Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bX_wkw2D3UucJwN4ct8wgONw-KE.roa
File: bX_wkw2D3UucJwN4ct8wgONw-KE.roa (raw, json)
Hash identifier: co5kWNrZYSJs0RgzTgpv/cHiP3P8TVZulMLhKG02Kw0=
Subject key identifier: 6D:7F:F0:93:0D:83:DD:4B:9C:27:03:78:72:DF:30:80:E3:70:F8:A1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7AF29F2EA59A63A6A124D8BF2187F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bX_wkw2D3UucJwN4ct8wgONw-KE.roa
Signing time: Wed 01 Jan 2025 21:48:45 +0000
ROA not before: Wed 01 Jan 2025 21:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 37.202.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 16:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:af:29:f2:ea:59:a6:3a:6a:12:4d:8b:f2:18:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d7ff0930d83dd4b9c27037872df3080e370f8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:47:91:4c:dc:b2:46:67:fa:5d:79:b6:12:
32:78:14:9b:a1:07:8b:b2:08:76:67:aa:03:ff:84:
ee:a6:9c:26:63:de:7a:2b:c7:e0:f6:33:79:30:f3:
cd:05:7c:6e:d0:72:c4:6f:96:0d:be:47:23:96:09:
09:6b:70:e9:87:30:d8:e6:40:36:94:20:e4:9e:f5:
32:37:08:1f:94:8a:e1:25:0f:ac:71:91:af:8b:10:
6c:71:8f:68:06:71:67:ff:80:2f:57:7a:d2:87:73:
68:02:fd:b3:fd:45:d2:fc:b6:d0:7d:15:43:d6:2f:
cf:e7:1f:8b:f3:f3:22:cb:2b:14:3f:32:5f:0e:00:
80:64:7e:41:29:a8:79:9c:7f:de:07:ba:f2:8c:ca:
2e:bf:ca:fb:2a:e4:79:15:3c:37:50:57:38:f1:38:
cb:2f:63:a6:48:14:b0:52:23:76:aa:cb:28:b8:d2:
59:ed:a9:4e:74:75:1d:9d:9d:89:e8:a5:5c:b0:e4:
74:bd:8f:36:69:98:8a:e4:65:a6:02:cf:ff:58:c0:
57:45:6c:fe:f5:fb:a7:e7:03:2c:a2:07:aa:66:7b:
1f:1d:41:26:46:4d:03:78:37:9d:42:69:7c:dc:b1:
d4:07:8e:df:9e:d5:29:e0:9c:d0:42:b3:96:f3:4e:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7F:F0:93:0D:83:DD:4B:9C:27:03:78:72:DF:30:80:E3:70:F8:A1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bX_wkw2D3UucJwN4ct8wgONw-KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.204.0/24
Signature Algorithm: sha256WithRSAEncryption
37:38:0a:88:8a:51:e1:63:de:66:c9:38:d3:6d:44:83:b3:93:
06:49:b2:9b:9d:d3:08:fa:74:f2:b9:9b:74:cd:a3:e2:9a:eb:
08:d2:cf:33:37:64:a6:d8:64:74:48:e7:f9:a4:2d:fe:b4:3c:
bd:62:61:d7:c8:17:a1:ab:d3:ea:5b:84:86:8a:51:6d:17:05:
6c:40:a8:f9:88:ed:15:53:1b:0b:ae:9b:4e:53:a6:f9:3b:7f:
f5:95:35:f1:99:f2:53:e2:22:f9:fc:13:89:35:f8:ea:7b:dd:
b0:5a:1a:70:1c:86:c8:c2:dc:62:f4:fd:a0:96:ab:2f:45:3b:
a0:4b:8d:cd:01:7d:7c:0a:dd:8e:37:d0:03:4c:1c:e4:4e:ad:
12:88:db:47:73:de:c3:38:64:7b:38:07:bc:a8:61:71:04:80:
b8:c7:aa:22:07:b1:24:69:f3:60:ab:61:1b:c4:8a:6e:91:50:
63:82:10:81:52:c0:e4:37:db:d2:3d:ad:8f:a2:6d:d0:0d:23:
a5:46:93:d0:e7:69:bc:8d:2f:6f:34:d0:d4:a6:b7:3c:9b:33:
5e:4a:e5:00:d2:7f:68:16:f1:f7:79:17:d3:ce:00:65:df:1b:
86:79:8a:76:c1:4c:bd:29:4a:c5:46:45:64:02:a1:2e:a7:95:
cd:cd:af:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:28:24 2025 by rpki-client