Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/Arr6RiRnxvw3Lz5KDgRlxsMQ-UQ.roa
File: Arr6RiRnxvw3Lz5KDgRlxsMQ-UQ.roa (raw, json)
Hash identifier: q3ekVmBpPw2bnYqfYWjq8YD1kejuv9qxT8tZnFKM3do=
Subject key identifier: 02:BA:FA:46:24:67:C6:FC:37:2F:3E:4A:0E:04:65:C6:C3:10:F9:44
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 01856EA6B4F830D24B3D1DA1A665A2CBE314
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/Arr6RiRnxvw3Lz5KDgRlxsMQ-UQ.roa
Signing time: Sun 01 Jan 2023 18:44:56 +0000
ROA not before: Sun 01 Jan 2023 18:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207290
IP address blocks: 37.44.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:b4:f8:30:d2:4b:3d:1d:a1:a6:65:a2:cb:e3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Jan 1 18:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02bafa462467c6fc372f3e4a0e0465c6c310f944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e8:86:06:ad:2f:4b:07:8c:ea:12:2e:e3:cc:
e3:75:3e:b3:ef:b6:05:c6:66:da:bd:d3:96:56:90:
fe:01:f0:2d:45:39:c8:48:f0:39:16:53:58:e1:06:
1c:f7:56:d0:22:8e:f3:23:51:4e:31:e2:57:e0:31:
12:0d:e6:0a:e5:14:45:7d:8b:02:9a:93:ee:61:07:
76:ab:c2:7f:1b:c4:6f:d0:c6:0b:1d:58:ec:a6:7d:
f4:81:1e:f2:e4:6a:07:25:ab:61:fe:5b:3f:a6:67:
a0:fe:b7:6c:df:b3:25:85:71:c4:fc:02:1f:3d:64:
84:ad:fa:28:1d:fe:b9:70:90:e0:4b:19:d8:57:e6:
dd:6b:4e:4a:60:0a:c4:21:de:9c:62:6e:70:07:87:
fd:b4:49:4a:9f:69:b3:54:ba:5c:aa:7b:2d:e8:53:
4e:77:ad:78:ad:d2:9d:79:02:49:cb:96:e2:ff:e1:
c4:4c:ef:e0:45:b5:3c:fb:e4:91:1e:85:45:4c:ea:
51:e8:ed:02:30:17:78:96:32:e7:07:fd:57:6d:88:
46:76:76:64:ec:58:b3:f3:be:77:57:7d:26:fc:82:
6b:d7:82:69:2c:08:8a:26:94:dc:e8:e8:c2:81:bb:
35:3b:90:c0:2c:c4:6c:2d:4c:03:f8:e6:dc:b3:18:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BA:FA:46:24:67:C6:FC:37:2F:3E:4A:0E:04:65:C6:C3:10:F9:44
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/Arr6RiRnxvw3Lz5KDgRlxsMQ-UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.240.0/22
Signature Algorithm: sha256WithRSAEncryption
00:e1:0f:95:4a:51:ec:13:3b:19:9d:bd:0c:d1:46:0a:cf:94:
5c:90:a3:5d:b2:5c:c1:43:62:d5:7c:94:38:ff:68:7b:8f:a3:
95:52:1b:b0:4b:a6:20:ba:61:ab:3b:3c:f4:e7:ee:78:79:5a:
c5:df:e3:76:97:03:ba:c5:15:d6:cf:5a:81:c5:52:5a:40:4b:
a9:66:4c:9c:ca:63:5d:73:8e:34:d8:09:3a:12:ce:c3:3f:b8:
b7:ae:4f:19:b0:60:a7:b9:97:f4:d7:4b:fc:4f:15:58:58:77:
43:ea:9b:df:36:fc:a6:c6:83:a1:ba:34:2e:a9:8b:d6:7f:eb:
5c:0c:e0:ee:6f:f9:f5:9b:71:d6:4f:d3:0e:ca:02:a7:6e:ca:
a6:3d:07:e1:10:8b:25:ea:80:a1:64:04:8a:de:0b:ab:65:57:
f4:b5:df:a0:63:80:f0:06:54:22:d1:23:e3:97:16:c4:81:0a:
0d:2e:01:ba:70:d6:64:e7:01:28:a5:a4:b4:09:a8:f5:3f:0a:
2d:54:b2:d9:90:49:db:54:3b:20:64:1c:4a:ae:ae:25:b1:48:
2f:83:cb:5f:e9:ee:d2:27:98:c7:d1:5d:c1:e0:b2:3a:79:75:
4c:d6:8d:46:ec:84:38:f3:62:69:d7:79:bc:9a:30:d7:ee:d1:
35:1e:ce:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:36 2024 by rpki-client on console-ams.rpki-client.org