Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RT6cmNrIp2lWWUAbmb6LBgwnph0.roa
File: RT6cmNrIp2lWWUAbmb6LBgwnph0.roa (raw, json)
Hash identifier: GktPQMhgamQozh1fb8o7KSF2WMzMQDs/uN6MnvFKl8w=
Subject key identifier: 45:3E:9C:98:DA:C8:A7:69:56:59:40:1B:99:BE:8B:06:0C:27:A6:1D
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CE8D2ABBA861598F909182525C1D8
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RT6cmNrIp2lWWUAbmb6LBgwnph0.roa
Signing time: Mon 02 Jan 2023 03:36:00 +0000
ROA not before: Mon 02 Jan 2023 03:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206835
IP address blocks: 37.79.229.0/24 maxlen: 24
37.79.230.0/24 maxlen: 24
37.79.227.0/24 maxlen: 24
37.79.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e8:d2:ab:ba:86:15:98:f9:09:18:25:25:c1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=453e9c98dac8a7695659401b99be8b060c27a61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:9b:e4:47:71:2c:c8:53:f7:bd:fb:3c:00:
aa:55:9a:75:51:72:3a:35:4a:50:f0:b5:4b:6e:6d:
03:32:ef:d4:ca:86:81:7c:d6:52:3e:0c:dc:ca:95:
e7:a6:85:ca:52:a7:6c:23:20:39:b2:19:83:88:e4:
cd:0b:50:dd:1d:57:d8:7c:47:6f:19:6e:9a:4c:ee:
86:44:9c:7f:13:11:e9:15:00:4c:1e:9c:63:04:f8:
cf:34:28:21:30:98:7b:aa:bb:3b:06:5d:a9:ed:4e:
03:a9:f5:e6:66:b7:78:bd:41:34:33:83:3a:0b:9a:
a4:20:88:44:34:c1:92:ba:aa:b7:1a:cd:06:e1:32:
10:f0:da:87:0a:0b:08:f9:2c:b8:df:d3:8e:74:11:
3a:85:76:cb:ec:00:8a:53:94:55:0a:d1:28:95:f2:
0a:18:4c:c6:5a:3e:47:a5:a6:8d:0f:ff:6f:2d:67:
66:11:5d:26:3f:3b:64:7f:84:fc:c1:f6:7e:ed:ad:
7e:84:44:76:44:d2:e6:be:70:59:4a:47:4b:df:53:
df:ba:f8:6b:77:fe:c7:1f:b4:77:97:52:7f:a8:4f:
34:34:cc:9c:59:9b:7c:a9:91:a2:61:ce:59:a5:66:
fb:99:81:7b:eb:32:f7:e0:6d:3c:7a:2c:5b:7e:65:
12:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3E:9C:98:DA:C8:A7:69:56:59:40:1B:99:BE:8B:06:0C:27:A6:1D
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RT6cmNrIp2lWWUAbmb6LBgwnph0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.79.227.0-37.79.230.255
Signature Algorithm: sha256WithRSAEncryption
18:e3:aa:62:26:96:d2:0c:7f:51:4d:40:d9:9e:d1:54:98:8b:
73:9b:c2:22:7d:77:42:f2:2b:12:04:fd:34:63:1a:33:c9:94:
89:82:01:69:ed:64:41:57:b8:0f:84:4f:cc:ff:cc:d0:cd:d4:
86:9f:a0:cc:a8:8f:c2:7e:fd:28:5a:29:9f:7e:34:af:9b:47:
00:82:f5:5b:0e:86:9c:79:e4:69:13:96:6d:7c:84:02:1b:19:
87:5b:4b:5e:09:d8:14:4b:a1:7c:c1:4b:82:bf:47:62:65:07:
23:60:c8:70:fc:8a:f1:fc:bb:a9:ba:38:20:78:09:be:6d:4f:
58:54:ab:62:2b:c0:2a:20:17:85:6e:43:9a:1d:29:1e:a2:73:
c7:5d:f8:b8:5f:bd:83:43:e3:57:4b:d3:de:3a:de:88:a3:88:
78:61:aa:04:92:3a:10:3b:75:47:35:84:fd:ac:d6:96:06:39:
af:51:25:45:fb:c2:ad:f5:d4:d0:bf:87:05:28:7a:ed:4c:fe:
9f:45:fd:0a:ba:c9:29:bb:94:54:aa:83:cc:1d:c8:44:75:6f:
10:2f:2d:0e:e0:a1:56:68:d9:82:fb:c9:16:bd:56:c7:59:cd:
c3:71:cf:a1:65:df:bd:3a:7e:42:a2:9b:08:74:b9:2f:9a:bb:
22:28:69:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:25 2024 by rpki-client on console-ams.rpki-client.org