Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uiYjtyGVF9e4Xkxwqt9cIab31U4.roa
File: uiYjtyGVF9e4Xkxwqt9cIab31U4.roa (raw, json)
Hash identifier: GXRs9r0L00og7WHscm2C5Lmb0uBh9LNNKYsXDCjmq8A=
Subject key identifier: BA:26:23:B7:21:95:17:D7:B8:5E:4C:70:AA:DF:5C:21:A6:F7:D5:4E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0192F241F440056353B0EA3F28895431471A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uiYjtyGVF9e4Xkxwqt9cIab31U4.roa
Signing time: Sun 03 Nov 2024 13:41:01 +0000
ROA not before: Sun 03 Nov 2024 13:41:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.202.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 04:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f2:41:f4:40:05:63:53:b0:ea:3f:28:89:54:31:47:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 3 13:41:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba2623b7219517d7b85e4c70aadf5c21a6f7d54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:2f:1c:e6:1d:27:bb:03:cf:22:1f:9c:c0:
66:a2:8a:5d:88:e6:23:5f:54:5c:68:1f:fa:cf:db:
c1:0d:c3:0b:86:a9:73:ce:38:ba:16:80:37:11:c0:
1a:0d:aa:b0:83:54:64:37:3f:6a:1c:48:60:fe:67:
3d:7f:1e:ab:64:78:cf:40:fc:0a:c8:79:1b:05:5b:
c1:56:ff:d6:77:59:78:8d:a2:21:9d:98:79:27:2f:
bb:bc:69:fb:42:17:b4:28:06:1b:da:ba:4e:d6:7d:
a5:4c:c1:ec:e2:09:f9:b4:a7:db:27:12:bd:c8:75:
35:93:0f:37:eb:55:8f:84:8f:2f:7a:b7:c8:d2:6e:
2d:9f:45:58:95:da:c1:cd:4b:31:1d:76:6b:ef:95:
9b:a3:ce:47:fa:aa:1f:3f:6a:12:49:ac:6a:74:c2:
78:b6:9d:9e:3b:60:09:cd:26:9c:e2:50:65:68:0b:
3e:b0:dc:c9:50:58:b6:ed:11:96:f0:67:29:e9:d2:
fc:06:8c:c4:9a:d0:f0:64:08:bc:74:f8:8a:34:21:
29:06:8e:9e:15:eb:48:15:3c:a4:9c:e7:5e:df:a8:
f3:a3:bd:37:dd:08:98:12:54:55:a4:4b:2e:5f:b5:
da:40:fa:db:c8:7f:2a:73:ec:52:5b:08:be:da:37:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:26:23:B7:21:95:17:D7:B8:5E:4C:70:AA:DF:5C:21:A6:F7:D5:4E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uiYjtyGVF9e4Xkxwqt9cIab31U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
Signature Algorithm: sha256WithRSAEncryption
68:78:08:ae:f5:85:97:9e:9b:6d:a6:09:3a:a5:3f:d0:10:79:
a0:7b:c2:17:1c:f0:5f:af:44:2e:82:b4:c6:a2:75:e0:17:bd:
97:d0:92:80:92:57:d3:22:56:bc:96:26:1b:ad:63:76:40:cf:
30:70:22:84:96:73:cd:43:1c:9a:e8:49:f4:49:2d:3e:99:6e:
af:d3:99:6e:e8:9f:51:e9:10:e4:56:c3:89:06:50:bc:4e:97:
39:96:d1:6d:0c:25:9d:a9:ff:50:01:60:ff:16:40:24:c9:bc:
9b:fc:17:5f:e8:67:05:84:7b:7b:fa:0b:51:4e:e2:68:86:46:
28:eb:20:f8:3b:9e:02:8f:da:c8:c6:93:40:21:5e:d3:2c:f7:
96:c8:92:13:68:2c:df:eb:92:82:87:b4:8f:5e:df:cb:d1:d1:
5a:69:db:77:14:b9:ce:33:72:94:c6:b4:55:da:dd:3d:bb:d7:
ce:2c:a9:e7:38:b2:05:85:6c:55:8c:76:37:0c:a7:02:2d:5e:
ab:f6:2d:e7:b5:16:ef:e9:88:c3:fb:4a:f5:37:e3:e0:9c:d6:
93:23:16:f1:e5:51:4c:bb:7f:44:a2:f8:e6:5e:ed:bd:26:6f:
db:8e:11:3c:d7:e8:ee:43:c1:4e:0a:7c:1c:2e:83:98:77:d9:
e9:eb:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:56 2024 by rpki-client on console-ams.rpki-client.org