Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/WaqdQpCFcrV39cPdhzgq7Oedqe4.roa
File: WaqdQpCFcrV39cPdhzgq7Oedqe4.roa (raw, json)
Hash identifier: lfx2MkjFBIywKsNr0v+n9PStMLt/yw384/2c6B+UYRc=
Subject key identifier: 59:AA:9D:42:90:85:72:B5:77:F5:C3:DD:87:38:2A:EC:E7:9D:A9:EE
Certificate issuer: /CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Certificate serial: 01892589BBBEA1E5BFBE849AEB9055D97D58
Authority key identifier: F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/WaqdQpCFcrV39cPdhzgq7Oedqe4.roa
Signing time: Wed 05 Jul 2023 10:12:10 +0000
ROA not before: Wed 05 Jul 2023 10:12:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42525
IP address blocks: 37.25.64.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:89:bb:be:a1:e5:bf:be:84:9a:eb:90:55:d9:7d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Validity
Not Before: Jul 5 10:12:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59aa9d42908572b577f5c3dd87382aece79da9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:be:2d:52:26:63:81:f5:80:44:15:09:1b:
27:8b:db:4c:38:6e:b6:48:b7:4e:7d:ac:9d:b2:36:
a2:0f:b4:75:de:02:72:57:15:99:e0:ae:a8:5a:b6:
4e:59:a8:23:50:bc:6a:4d:7d:53:82:22:48:2a:70:
0b:63:80:dd:7a:fb:6d:94:f8:fd:1b:a5:7b:79:dc:
31:9b:05:cd:57:3f:dc:4f:58:f6:ea:0b:c0:61:dc:
0c:04:b1:b1:1f:96:e6:88:d0:09:2e:64:43:d1:6e:
c9:a4:b9:e3:2d:dc:ab:40:98:ed:79:10:f0:da:7e:
e7:cf:a8:58:4c:71:97:35:c5:fb:cb:71:e3:0c:e9:
ca:fb:7f:e2:d9:90:35:7c:6a:bf:8a:46:a1:19:19:
88:38:2f:7b:fa:72:3e:f8:26:6a:05:5b:10:df:3d:
99:5b:d6:ac:32:98:ce:81:a9:3d:e1:4b:00:b1:0a:
6b:22:38:c3:ee:8a:19:3a:e4:f2:15:f6:81:40:f3:
45:98:15:b7:5a:d7:6e:eb:88:de:0c:60:f8:18:0d:
8d:03:6b:8e:b3:04:91:dc:07:ec:36:00:a8:87:27:
ec:97:e7:31:43:de:8e:24:fa:20:82:e4:15:24:a4:
5a:17:a6:39:2b:5a:53:66:91:50:2e:6f:4e:c5:6c:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AA:9D:42:90:85:72:B5:77:F5:C3:DD:87:38:2A:EC:E7:9D:A9:EE
X509v3 Authority Key Identifier:
keyid:F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/WaqdQpCFcrV39cPdhzgq7Oedqe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.64.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:85:34:69:f3:a4:6d:22:74:c0:7a:c6:a1:90:c2:0d:02:22:
2a:79:3c:44:39:4b:98:dd:1b:a6:4c:29:37:4e:bd:4b:e4:d8:
e0:cd:5a:8e:8e:89:fd:18:84:82:b9:7d:ad:6d:17:9d:8c:66:
1c:37:68:90:44:4f:f3:83:16:24:7d:48:ea:6b:75:86:49:38:
43:9c:6d:8f:1f:35:20:dd:c8:bf:57:46:9c:91:36:38:50:03:
14:18:1c:98:88:92:49:ad:16:58:d6:80:af:0f:d2:8a:b5:b7:
5a:8f:ce:17:6a:ef:fc:4c:39:66:9f:fa:02:28:29:75:a5:36:
e4:0c:00:f6:32:2a:38:a5:ac:c1:72:ce:02:c8:3d:10:3b:1a:
fd:c7:f6:c8:16:70:63:12:6b:91:d5:d3:e6:02:1f:97:9f:37:
33:80:5c:96:8b:2a:c7:8e:ee:f6:cf:24:3a:fb:c5:91:a8:9b:
25:11:c6:ca:5b:65:ef:28:12:1d:b5:75:36:b6:dd:da:34:c8:
ab:73:cd:96:d9:11:46:81:cc:78:84:cf:ab:a1:19:7f:e4:b3:
35:0c:e8:ba:6c:1f:4a:65:95:03:56:d4:29:af:1e:ba:62:64:
fe:6a:67:e6:1b:dd:4b:70:c1:e3:1c:45:a1:86:14:63:7c:0e:
c0:de:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:51 2024 by rpki-client on console-ams.rpki-client.org