Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sjgy5tiJlm12SLYC42XeCVNanH8.roa
File: Sjgy5tiJlm12SLYC42XeCVNanH8.roa (raw, json)
Hash identifier: sNPecVW3E/werOWjoyB/lg6LXT6gXkUx72DFs9WwPy4=
Subject key identifier: 4A:38:32:E6:D8:89:96:6D:76:48:B6:02:E3:65:DE:09:53:5A:9C:7F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0192573B7B0300B1B7A89F0D02B4289C5152
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sjgy5tiJlm12SLYC42XeCVNanH8.roa
Signing time: Fri 04 Oct 2024 11:12:48 +0000
ROA not before: Fri 04 Oct 2024 11:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6550
IP address blocks: 37.202.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 05:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:3b:7b:03:00:b1:b7:a8:9f:0d:02:b4:28:9c:51:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 4 11:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a3832e6d889966d7648b602e365de09535a9c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:e0:9f:2c:46:b9:9e:3a:96:95:61:0a:4e:
fd:ce:02:a9:d0:fa:10:6b:0b:d0:fd:02:9d:6f:e0:
14:f7:c5:a4:ca:d3:83:23:cf:af:45:e0:b7:91:8c:
93:3c:b6:fe:75:e5:ff:cc:22:f7:40:c5:3d:b2:6b:
9f:66:e1:8d:fa:e0:8f:36:42:6b:a7:bb:f0:59:f8:
4e:e8:8c:27:55:3e:01:ab:f4:b0:af:5f:16:4a:8a:
48:97:42:d4:69:0b:e9:a2:b0:13:f1:72:08:57:60:
69:cb:72:dc:48:7d:fe:6e:85:79:e6:11:88:93:68:
cd:7c:2a:98:c6:11:2e:6e:8c:c0:21:28:1a:3e:cf:
cd:bf:56:57:c1:ce:c0:91:79:ed:7e:e7:6c:e4:44:
6b:54:5d:1a:ae:bf:20:95:53:84:ab:97:e3:da:41:
d1:d0:c1:d8:3f:97:41:2f:8e:89:b2:4f:b7:34:62:
75:26:06:c2:0a:9c:24:ce:7e:fc:f1:7b:c9:cf:6d:
50:ca:c9:27:9a:c4:e5:f9:99:43:8f:34:14:6b:7f:
d5:5c:4c:e3:de:eb:73:01:17:b5:a0:eb:59:53:84:
ca:5f:33:32:dc:f1:c9:63:02:6d:4b:1b:32:00:43:
da:1f:ee:a6:89:97:17:f4:65:85:54:2c:49:3c:f6:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:38:32:E6:D8:89:96:6D:76:48:B6:02:E3:65:DE:09:53:5A:9C:7F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sjgy5tiJlm12SLYC42XeCVNanH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.198.0/24
Signature Algorithm: sha256WithRSAEncryption
42:82:69:7a:b9:30:ee:9b:9c:4e:b7:4f:76:54:ad:26:7f:23:
fd:39:35:67:96:5f:ac:db:f4:e5:80:83:1a:66:f4:ed:87:6d:
7d:18:79:09:67:d9:8e:fb:a0:9d:e3:39:b5:c7:50:2a:24:13:
99:6c:b1:c0:50:10:9d:04:e5:8a:08:ec:18:6b:ed:a5:96:34:
f2:16:96:3c:59:f2:fa:58:0e:c5:da:16:68:36:84:12:97:d9:
5c:02:69:11:51:73:e7:6b:35:05:ba:42:51:eb:61:75:64:d8:
98:04:3d:c0:82:a0:da:5a:bf:7e:a1:48:c4:f6:8d:b5:8e:1e:
db:44:d5:f9:40:f9:89:09:b3:2d:4f:5b:47:d4:bd:f2:5a:b5:
4d:06:4e:8d:54:b5:21:88:f7:7c:60:3e:2f:13:bc:9f:19:fe:
a7:46:cf:34:c2:33:2c:b5:88:01:5a:86:c8:12:b0:c9:42:7c:
ea:ac:9d:74:3f:6f:0f:ea:9f:c3:ec:b7:0b:d8:a9:75:dd:8e:
46:79:9b:87:e3:bd:18:8e:ed:87:7f:12:e2:2d:62:94:f3:c1:
97:ca:f7:91:a5:1c:f2:d5:84:09:d2:2c:1c:55:84:1f:1f:89:
b5:cc:a8:3e:d7:b8:88:93:20:f0:21:82:48:87:1f:cb:93:cc:
82:4a:3c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 08:16:16 2024 by rpki-client on console-fra.rpki-client.org