Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/fuh-NuLsJLDHZ92eTZRspLXNi08.roa
File: fuh-NuLsJLDHZ92eTZRspLXNi08.roa (raw, json)
Hash identifier: ZZ5HB+I1TYgVFrPmluyQ9TijtsthnEJZgRVqbLtwQwg=
Subject key identifier: 7E:E8:7E:36:E2:EC:24:B0:C7:67:DD:9E:4D:94:6C:A4:B5:CD:8B:4F
Certificate issuer: /CN=cafd3133df47ce2bb07c472fbe6bb4e9178c6233
Certificate serial: 01856F38F5872FD9E024E237974E71712ADA
Authority key identifier: CA:FD:31:33:DF:47:CE:2B:B0:7C:47:2F:BE:6B:B4:E9:17:8C:62:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yv0xM99HziuwfEcvvmu06ReMYjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/fuh-NuLsJLDHZ92eTZRspLXNi08.roa
Signing time: Sun 01 Jan 2023 21:24:41 +0000
ROA not before: Sun 01 Jan 2023 21:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3561
IP address blocks: 37.72.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:38:f5:87:2f:d9:e0:24:e2:37:97:4e:71:71:2a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafd3133df47ce2bb07c472fbe6bb4e9178c6233
Validity
Not Before: Jan 1 21:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ee87e36e2ec24b0c767dd9e4d946ca4b5cd8b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:d9:95:a5:e7:42:cc:aa:33:69:84:0d:27:
a4:ef:df:42:34:98:a5:ae:52:9c:67:6d:97:c9:b0:
67:6f:a3:42:5f:c4:5c:ee:d6:57:15:11:f2:c3:69:
56:86:5f:7d:15:34:41:22:d6:a4:ad:7d:d4:b0:4a:
06:e6:c7:4b:43:cb:9b:88:3a:7b:65:71:aa:91:66:
69:68:b4:7d:d2:d4:8e:93:db:af:a4:78:fe:b1:f9:
0e:d6:99:0d:09:2b:c5:87:55:9a:f2:33:63:63:f6:
d4:44:6e:25:09:66:11:ba:87:87:79:7b:ae:9c:7a:
0d:bf:e2:f0:c4:68:bf:22:ba:7f:aa:1f:08:1f:8f:
e4:f0:eb:b2:72:95:3a:77:1e:4a:03:52:6f:eb:fe:
10:3c:f7:c7:b9:fb:16:1e:36:15:ee:d2:68:0b:6f:
3d:e6:0c:8c:b1:b6:54:97:26:6f:75:58:0c:2e:ca:
ce:f1:7f:b4:87:a8:2d:f1:77:38:42:bc:3d:09:23:
10:28:01:08:1f:19:1c:cf:5c:11:6c:51:03:38:b5:
f9:78:d9:7c:16:0a:95:a1:99:98:b8:2c:6d:eb:37:
80:ce:d8:1c:75:86:30:bc:de:d7:e2:6b:e7:92:0f:
27:9f:b3:e9:ea:65:07:8a:31:10:34:ec:30:ec:dc:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E8:7E:36:E2:EC:24:B0:C7:67:DD:9E:4D:94:6C:A4:B5:CD:8B:4F
X509v3 Authority Key Identifier:
keyid:CA:FD:31:33:DF:47:CE:2B:B0:7C:47:2F:BE:6B:B4:E9:17:8C:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yv0xM99HziuwfEcvvmu06ReMYjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/fuh-NuLsJLDHZ92eTZRspLXNi08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/yv0xM99HziuwfEcvvmu06ReMYjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.133.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a3:87:9a:48:f5:c0:66:ef:f6:86:51:93:a3:d5:31:34:36:
1c:1d:ed:49:83:5c:2a:cc:ec:1b:a7:2a:6f:9c:db:19:54:04:
68:09:ea:72:d3:30:ea:53:12:78:7a:3a:ab:71:eb:21:53:65:
19:d2:7e:37:27:82:c3:c3:e7:30:21:42:2b:a6:ce:6e:24:89:
e9:83:a0:6b:12:9d:5e:65:48:0a:77:bc:46:ba:26:0c:4b:43:
d1:ea:82:78:b5:81:1e:41:1a:d1:c2:d9:d0:43:ea:51:98:e5:
25:bb:39:14:f6:5f:cf:78:d7:33:70:04:ab:d2:fd:9b:29:a2:
6d:d1:e5:de:51:f0:b7:83:ab:80:70:17:88:44:1a:bd:ee:07:
50:9c:28:49:83:6c:86:50:df:0b:c6:79:5e:09:5c:fa:b3:93:
b7:66:c2:5b:a5:6d:c6:03:0c:d0:bb:94:c0:c0:e6:17:20:04:
94:15:bd:71:96:7f:0b:0f:4c:b3:9b:f2:97:f7:07:af:90:e2:
ab:a7:7e:57:6b:90:a3:b9:d6:9f:44:d0:37:78:ad:48:5a:f0:
86:55:60:bf:17:6f:2b:d8:94:5a:bb:d6:c0:f6:82:8a:4c:23:
2b:95:05:bd:a6:0a:13:83:3c:a6:2b:e1:eb:15:68:8b:e5:04:
50:4e:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:19 2024 by rpki-client on console-fra.rpki-client.org