Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/xwCRUU-xfqLxE1FiLMbwr008cgw.roa
File: xwCRUU-xfqLxE1FiLMbwr008cgw.roa (raw, json)
Hash identifier: VGq/J1PVNo6kZHQuuBI3TTKS1y1zAnhGPEEIaN2RiXE=
Subject key identifier: C7:00:91:51:4F:B1:7E:A2:F1:13:51:62:2C:C6:F0:AF:4D:3C:72:0C
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 01856F1D96512A59F58582085966323E3CC5
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/xwCRUU-xfqLxE1FiLMbwr008cgw.roa
Signing time: Sun 01 Jan 2023 20:54:48 +0000
ROA not before: Sun 01 Jan 2023 20:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 37.140.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Dec 2023 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:96:51:2a:59:f5:85:82:08:59:66:32:3e:3c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Jan 1 20:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c70091514fb17ea2f11351622cc6f0af4d3c720c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4a:69:12:5a:4a:0b:76:3f:58:67:ee:7c:39:
b7:62:13:99:6b:1c:e9:ec:09:11:20:a7:99:8e:70:
29:3d:54:b2:49:c6:7e:8e:72:18:c3:6a:6b:e0:e3:
45:8d:ae:39:30:6b:e3:35:72:60:6b:67:c3:8e:47:
2d:0c:58:6a:53:62:8a:9c:9f:6d:74:33:85:4f:f8:
17:a1:0d:ac:b3:32:bb:45:cd:32:e9:74:51:ad:27:
9e:6a:84:86:3e:ea:a0:30:1b:7d:33:f8:cb:a8:f8:
1d:c2:76:57:b2:5a:69:dd:23:7d:ea:8a:97:6a:34:
4f:44:83:57:b7:c8:c9:c6:34:5e:96:63:0a:7b:41:
3a:3c:4b:48:89:cf:9c:dc:88:ae:dd:29:a2:02:af:
54:2e:21:44:a6:54:b5:0a:63:cb:9d:ef:0a:9a:d0:
83:05:cb:57:bc:25:6c:85:72:81:d1:69:cc:3e:b2:
54:df:6c:9a:35:e0:72:84:63:39:95:15:2c:3d:f1:
f7:2d:0b:b1:3f:4b:35:e1:84:52:5e:89:03:1b:d2:
93:36:31:72:45:db:dd:5c:5e:bc:25:38:fb:05:9d:
59:81:c0:d2:63:56:44:e5:aa:7c:4f:e1:16:6b:c0:
41:4e:b3:87:3b:23:b7:7d:54:d9:1b:80:90:f6:b2:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:00:91:51:4F:B1:7E:A2:F1:13:51:62:2C:C6:F0:AF:4D:3C:72:0C
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/xwCRUU-xfqLxE1FiLMbwr008cgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.254.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ca:eb:69:c2:57:53:42:89:03:74:3a:d4:81:9f:16:e7:11:
8c:61:36:f6:20:72:aa:4b:84:4c:56:89:2c:0b:48:0e:b6:cb:
fd:13:47:18:db:cc:05:25:e8:71:46:e2:01:42:d3:50:ef:cf:
1b:87:fa:5d:ec:a0:dd:52:87:17:16:ec:f5:88:79:0f:af:6a:
94:cc:9a:8f:0f:a9:34:8c:3d:7c:35:4f:d7:29:7b:38:50:ec:
46:9a:6c:18:12:b0:2e:1d:37:29:2f:f7:ca:70:01:ff:5e:f0:
a4:9d:fe:7e:99:ff:fb:2c:72:dd:36:ab:0b:0b:19:ad:34:28:
12:8c:f1:a0:c8:9e:d5:fa:c4:d7:47:e2:8c:3e:9d:df:cd:33:
58:bf:99:71:13:38:f2:0e:17:9d:83:d8:aa:2c:35:ff:aa:d6:
f0:13:61:28:60:96:c8:99:f9:b9:4f:83:41:eb:ba:52:77:0b:
d2:bc:d4:cb:5e:5a:94:78:17:0c:a1:d5:c6:3a:40:98:db:f6:
0a:01:6b:00:4a:9f:28:37:60:45:fe:f4:c6:af:76:48:47:9a:
e4:a8:0a:d4:b9:cf:c2:9f:a5:12:7f:15:0b:c6:0d:d4:38:a0:
b9:88:c0:e4:58:78:cb:c0:fc:eb:57:c7:b8:6a:d7:ad:03:eb:
ac:a5:ac:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvHZZRKln1hYIIWWYyPjzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm
NGQ5ZTAwHhcNMjMwMTAxMjA1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzAwOTE1MTRmYjE3ZWEyZjExMzUxNjIyY2M2ZjBhZjRkM2M3MjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kppElpKC3Y/WGfufDm3YhOZaxzp
7AkRIKeZjnApPVSyScZ+jnIYw2pr4ONFja45MGvjNXJga2fDjkctDFhqU2KKnJ9t
dDOFT/gXoQ2sszK7Rc0y6XRRrSeeaoSGPuqgMBt9M/jLqPgdwnZXslpp3SN96oqX
ajRPRINXt8jJxjRelmMKe0E6PEtIic+c3Iiu3SmiAq9ULiFEplS1CmPLne8KmtCD
BctXvCVshXKB0WnMPrJU32yaNeByhGM5lRUsPfH3LQuxP0s14YRSXokDG9KTNjFy
RdvdXF68JTj7BZ1ZgcDSY1ZE5ap8T+EWa8BBTrOHOyO3fVTZG4CQ9rKsIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMcAkVFPsX6i8RNRYizG8K9NPHIMMB8GA1UdIwQY
MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt
ZTljOTEzMjgzNmZmLzEveHdDUlVVLXhmcUx4RTFGaUxNYndyMDA4Y2d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm
LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYz+MA0G
CSqGSIb3DQEBCwUAA4IBAQAVyutpwldTQokDdDrUgZ8W5xGMYTb2IHKqS4RMVoks
C0gOtsv9E0cY28wFJehxRuIBQtNQ788bh/pd7KDdUocXFuz1iHkPr2qUzJqPD6k0
jD18NU/XKXs4UOxGmmwYErAuHTcpL/fKcAH/XvCknf5+mf/7LHLdNqsLCxmtNCgS
jPGgyJ7V+sTXR+KMPp3fzTNYv5lxEzjyDhedg9iqLDX/qtbwE2EoYJbImfm5T4NB
67pSdwvSvNTLXlqUeBcModXGOkCY2/YKAWsASp8oN2BF/vTGr3ZIR5rkqArUuc/C
n6USfxULxg3UOKC5iMDkWHjLwPzrV8e4atetA+uspayx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:38 2024 by rpki-client on console-fra.rpki-client.org