Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/fsJYMPEZZbZrG7p7ZVS31IDPXcI.roa
File: fsJYMPEZZbZrG7p7ZVS31IDPXcI.roa (raw, json)
Hash identifier: oa9pATCenA4iNteIEbvJtjANvalz9QWbXeX286lmKCQ=
Subject key identifier: 7E:C2:58:30:F1:19:65:B6:6B:1B:BA:7B:65:54:B7:D4:80:CF:5D:C2
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 01857182F751D28713A36792108E7B1288DA
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/fsJYMPEZZbZrG7p7ZVS31IDPXcI.roa
Signing time: Mon 02 Jan 2023 08:04:46 +0000
ROA not before: Mon 02 Jan 2023 08:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212041
IP address blocks: 37.153.140.0/22 maxlen: 22
31.43.186.0/23 maxlen: 23
193.169.104.0/24 maxlen: 24
2a10:c580::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:82:f7:51:d2:87:13:a3:67:92:10:8e:7b:12:88:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: Jan 2 08:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ec25830f11965b66b1bba7b6554b7d480cf5dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:93:93:7b:fc:72:e8:7d:30:b9:68:23:cb:
47:5c:a0:3b:a3:d8:2a:fb:6a:06:c2:a4:f5:1f:83:
d9:b4:10:e6:d6:d4:a0:03:bc:b9:70:4f:76:ad:a9:
03:65:d7:a2:25:4c:f1:32:4e:53:3a:ba:6e:35:ad:
99:5e:eb:59:ce:e1:71:9c:ba:3a:45:2d:04:06:de:
2b:9c:1f:3a:77:8b:50:f5:c3:7f:0a:b0:44:e9:f2:
b5:79:17:38:4c:7f:32:6d:8e:76:da:c6:f8:6d:ce:
5d:99:5b:ff:be:d7:15:aa:11:70:13:fb:14:ab:5d:
13:eb:22:5a:e7:e6:0f:cc:23:f3:93:27:04:1a:11:
74:d2:94:5e:1e:8f:44:b6:fb:28:a7:8b:11:0e:ab:
01:e7:13:d1:77:2e:7d:eb:43:1f:8f:30:2a:ec:46:
e2:46:38:8f:3f:6f:c2:58:c1:02:0c:da:78:aa:2b:
65:af:c2:82:d2:30:f8:e3:9f:9d:61:f9:be:b3:93:
9a:d9:d9:e4:39:c9:75:f3:89:00:a4:8c:b9:5c:a5:
6b:d9:4a:33:f6:b6:02:c2:28:d7:b5:51:11:f5:ee:
ff:a1:2d:b8:13:0d:80:b9:f8:af:c1:39:35:9f:02:
08:81:e2:b3:1a:51:4f:da:82:7f:9e:d6:6b:bc:76:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C2:58:30:F1:19:65:B6:6B:1B:BA:7B:65:54:B7:D4:80:CF:5D:C2
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/fsJYMPEZZbZrG7p7ZVS31IDPXcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.186.0/23
37.153.140.0/22
193.169.104.0/24
IPv6:
2a10:c580::/29
Signature Algorithm: sha256WithRSAEncryption
3e:7c:16:a2:d6:5a:7e:3e:c2:e1:f6:e8:c1:10:78:a5:70:44:
23:a7:4f:71:b6:5b:4a:c1:c4:80:3d:a1:2d:7a:95:3e:2e:43:
2d:a3:b2:6b:6a:0a:7f:3f:eb:d2:a7:77:b6:b3:a1:a0:ef:fc:
98:55:8b:a4:10:c2:2c:39:aa:da:51:45:d9:c7:7d:33:a4:ab:
ac:c0:72:1a:30:4b:7b:77:1a:20:ec:f6:5b:85:00:eb:ba:bb:
32:11:81:df:90:3b:4f:84:42:38:ae:9b:94:fc:eb:de:e2:94:
da:a3:8e:2e:73:01:d7:a8:08:31:0e:fa:86:47:5c:e0:b8:bb:
cb:3f:56:13:f3:c4:00:d2:60:ee:43:1b:f1:48:5e:50:e5:4d:
56:e6:00:a5:ed:bd:41:7d:6d:9a:d0:b4:55:ed:2c:c3:22:99:
50:26:2c:27:ec:a8:ae:df:8b:74:9e:c9:5b:45:32:5a:b6:e8:
dd:7e:92:b3:cc:2d:c6:52:b3:72:b2:c8:30:b4:72:90:73:b5:
bd:b7:79:cb:b5:3a:21:11:37:ca:ec:9c:d9:9b:e0:d9:39:3c:
c9:fd:be:c7:38:fa:d6:b2:09:b0:5d:c1:47:85:c4:dd:4b:8f:
1e:6c:fe:f8:28:2d:99:3e:69:42:aa:eb:d8:19:84:82:b7:33:
c0:dc:92:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-fra.rpki-client.org