Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/_1cJsrFpYUgeP3pN-ZMqlrx5ANY.roa
File: _1cJsrFpYUgeP3pN-ZMqlrx5ANY.roa (raw, json)
Hash identifier: QoqTgPcgZHNVRM2f2Wq2Sa3Ccj0Xn9hXL/yNc1dobQs=
Subject key identifier: FF:57:09:B2:B1:69:61:48:1E:3F:7A:4D:F9:93:2A:96:BC:79:00:D6
Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial: 018571BA1CAE4C2AEB035A7F9D726F92E723
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/_1cJsrFpYUgeP3pN-ZMqlrx5ANY.roa
Signing time: Mon 02 Jan 2023 09:05:00 +0000
ROA not before: Mon 02 Jan 2023 09:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60341
IP address blocks: 37.140.252.0/24 maxlen: 24
185.200.132.0/22 maxlen: 22
185.200.132.0/24 maxlen: 24
185.200.132.0/23 maxlen: 23
185.200.133.0/24 maxlen: 24
185.200.135.0/24 maxlen: 24
185.200.134.0/23 maxlen: 23
185.200.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:1c:ae:4c:2a:eb:03:5a:7f:9d:72:6f:92:e7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Validity
Not Before: Jan 2 09:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff5709b2b16961481e3f7a4df9932a96bc7900d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:98:84:ad:9a:25:21:15:ba:91:af:fb:03:
90:36:e8:91:6e:18:c0:a8:d1:a4:b8:69:ec:81:56:
40:8d:e2:c3:ae:ff:53:1e:14:ee:b8:ea:d2:b7:73:
89:67:9f:73:55:88:33:11:84:48:d0:80:67:2c:4e:
65:ed:ba:40:c6:64:87:f7:36:53:4d:14:03:bb:1a:
92:08:5c:84:ec:f9:06:e6:18:ed:45:47:88:c6:d1:
f1:ea:b5:40:f0:8a:18:5e:e5:3d:d7:01:63:95:ce:
73:5f:54:46:b0:f8:77:90:84:5a:16:47:61:bd:0f:
49:d3:d8:8b:4a:55:0b:2b:54:dd:eb:65:17:88:32:
32:2a:dd:51:15:bf:a0:12:b0:77:30:b4:2a:7b:e3:
da:2d:eb:59:18:44:d6:ea:41:16:25:3a:c5:c2:6d:
b4:eb:cb:78:d5:db:88:e6:f7:d1:7a:e8:ad:0c:e8:
2b:6f:80:88:42:ac:ed:28:98:99:0f:61:32:a0:81:
a5:82:dd:bc:92:b2:f4:07:d7:f6:7e:80:91:a7:e9:
75:10:ce:1a:02:ab:f2:16:91:bb:d9:50:4a:04:f8:
69:ce:e0:d0:54:f7:b3:aa:a8:89:e3:65:80:0e:35:
af:a9:e8:7c:3c:9a:f9:fc:ca:3a:f7:bd:51:9e:1a:
c5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:57:09:B2:B1:69:61:48:1E:3F:7A:4D:F9:93:2A:96:BC:79:00:D6
X509v3 Authority Key Identifier:
keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/_1cJsrFpYUgeP3pN-ZMqlrx5ANY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.252.0/24
185.200.132.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:e4:d3:c4:4a:bf:31:64:d9:4a:bb:26:b9:5b:f5:e9:0c:c8:
16:47:bb:90:76:15:ba:56:d2:b3:69:85:20:4a:c5:9f:28:9c:
25:0c:29:55:3a:dd:c5:50:3d:99:f1:b5:bb:b2:29:2f:b7:fc:
2a:1d:3e:73:47:9d:04:2d:5f:77:ab:63:33:5a:4d:a8:6c:51:
ed:2c:f2:93:00:b7:df:c7:6f:46:17:f3:f6:9d:e9:92:95:01:
01:c7:d9:ec:c7:4a:d3:f1:0b:65:45:d6:95:f1:74:dc:0a:d3:
a9:b3:f2:0b:67:e6:96:82:f4:61:23:3b:da:d5:d4:81:b4:87:
6f:47:47:cc:45:e3:32:e8:5c:31:37:e4:f5:5e:1e:79:52:a0:
aa:73:86:81:d6:32:fd:d3:42:89:dd:a4:f0:c1:07:88:37:fa:
92:64:1d:5f:66:d3:33:14:24:43:80:1f:8e:a7:19:14:03:d0:
4b:53:d2:37:61:88:8e:fd:e0:75:e0:78:44:a6:1d:a9:39:09:
e0:8e:0c:39:ef:3f:2c:dd:4a:74:9c:4a:4e:70:12:90:cb:0d:
ab:74:32:0c:08:49:c1:1b:57:66:8f:65:dc:2b:cd:1f:2f:f5:
ef:e6:4b:ed:c1:ae:3d:c5:a7:9f:b7:c9:95:f2:99:01:f4:87:
41:d9:b0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:37 2024 by rpki-client on console-ams.rpki-client.org