Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k6ggvuJRQgFiD7--4KqvxULFq_c.roa
File: k6ggvuJRQgFiD7--4KqvxULFq_c.roa (raw, json)
Hash identifier: vqpOKU6a1zX3s9FZ3p0RE4NfO2yBB3sdzjUWqTtfhwo=
Subject key identifier: 93:A8:20:BE:E2:51:42:01:62:0F:BF:BE:E0:AA:AF:C5:42:C5:AB:F7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01925742CD9B78C6569894E9F4CE0C35EACB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k6ggvuJRQgFiD7--4KqvxULFq_c.roa
Signing time: Fri 04 Oct 2024 11:20:48 +0000
ROA not before: Fri 04 Oct 2024 11:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 05:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:42:cd:9b:78:c6:56:98:94:e9:f4:ce:0c:35:ea:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 4 11:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93a820bee2514201620fbfbee0aaafc542c5abf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:10:32:be:91:42:72:f1:74:21:21:02:a7:
16:98:c3:45:80:c3:9b:de:3c:b8:79:c5:89:1b:c5:
ad:1f:0e:30:71:75:5b:1a:96:35:b4:96:cd:72:32:
63:71:f0:6f:d4:9a:bd:18:f4:8c:24:c0:89:77:39:
33:43:13:81:37:9c:e7:7c:6c:d9:fc:3e:0f:b9:4b:
eb:48:47:cc:66:7c:97:5d:e4:14:e8:5d:bb:a1:93:
02:42:b3:5d:71:2d:51:94:10:7f:19:99:47:b5:6a:
9a:30:75:ee:87:43:90:d5:1d:dc:db:34:b8:ec:68:
9f:4e:61:c8:a7:35:d3:4d:37:16:53:cd:7b:d9:2c:
75:48:07:78:35:25:d7:b1:59:2b:56:40:fd:3f:5c:
c9:16:74:f9:24:91:ef:8e:e6:96:2b:53:e8:02:30:
5a:07:45:53:e4:a3:1a:4a:bd:bf:e2:1d:1d:0e:e9:
57:60:5d:6f:1c:d4:80:a3:7d:9d:68:d6:02:65:a7:
e1:bf:75:96:2d:cb:6b:32:ba:d6:b8:0a:0b:80:5b:
6c:27:22:3a:00:c1:2c:e8:a3:35:83:e0:f6:db:e8:
34:9b:ae:98:3f:26:45:12:1c:af:82:31:26:58:1b:
8d:0f:6e:83:31:59:05:84:2a:b4:4e:0d:2d:b2:53:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:20:BE:E2:51:42:01:62:0F:BF:BE:E0:AA:AF:C5:42:C5:AB:F7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k6ggvuJRQgFiD7--4KqvxULFq_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.197.255
37.202.199.0-37.202.201.255
Signature Algorithm: sha256WithRSAEncryption
90:e1:c6:1a:d3:57:67:41:f5:70:2f:d7:58:8a:cc:f4:ad:21:
e0:b2:9f:e6:bc:c2:f6:b2:a0:84:27:a6:92:87:45:7a:bd:eb:
e0:f8:01:f1:eb:86:d3:ab:64:f7:55:cd:65:40:13:34:f2:87:
e6:d9:35:63:32:72:ec:18:e3:b6:55:9f:37:98:2e:b9:93:ee:
72:40:f7:56:83:79:d0:96:89:02:67:b9:e6:7b:eb:74:3c:c4:
14:7a:36:e6:1e:0f:0c:63:c2:77:29:a3:1c:5c:1c:1f:28:05:
e1:7b:49:11:e8:ca:f2:4a:cd:90:ad:a7:82:62:9b:2d:19:91:
14:a0:eb:3d:cc:32:1a:25:fc:46:c7:95:e9:54:88:c5:f6:62:
3b:de:d2:d1:67:94:b1:b7:30:19:1c:7e:39:a2:ff:48:b1:a0:
88:a2:8f:93:7b:ac:fe:85:9f:e8:46:d5:20:6f:36:94:f8:f1:
f7:23:3b:50:79:d9:39:77:f0:8a:9c:f6:e3:1c:e0:c1:01:56:
a0:3f:3c:6b:ad:d0:40:89:46:5c:1e:fd:b8:4f:5a:91:e5:fc:
74:b6:d5:07:7d:21:1a:eb:6f:c6:ad:e4:19:36:48:25:c6:61:
d9:8f:57:3b:65:72:7a:67:ce:d4:3a:32:1d:57:c5:98:9b:31:
d0:ae:cb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 08:16:16 2024 by rpki-client on console-fra.rpki-client.org