Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/d3hmU7r18AuyYo5K1eX0PHahpto.roa
File: d3hmU7r18AuyYo5K1eX0PHahpto.roa (raw, json)
Hash identifier: RzQM4S8qTmd7g+VJxry58GdK8bQXLC38eIdCocQv6n0=
Subject key identifier: 77:78:66:53:BA:F5:F0:0B:B2:62:8E:4A:D5:E5:F4:3C:76:A1:A6:DA
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 01856C9CED19A031A91160A658504A08CD45
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/d3hmU7r18AuyYo5K1eX0PHahpto.roa
Signing time: Sun 01 Jan 2023 09:15:01 +0000
ROA not before: Sun 01 Jan 2023 09:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204369
IP address blocks: 185.137.52.0/22 maxlen: 22
185.137.52.0/23 maxlen: 23
185.137.54.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:ed:19:a0:31:a9:11:60:a6:58:50:4a:08:cd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jan 1 09:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77786653baf5f00bb2628e4ad5e5f43c76a1a6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:17:b6:b8:75:40:91:f1:c4:cc:5a:a2:c3:
8d:39:36:a5:1b:6d:86:43:d4:18:74:ad:25:57:20:
75:0f:16:ce:8a:fc:a7:f0:c1:ad:79:04:60:56:79:
64:42:ce:48:7b:86:65:61:bf:e5:d9:54:3d:19:5c:
b7:86:c5:c6:a7:ae:87:f7:76:d2:e7:5a:2c:b1:89:
d4:b5:91:67:87:b3:82:a8:ab:8a:07:0c:94:5e:b2:
39:70:e2:80:4e:9b:b0:99:df:85:42:69:ea:e5:aa:
cb:23:18:33:8b:75:00:3e:96:28:75:8b:85:4f:f7:
d8:cb:e9:32:e6:1d:a9:d3:ee:27:fe:39:4c:8c:31:
bc:29:69:47:f7:a6:e4:74:32:e6:86:7b:ec:28:0d:
52:f5:a9:e5:7d:28:5c:37:7f:cf:42:ca:09:11:43:
b9:17:00:70:73:e0:d8:0f:95:33:1d:b4:78:47:2b:
47:07:04:d5:48:df:a3:eb:22:90:dc:a5:51:a0:98:
45:8a:0b:4f:b9:0b:3b:97:a4:06:d8:e4:61:eb:da:
0c:63:d4:f3:74:ef:02:96:de:f6:f0:2d:83:45:e7:
b5:17:69:6e:f8:e1:a0:e8:1c:86:0a:25:7f:f8:66:
ca:32:40:df:32:19:bf:90:c5:74:60:a5:a9:b8:93:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:78:66:53:BA:F5:F0:0B:B2:62:8E:4A:D5:E5:F4:3C:76:A1:A6:DA
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/d3hmU7r18AuyYo5K1eX0PHahpto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:54:3a:ee:bf:97:35:77:8b:26:41:b4:12:6a:89:a9:71:b2:
e1:90:74:6c:94:f4:a4:f1:03:af:d3:b3:39:8d:01:d7:b1:ff:
02:06:32:b8:0e:01:61:5a:40:a8:a2:3f:42:ae:b9:95:2a:d8:
cc:d8:62:1c:d3:73:c6:b6:97:e8:ec:34:aa:de:b2:b4:8c:c3:
4d:8b:af:be:89:db:ec:86:63:c0:21:ad:23:10:0e:b5:75:b9:
8c:41:b2:9d:1d:fd:b8:c2:f3:46:f6:6a:8e:53:fd:51:88:8a:
42:b0:1d:a1:45:ac:27:af:af:1a:aa:6e:04:c0:1f:e5:7c:71:
1d:59:8f:f3:7a:7e:25:9e:5c:61:38:4d:de:a0:4a:31:8c:b4:
5d:81:2f:31:40:03:db:2a:a6:a2:9f:94:a2:91:a8:33:1d:8e:
ff:0f:25:7f:ed:4a:c0:39:83:f2:5f:c6:a8:5e:11:e7:d6:f0:
ed:b6:d6:85:3a:cf:94:ca:fc:48:8e:60:d7:4c:66:cc:aa:f3:
4d:74:32:27:e9:b5:f8:ed:41:f3:ea:c6:e6:9c:6f:52:39:ac:
e7:33:5d:5b:37:86:7e:28:04:2f:ef:0a:3b:e1:56:7d:70:63:
85:c8:8d:6d:09:4c:cc:33:40:c6:73:00:9e:b1:0b:92:bc:49:
a4:6e:8e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:27 2024 by rpki-client on console-fra.rpki-client.org