Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/0xdGMyaSjkFoN7LaSO3cqbA5RL4.roa
File: 0xdGMyaSjkFoN7LaSO3cqbA5RL4.roa (raw, json)
Hash identifier: 0uyaq1QdBb3KieHpCdXvoV/GuevqepQSuLgS1nPyGks=
Subject key identifier: D3:17:46:33:26:92:8E:41:68:37:B2:DA:48:ED:DC:A9:B0:39:44:BE
Certificate issuer: /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Certificate serial: 018570FBDA4FDC51F513C7F164D70997A836
Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/0xdGMyaSjkFoN7LaSO3cqbA5RL4.roa
Signing time: Mon 02 Jan 2023 05:37:11 +0000
ROA not before: Mon 02 Jan 2023 05:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24971
IP address blocks: 37.140.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:da:4f:dc:51:f5:13:c7:f1:64:d7:09:97:a8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Validity
Not Before: Jan 2 05:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d317463326928e416837b2da48eddca9b03944be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0c:0c:cb:80:8b:1d:20:56:9f:27:7e:e6:b8:
8a:d6:0f:e2:bd:ae:96:4a:99:60:b2:f4:af:19:e9:
d3:50:a7:db:71:98:a3:ee:bb:f2:e2:5a:20:a5:bd:
46:75:35:0c:a8:56:f7:fb:ad:fd:34:15:23:d6:84:
09:8c:40:26:0c:b5:da:6f:de:91:02:9e:46:3e:ca:
75:6f:99:fc:9b:4b:f0:f3:c3:85:f5:ea:f3:9e:58:
20:62:71:15:b4:45:98:3b:0a:1b:76:8d:bb:ac:dc:
0a:d2:48:17:d9:6f:b8:38:11:8f:17:41:1b:3e:cb:
b8:c6:1d:d3:10:a4:f3:9a:ce:bd:e9:38:c8:e1:c4:
fd:5d:6e:63:e4:dc:98:03:52:8e:26:8d:c3:1f:4a:
ef:1e:61:4c:76:df:91:54:6d:d0:f2:83:c5:37:bf:
be:c7:d2:17:49:12:c3:72:3e:d4:1d:2a:55:be:ad:
76:7d:3a:17:c6:d6:ed:b2:62:90:78:62:eb:df:a8:
b6:cf:f7:be:8b:79:8d:df:4d:92:39:d0:d8:ff:c6:
12:5e:ed:70:7a:0f:30:81:bf:a0:dc:b7:c5:be:23:
c4:db:20:c5:08:0f:eb:3d:30:ff:ac:73:54:6c:eb:
6e:8b:73:b0:dc:e3:6b:f2:1c:9b:ad:d7:9a:a3:87:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:17:46:33:26:92:8E:41:68:37:B2:DA:48:ED:DC:A9:B0:39:44:BE
X509v3 Authority Key Identifier:
keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/0xdGMyaSjkFoN7LaSO3cqbA5RL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.220.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:04:3c:dd:cd:51:12:30:c0:2f:84:ee:a8:e9:4e:24:7f:24:
f2:89:d6:91:95:d0:82:5c:35:ae:c2:f6:de:74:20:ac:6d:31:
e1:1c:b9:db:c3:31:34:6d:85:5d:6f:29:c1:81:b6:8e:11:15:
0d:00:c4:d4:7a:8f:58:8e:c2:2d:d2:fe:50:01:04:20:65:78:
e8:aa:2d:17:5b:66:cb:e8:6b:d4:9c:68:78:67:9e:b8:18:4a:
02:3f:a9:fa:f4:c4:29:8e:96:ac:ab:af:80:4c:99:2d:b9:a9:
c7:60:ea:21:34:89:fd:ca:70:c3:b5:51:01:3c:9d:67:2c:c3:
97:53:df:2d:3d:69:57:4b:ab:89:2f:9f:df:4e:dd:94:b3:21:
88:b2:a2:0f:cc:ff:c9:96:a4:98:cb:b3:f9:ff:b0:33:fa:1e:
65:0f:f6:01:0d:99:88:fe:27:8d:4c:0d:03:4c:c1:62:0f:d3:
65:ca:45:fe:06:69:e6:41:f0:1a:e4:e2:d5:d8:e5:36:08:b9:
f1:f1:b1:93:40:d6:db:49:87:04:03:b2:d7:f7:ed:c5:a8:43:
16:4d:f0:2f:94:3d:c7:7e:72:f8:3b:c7:ef:0b:49:3f:e6:20:
97:af:d9:f3:ed:8a:80:d8:e2:66:51:0f:2e:d5:e3:36:75:ae:
57:d4:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:18 2024 by rpki-client on console-ams.rpki-client.org