Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/QmPc8XHr-B2B4pwPghxxlpZi2Ds.roa
File: QmPc8XHr-B2B4pwPghxxlpZi2Ds.roa (raw, json)
Hash identifier: b5p4xZaKh/To4TyFJ828leoa1bey3cLZFyZgmEFa11o=
Subject key identifier: 42:63:DC:F1:71:EB:F8:1D:81:E2:9C:0F:82:1C:71:96:96:62:D8:3B
Certificate issuer: /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial: 018EF54AD5545DE34E1483CE0B14C54F58FE
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/QmPc8XHr-B2B4pwPghxxlpZi2Ds.roa
Signing time: Fri 19 Apr 2024 07:38:25 +0000
ROA not before: Fri 19 Apr 2024 07:38:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202964
IP address blocks: 37.208.89.0/24 maxlen: 24
37.208.90.0/24 maxlen: 24
37.208.91.0/24 maxlen: 24
37.208.92.0/24 maxlen: 24
37.208.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 15:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:4a:d5:54:5d:e3:4e:14:83:ce:0b:14:c5:4f:58:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Validity
Not Before: Apr 19 07:38:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4263dcf171ebf81d81e29c0f821c71969662d83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:48:9f:8c:ca:32:6e:72:03:92:64:69:51:c1:
6b:18:8b:df:9a:c2:85:83:3a:48:15:8d:01:0f:23:
bd:21:c0:ec:c1:d0:16:c6:da:a0:28:6f:86:99:fd:
d4:f5:00:a3:b5:80:a2:97:53:a8:0f:0a:17:d0:d0:
1c:c0:fc:d6:17:37:55:c0:e9:e9:c1:67:12:3a:3f:
eb:3b:a8:76:d6:0c:e4:0e:91:57:05:15:e5:f2:a6:
c1:a5:96:30:a3:a2:23:39:01:92:30:51:c9:38:3f:
62:a0:cd:a9:59:94:57:41:ca:18:90:95:62:97:e8:
d8:02:f3:e5:8e:56:06:31:4f:9b:86:1e:3f:69:2d:
34:33:75:e3:77:7e:1a:fc:bc:3a:9a:32:75:bc:0c:
9e:d5:d9:6e:21:c0:ed:2f:5c:68:26:4f:5e:49:0f:
30:08:21:09:45:f4:15:01:2f:87:80:97:45:f7:f0:
12:87:b5:d9:70:a9:fc:76:15:c6:c1:4a:b2:fb:8e:
7f:b3:7e:4f:29:60:aa:aa:69:7d:62:24:a6:37:91:
31:e1:7f:24:47:44:58:a4:7a:99:3d:5e:74:f4:c1:
ad:fc:4f:e8:2e:08:99:b1:05:fd:a5:4e:62:97:87:
a4:0e:ef:19:0b:48:ae:cf:9b:6e:e3:ed:a7:84:86:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:63:DC:F1:71:EB:F8:1D:81:E2:9C:0F:82:1C:71:96:96:62:D8:3B
X509v3 Authority Key Identifier:
keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/QmPc8XHr-B2B4pwPghxxlpZi2Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.89.0-37.208.93.255
Signature Algorithm: sha256WithRSAEncryption
79:35:2d:9d:29:0f:6e:ba:3e:71:4d:f6:80:5b:49:35:ed:bc:
5d:27:1d:d8:bf:ed:92:bd:cb:48:67:9a:00:01:f9:12:a5:82:
e5:5c:4a:cc:06:2d:14:9b:00:75:85:cb:22:79:d2:a4:a0:fe:
63:23:ed:c9:bb:b7:6b:26:aa:f5:9d:ae:a2:7e:34:87:77:81:
7c:37:73:62:2d:54:60:ac:32:4f:fd:10:6a:0b:0a:ec:4e:bb:
a6:4f:d9:40:03:37:15:fe:73:16:16:80:37:6c:ac:7c:32:b1:
ca:7f:c9:eb:39:d2:25:51:01:b1:25:88:f2:ae:a8:56:e9:eb:
17:30:ef:35:b6:a5:65:de:97:8d:bd:eb:45:1f:9c:f4:3d:53:
b9:e4:c0:73:ec:81:14:a7:3a:c6:46:bf:f8:0f:0b:0e:e3:f0:
4c:b4:83:a1:b9:51:0d:c0:f7:a1:4b:3a:e7:4e:df:2a:48:c6:
15:d0:79:fd:bd:48:59:ba:d6:7c:a1:46:0d:de:cd:49:35:c3:
50:93:79:af:4b:b1:e3:6e:1c:dc:0a:ac:de:d6:f4:ac:3a:17:
d5:71:ff:90:fe:fe:3a:0b:01:d5:b9:71:fb:11:d7:fd:36:4a:
0d:8b:db:ce:aa:d3:4c:e2:18:46:ef:d5:d7:ee:c8:ad:fa:7a:
e2:dd:29:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 18:23:57 2024 by rpki-client on console-ams.rpki-client.org