Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/No3npopNkoNR9f6sCLQcBrOzTZM.roa
File: No3npopNkoNR9f6sCLQcBrOzTZM.roa (raw, json)
Hash identifier: PIgP7PcoS9sLEGsjjHlCQKUKzkYpKe/mUDHWwmH1rg4=
Subject key identifier: 36:8D:E7:A6:8A:4D:92:83:51:F5:FE:AC:08:B4:1C:06:B3:B3:4D:93
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019257351236DD107D84CA3B571A324BDCDE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/No3npopNkoNR9f6sCLQcBrOzTZM.roa
Signing time: Fri 04 Oct 2024 11:05:48 +0000
ROA not before: Fri 04 Oct 2024 11:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.192.0/24 maxlen: 24
37.202.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 04:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:35:12:36:dd:10:7d:84:ca:3b:57:1a:32:4b:dc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 4 11:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=368de7a68a4d928351f5feac08b41c06b3b34d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:cf:67:72:60:2f:50:02:7b:2b:17:c4:39:
f9:b2:5c:27:3a:bd:a6:86:b8:d7:46:90:81:b5:ee:
63:b0:58:b5:d5:16:51:c4:a1:dc:b7:62:4c:13:51:
00:4e:15:bb:09:f1:55:f2:d6:79:be:8b:03:fe:ed:
65:56:1b:e0:19:91:ef:a2:4b:72:ea:30:c7:ad:1d:
2a:bb:a7:e1:e8:a7:45:37:23:ec:89:d7:cc:73:50:
82:dd:28:b7:f8:be:7e:58:02:b3:bd:67:92:05:68:
39:42:c4:3d:fd:22:c6:9b:c9:e7:bc:4d:77:f3:ea:
35:0a:14:c9:06:f7:53:2e:41:a5:fd:d8:87:4c:58:
1b:cb:d5:0b:58:7c:ef:01:f9:e0:0f:d7:eb:07:1f:
8c:3e:d2:a3:cc:b1:81:93:4b:81:e0:f9:30:18:b3:
26:87:47:d3:35:7b:a3:6b:33:5f:8b:1e:75:38:ba:
06:bd:56:d6:09:66:37:8b:96:74:06:1d:b4:43:03:
cc:df:0d:db:5a:60:ef:2c:f9:d2:89:82:20:92:36:
d8:cb:5c:6a:f6:46:6c:79:8f:60:dc:c1:1c:e2:05:
43:f2:c8:3a:48:62:58:4b:5b:d5:99:b5:cd:39:c2:
c1:5b:b2:cb:f4:ed:f2:45:11:05:47:6a:fe:aa:66:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8D:E7:A6:8A:4D:92:83:51:F5:FE:AC:08:B4:1C:06:B3:B3:4D:93
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/No3npopNkoNR9f6sCLQcBrOzTZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.192.0/24
37.202.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:89:aa:f7:72:ff:67:cf:4d:69:ef:bf:be:94:6c:41:e2:27:
d3:e4:fa:6e:6f:57:d9:de:f1:de:1a:3f:4f:fb:84:2a:3a:99:
a4:ca:45:2f:8e:ec:77:d1:a1:e3:f3:c8:02:95:f9:89:3b:30:
ce:e1:9f:5b:61:56:d6:92:65:29:2f:73:06:18:fd:c8:67:a0:
88:2f:4b:f9:39:95:79:ce:d4:67:65:6a:1d:b3:6b:0c:27:b6:
ce:9b:b7:c8:f8:0c:87:2a:b8:01:b1:0c:7d:a6:69:5e:ff:62:
e4:f1:83:0f:be:1e:fa:02:f3:f9:c8:da:a3:d3:47:20:e5:94:
59:7a:42:cd:bf:ad:1f:9f:60:24:b0:7e:fe:7f:23:37:fe:4f:
92:c0:3a:eb:46:24:1a:f4:43:d9:e1:78:86:26:53:56:2b:42:
1f:76:1b:78:34:73:33:07:54:30:21:08:bd:ad:fa:1a:48:0f:
1d:51:c2:ac:81:3b:d8:c4:6f:61:09:ca:c7:6c:73:2d:60:fc:
92:24:5c:c2:5e:f3:24:43:2d:c9:07:06:ce:40:ae:e8:6e:c0:
a0:fd:16:61:c2:65:1a:18:0e:73:81:53:db:09:be:43:d1:ea:
90:7f:d5:f0:dd:ad:15:a6:4d:3c:1d:8d:f1:81:9b:97:e7:44:
c2:57:73:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:11 2024 by rpki-client on console-fra.rpki-client.org