Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/410lehFXwDMurIInDIW5FEZ-Iuo.roa
File: 410lehFXwDMurIInDIW5FEZ-Iuo.roa (raw, json)
Hash identifier: no1iv+FB1rXXOtoFMS2qZ0Im/4A+6Aa2a8AzrslW/b8=
Subject key identifier: E3:5D:25:7A:11:57:C0:33:2E:AC:82:27:0C:85:B9:14:46:7E:22:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BFB11AE4BD18109E8BD15AFB30F48EE6C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/410lehFXwDMurIInDIW5FEZ-Iuo.roa
Signing time: Thu 23 Nov 2023 07:25:21 +0000
ROA not before: Thu 23 Nov 2023 07:25:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215957
IP address blocks: 37.139.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:11:ae:4b:d1:81:09:e8:bd:15:af:b3:0f:48:ee:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 23 07:25:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e35d257a1157c0332eac82270c85b914467e22ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:10:d6:79:d7:b9:3c:fb:cb:05:9e:70:21:
60:4c:52:d0:02:6b:6d:bc:f6:e2:00:ff:a9:a7:b9:
be:66:44:b9:d6:c5:4c:e4:dc:6e:d3:43:9d:f8:6f:
16:bf:1f:f4:5e:b5:c2:da:59:cc:c7:b0:64:c4:da:
ad:f1:15:8a:e4:b2:41:40:cd:30:35:18:35:80:2c:
80:26:bc:21:06:85:97:77:c9:0c:1d:d7:99:0b:00:
0c:c5:ee:cf:e3:09:34:b1:a0:50:6d:2b:74:bb:52:
35:ae:48:50:fd:95:ab:9e:7e:ea:e7:7e:e5:b2:ca:
8b:33:bd:37:11:00:ac:18:d3:2d:3b:0b:e5:07:6a:
3f:76:32:82:82:43:8b:ae:c9:25:1d:76:bb:7a:09:
90:54:3d:e4:d6:41:02:28:a5:12:37:90:b7:e1:df:
fb:25:c4:b3:fe:b1:ea:bf:8d:06:e8:78:2e:ee:84:
ef:22:ed:17:5d:0e:8d:bd:33:38:94:e8:ac:f6:24:
fc:1d:16:20:04:2f:d7:93:5e:43:c8:53:d4:b4:fa:
88:0f:e8:b6:f4:43:1a:c3:dc:ed:dc:16:a7:56:bc:
08:45:52:0d:8e:5e:ad:e3:ba:6c:1e:2b:81:78:2a:
cb:30:bf:a4:d3:8b:fb:ae:7d:bc:af:8c:92:5c:bf:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5D:25:7A:11:57:C0:33:2E:AC:82:27:0C:85:B9:14:46:7E:22:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/410lehFXwDMurIInDIW5FEZ-Iuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.129.0/24
Signature Algorithm: sha256WithRSAEncryption
03:76:ea:68:e4:2c:ba:32:91:11:6b:ee:d9:d1:75:3a:e2:fb:
34:c0:b7:5e:3d:c3:e7:26:ea:e5:93:e6:ea:e6:50:e9:f9:0c:
19:a3:b4:9d:cb:c9:35:66:70:a8:8e:d1:f6:38:be:7f:7c:59:
2f:22:bb:8b:de:ca:33:b4:65:51:23:8c:b8:97:18:1e:9a:af:
75:05:c8:45:6a:6a:95:a1:4a:e1:6d:9c:02:3f:b9:c9:12:af:
24:76:97:e1:57:f5:a6:a4:41:a5:ba:b0:49:fb:07:b8:5d:dc:
5c:5c:6a:ce:37:b9:88:c2:cc:40:d1:75:81:cd:1e:52:6a:78:
b3:c2:77:52:74:cb:3e:5c:95:cf:1a:44:f4:db:c4:fe:87:d6:
1d:fb:54:78:07:8f:d0:8f:25:8f:38:36:ac:33:31:3d:f4:c0:
d8:7a:06:a0:37:19:3e:e9:cf:fd:d3:56:69:17:41:d4:bf:e4:
bf:53:1d:a7:2d:14:40:16:c2:e6:60:3f:d9:8e:68:3d:4d:63:
a7:d9:56:64:34:55:77:ae:97:ae:3e:ea:35:3c:b1:10:3e:fa:
f8:d8:dc:73:be:5e:35:85:c9:30:39:18:ea:af:65:d7:21:4b:
13:bd:8a:d1:d1:07:59:17:43:4d:2d:4e:91:18:a2:ed:9c:93:
8c:8d:74:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:09 2024 by rpki-client on console-ams.rpki-client.org