Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z4gBxSvCLUHWRJDcerZLIRq6lvM.roa
File: z4gBxSvCLUHWRJDcerZLIRq6lvM.roa (raw, json)
Hash identifier: VSxDBTraVdBLCS3TdwCk1najfMc/1JBkFRFzFirMnYU=
Subject key identifier: CF:88:01:C5:2B:C2:2D:41:D6:44:90:DC:7A:B6:4B:21:1A:BA:96:F3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019261C00D637C83F0FE855086647CA7C23B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z4gBxSvCLUHWRJDcerZLIRq6lvM.roa
Signing time: Sun 06 Oct 2024 12:13:49 +0000
ROA not before: Sun 06 Oct 2024 12:13:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 37.202.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 07:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:61:c0:0d:63:7c:83:f0:fe:85:50:86:64:7c:a7:c2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 6 12:13:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf8801c52bc22d41d64490dc7ab64b211aba96f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:e4:fd:3a:51:50:1e:43:ce:e2:82:58:fe:
98:6d:00:0c:99:60:06:23:54:a0:93:ff:ef:64:7d:
61:dd:9b:f0:b2:9b:95:6d:ef:97:c2:51:11:ee:df:
72:28:7f:58:53:1f:22:7d:90:5a:f0:ad:84:25:a4:
5c:0d:fb:d0:68:fd:fd:48:a6:14:cf:92:e5:7c:ae:
56:49:7a:b5:a1:c2:5a:05:69:fd:53:0f:de:fb:48:
42:2e:23:64:b3:5c:3d:13:4f:65:87:43:6f:da:17:
b2:20:f6:62:04:49:1d:d0:cd:f1:69:bb:35:db:43:
5d:79:50:5d:e2:fe:a1:69:0e:41:c3:7e:74:4f:32:
15:b8:4e:4b:8e:15:aa:19:a9:4b:e7:26:d7:67:e0:
49:93:6b:52:88:3b:05:0b:c1:1b:82:02:3f:d9:81:
0f:92:ce:92:d8:44:4a:93:70:c5:27:f0:5a:d2:80:
e2:92:7c:09:4c:23:b9:37:e1:c4:94:7e:00:c5:b3:
2a:6d:9e:d1:ef:2a:10:d1:4d:cf:24:ff:87:f8:a9:
df:dc:ce:4c:a5:72:0b:7f:8d:ab:c5:f4:91:3e:45:
47:4b:e8:e0:d8:4b:92:a7:71:5a:3b:30:2d:1c:c4:
8f:ae:f9:e0:3f:9f:c8:04:8c:65:e2:4c:70:0f:2b:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:88:01:C5:2B:C2:2D:41:D6:44:90:DC:7A:B6:4B:21:1A:BA:96:F3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z4gBxSvCLUHWRJDcerZLIRq6lvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6a:b3:c1:89:64:74:7d:25:c6:84:00:33:75:52:9f:04:e6:
6c:9f:fd:d6:44:70:60:fd:41:98:e8:6e:be:ea:70:a8:b9:c5:
d4:cd:67:20:f0:42:73:74:5d:b6:38:59:e0:08:a3:3b:54:97:
52:c5:27:5d:80:4f:97:89:af:ce:03:65:a0:19:6a:2f:ae:db:
2c:54:07:01:83:c8:81:e3:c7:66:fd:cb:14:97:c8:cc:0b:62:
a6:ee:c3:82:0a:c0:45:07:aa:92:84:77:39:07:8c:50:55:4b:
b2:c1:b6:7d:a5:58:25:83:63:5f:74:e5:a9:bc:06:de:55:fe:
4e:e3:22:9c:c7:74:cb:f8:cd:b2:36:f8:3e:47:b6:95:0b:90:
8c:f0:c5:dd:98:ab:62:a7:8c:73:af:36:34:74:d3:f2:12:69:
8d:ee:ba:59:d4:42:bd:c7:ed:44:ca:92:97:25:f2:aa:e4:7b:
4d:2b:06:ea:06:6c:8e:42:1c:0b:87:8a:97:f8:18:42:e1:c7:
55:f1:71:2e:40:7c:ad:b6:3a:7c:5d:ca:f2:55:1e:c2:de:11:
0b:83:11:7c:c7:2e:64:30:5e:b6:84:43:ea:28:c7:06:4f:98:
bf:39:a5:39:4c:01:ea:3b:12:e3:dc:38:f2:24:c4:a0:fb:5e:
29:e5:ee:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 08:48:33 2024 by rpki-client on console-ams.rpki-client.org