Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/LOdd_XFuvKEcMTFWMAAWmzuAVfM.roa
File: LOdd_XFuvKEcMTFWMAAWmzuAVfM.roa (raw, json)
Hash identifier: Um4Z9hCri4dO514ntdPBQpw9nVE2p290ed+J8/BpChY=
Subject key identifier: 2C:E7:5D:FD:71:6E:BC:A1:1C:31:31:56:30:00:16:9B:3B:80:55:F3
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 018572E81F01733D01C19822566417E162DB
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/LOdd_XFuvKEcMTFWMAAWmzuAVfM.roa
Signing time: Mon 02 Jan 2023 14:34:52 +0000
ROA not before: Mon 02 Jan 2023 14:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202757
IP address blocks: 37.221.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:1f:01:73:3d:01:c1:98:22:56:64:17:e1:62:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Jan 2 14:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ce75dfd716ebca11c3131563000169b3b8055f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:7a:c6:0a:f3:c6:17:b2:d5:30:c1:6b:87:
be:9c:b3:d5:13:12:bd:a4:ac:ea:00:fe:bf:ea:54:
4c:55:6c:7e:b1:8e:27:6e:70:71:d5:a0:45:00:d4:
ce:5e:d4:11:5b:b6:cc:cc:fd:61:1a:be:cc:03:7b:
b2:2b:b0:79:48:d8:bd:88:75:3c:16:cc:35:81:82:
df:a4:c1:86:e4:ad:ab:6d:a8:ae:f2:f9:19:48:a0:
08:a7:49:8d:d9:89:56:4a:6e:09:42:a6:e9:5f:ba:
c4:4d:e1:40:a3:a6:a1:c5:08:4b:dd:04:2a:64:f4:
54:52:66:02:9f:8d:14:47:72:84:41:0d:f1:0f:3e:
57:74:54:ea:8d:11:16:ec:11:78:1f:88:49:2a:80:
85:c7:71:36:08:48:a3:27:73:c4:47:dc:60:eb:c2:
69:a2:2c:61:ff:9e:93:27:75:79:6a:36:8c:8b:41:
2a:37:b0:0c:36:b4:4a:d7:56:a0:0b:cf:52:7c:a4:
ff:f7:a9:65:b2:b9:ec:91:be:9e:22:11:49:29:04:
2d:1c:86:8f:a4:0f:f7:02:ef:d5:c5:85:e5:6a:c1:
06:5f:3f:8e:91:dd:0c:fd:bd:41:84:3e:ad:45:dd:
2c:0b:bb:05:55:65:6c:f5:9b:22:76:70:be:b3:cb:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E7:5D:FD:71:6E:BC:A1:1C:31:31:56:30:00:16:9B:3B:80:55:F3
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/LOdd_XFuvKEcMTFWMAAWmzuAVfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:db:0f:43:3f:b6:61:c7:50:ee:44:92:82:ab:b3:6f:7a:eb:
60:e7:76:ef:30:60:62:a5:04:40:cb:7d:83:df:f5:d7:18:43:
3e:64:bf:02:6b:4d:7c:60:77:d7:fb:19:53:88:c2:0c:50:12:
74:c5:ef:f3:66:a1:3f:16:b9:06:5c:2b:0f:39:76:4d:98:30:
c8:fb:ff:d0:69:6a:09:74:31:36:d8:95:ad:d8:f1:94:53:72:
01:27:fa:b6:5f:e6:11:9b:83:5a:9a:3b:0d:d6:06:62:7b:05:
aa:dc:d7:88:e2:1f:db:b5:5e:2d:d7:1c:eb:a6:3c:08:94:c5:
23:9d:3e:5b:73:de:6e:4a:9c:dd:65:d2:21:9d:8e:e6:b7:66:
bc:2a:65:7b:72:ca:b3:ab:e9:49:64:29:07:04:9d:a8:d3:c0:
c9:88:8e:a5:f0:95:25:a3:07:89:63:ac:4b:e6:f1:02:4b:49:
ba:b6:f3:6f:9d:0a:49:49:8f:94:e3:57:a3:c6:85:02:2e:44:
17:72:89:10:43:cb:dd:34:2e:b6:e5:f4:bc:aa:fa:7d:cf:13:
44:c0:c8:85:a2:84:57:c0:5d:66:15:8f:fb:23:0b:05:9d:3a:
db:9f:06:d1:fc:ec:32:3e:8e:b2:48:12:05:64:c5:96:af:f5:
e3:c0:cd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:05 2024 by rpki-client on console-fra.rpki-client.org