN5tqQ3l3OIMePzZPv63+9Yaq2KRyALJvBhx1zrnUGiSGcYZV3F
i/v7W8pBOgWBSl/blBFV+pl7PuAqMb0ZRuEZ9HJLoRk2sD/0y+AOU7g7XyV7
-----END CERTIFICATE-----
Generated at Tue Nov 19 06:52:20 2024 by rpki-client on console-ams.rpki-client.org