Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/kxVZgzpCmIyqqX_e3nAYGjgppLk.roa
File: kxVZgzpCmIyqqX_e3nAYGjgppLk.roa (raw, json)
Hash identifier: 1tgMFJ3jpY2l6AP3VFhLblTxDybaPDVvPbayuoSFWBg=
Subject key identifier: 93:15:59:83:3A:42:98:8C:AA:A9:7F:DE:DE:70:18:1A:38:29:A4:B9
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 01865594618512604ADD4B068C66F2700B00
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/kxVZgzpCmIyqqX_e3nAYGjgppLk.roa
Signing time: Wed 15 Feb 2023 14:57:13 +0000
ROA not before: Wed 15 Feb 2023 14:57:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42521
IP address blocks: 37.230.201.0/24 maxlen: 24
212.86.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Feb 2023 06:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:94:61:85:12:60:4a:dd:4b:06:8c:66:f2:70:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Feb 15 14:57:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=931559833a42988caaa97fdede70181a3829a4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:4e:ff:51:64:f1:44:7b:35:cc:ba:e5:e4:
32:de:06:5a:fc:5c:22:e2:f9:6f:dc:28:30:dc:6c:
bc:05:2a:b2:ba:cc:d2:b7:f2:2f:08:d2:90:f1:b6:
9d:df:37:fc:79:c5:1f:23:43:43:11:b0:16:02:7f:
44:e4:1c:2b:c4:97:49:11:2e:78:c3:80:33:fa:3c:
a8:92:3a:cb:4a:78:74:09:0e:c8:91:dd:65:3e:0b:
cb:51:fe:13:a2:bc:b1:67:e7:0b:16:0a:db:c7:26:
84:5c:6a:6f:d7:1d:ef:6a:1c:85:4f:f5:1d:ff:3a:
a9:4c:98:dd:89:a0:81:f4:ca:2b:a3:d5:b3:c3:35:
74:86:bd:72:38:bb:97:88:c0:de:59:05:55:17:14:
8f:33:d3:57:41:bb:57:17:9e:68:6b:3f:0f:57:fd:
8b:a6:b4:74:75:2f:da:13:b9:c7:d6:ee:f6:e0:8b:
17:59:17:6f:6a:f3:f2:e6:96:4e:88:ab:3c:cd:2e:
23:1d:05:60:06:1a:4f:68:c7:87:9e:1b:8e:5f:26:
2b:5a:f1:71:6f:53:53:5b:cf:3e:4b:b3:8f:85:ff:
34:d0:1c:cc:23:ea:84:13:c0:89:d0:a0:ff:6b:1f:
e3:5f:c5:e2:bd:4e:48:1e:75:4a:0c:32:cc:cb:16:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:15:59:83:3A:42:98:8C:AA:A9:7F:DE:DE:70:18:1A:38:29:A4:B9
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/kxVZgzpCmIyqqX_e3nAYGjgppLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.201.0/24
212.86.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ba:77:e5:e1:b3:81:9d:44:6d:d3:7b:63:44:e6:0a:7b:c9:
1d:ea:15:a3:13:1e:e5:d1:ef:18:b0:13:f2:74:31:84:18:c9:
d2:d3:54:37:7d:f1:f5:5b:32:b7:ae:a0:f1:5b:f8:42:35:35:
22:bc:55:6a:e7:aa:4b:6d:63:f5:bd:11:1f:be:ec:17:f2:be:
f3:d2:7b:94:08:18:97:04:74:6f:e3:35:ee:e3:e5:3a:20:73:
50:4a:93:e9:af:f1:fb:af:44:e1:63:b0:43:5b:8c:88:71:6c:
fa:ef:84:da:21:e5:b1:25:65:e2:fa:3b:94:ec:f3:70:ca:c5:
9e:a2:18:22:27:0f:79:d7:f6:84:99:48:1d:27:88:f2:94:ce:
42:ab:e8:83:9f:1e:03:75:7c:b8:59:cb:a5:2d:c2:4e:1d:fd:
40:f7:28:9d:c4:03:cb:0a:1e:58:8b:0a:91:1e:5a:75:dd:e3:
84:3f:5b:c6:05:5b:e9:bb:63:02:03:9c:5a:23:ca:c7:18:0d:
14:c9:66:b6:82:d2:33:04:4b:e6:fd:15:70:55:36:23:58:6b:
85:d2:c3:70:c1:92:e1:af:2c:49:d6:78:a4:4d:46:02:b9:a9:
4d:0a:15:68:36:8a:bc:b0:60:c8:8c:57:3a:13:10:cb:51:e9:
53:a5:96:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:26 2024 by rpki-client on console-ams.rpki-client.org