Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bNhzQEq8NkuAXj_lHoZM9le0Je8.roa
File: bNhzQEq8NkuAXj_lHoZM9le0Je8.roa (raw, json)
Hash identifier: pEU7xofWuY1t1BZpgSccQ8dFBu7itwkqUW0mC0DEdi4=
Subject key identifier: 6C:D8:73:40:4A:BC:36:4B:80:5E:3F:E5:1E:86:4C:F6:57:B4:25:EF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0192573252D0EDCA0C4DE5B2933B5B29B19C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bNhzQEq8NkuAXj_lHoZM9le0Je8.roa
Signing time: Fri 04 Oct 2024 11:02:48 +0000
ROA not before: Fri 04 Oct 2024 11:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214364
IP address blocks: 37.202.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 13:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:32:52:d0:ed:ca:0c:4d:e5:b2:93:3b:5b:29:b1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 4 11:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cd873404abc364b805e3fe51e864cf657b425ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:8c:91:4c:57:d9:5d:0d:8d:60:50:bf:e4:d9:
34:06:71:23:43:1f:79:2d:e6:68:c2:2d:b7:06:de:
03:c5:2c:13:31:70:b7:79:28:17:04:3a:cd:0a:4d:
70:0c:9d:a0:07:24:0f:42:ac:f6:f1:9b:85:a6:59:
f9:50:6e:de:7b:07:13:38:2e:2d:e8:d8:c1:7e:ca:
0e:fa:a2:d3:f8:f7:af:11:34:94:81:5c:14:6f:cb:
d5:f7:ef:e5:15:dd:35:e4:f5:7f:cd:39:67:86:da:
c7:50:9f:ec:d0:90:00:eb:a3:99:ab:cb:bf:a3:75:
6c:2d:fc:0c:57:96:d7:83:74:c5:43:c4:20:cd:93:
ef:ef:38:c2:cf:34:fb:f1:89:e2:4d:07:a6:3f:32:
44:35:7b:e7:23:19:6d:2b:74:0f:fd:a4:c2:14:61:
9a:89:aa:d0:9f:e3:25:f4:8a:41:97:c3:ba:12:e0:
d7:31:c5:1b:ce:d5:91:9f:91:1f:67:11:fa:c4:c8:
ad:d4:53:b7:72:3d:de:47:ce:a4:c1:ec:26:bb:14:
94:15:61:c0:b2:64:82:ab:0c:13:3e:e5:2b:06:88:
a3:d1:44:e8:16:a0:b4:d6:5b:3c:16:5a:d8:8a:5c:
46:40:e0:48:77:0a:e5:40:4b:dc:d9:ee:f3:9d:dd:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D8:73:40:4A:BC:36:4B:80:5E:3F:E5:1E:86:4C:F6:57:B4:25:EF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bNhzQEq8NkuAXj_lHoZM9le0Je8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:71:2f:63:d7:35:12:1f:8e:50:00:19:c9:23:82:c7:9c:a9:
87:9c:63:89:2f:d2:a5:b6:a4:70:ed:d8:10:b7:80:5b:86:26:
d2:ba:17:c9:9e:ff:af:f0:f5:05:cb:3f:eb:a5:99:20:f1:85:
b3:46:8e:93:a7:4f:76:ac:4f:f3:6e:63:6c:e6:db:64:73:cd:
9d:cd:b3:f2:56:c9:cf:3b:cd:d1:48:ed:76:2b:a2:56:e2:00:
6f:39:6c:27:23:5b:7f:c7:8d:3d:a7:eb:f3:cb:03:ce:78:fb:
a2:ed:1d:47:92:c0:92:4b:9f:92:8e:46:21:d5:d7:f9:07:95:
d4:86:60:8e:53:54:67:25:09:6b:89:5b:51:b6:01:28:f5:73:
9d:ff:e6:e3:37:83:8e:75:24:1f:db:49:57:84:6f:03:0f:26:
cb:2d:a5:81:45:d8:86:f4:aa:c1:26:74:f1:1d:14:b7:5f:04:
1d:3f:9e:42:e6:32:61:04:fa:6f:f6:e6:6a:42:0e:fe:fe:ba:
bb:e6:96:37:60:4a:59:fd:20:bb:0d:b7:2e:3f:36:a4:1c:90:
14:59:50:e5:85:9e:ec:2f:96:22:1c:f9:15:b1:e0:92:e0:bf:
f4:d4:26:ee:5d:42:16:e8:70:22:0c:1c:2f:c8:64:61:7a:3d:
bc:74:94:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 17:45:25 2024 by rpki-client on console-ams.rpki-client.org