Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ehJYWw_-V0BEhDaP-w8lPrcfk8k.roa
File: ehJYWw_-V0BEhDaP-w8lPrcfk8k.roa (raw, json)
Hash identifier: C9L+9c46/FcP4MHVgDe5buURfn4djl69NnOU6jav1dI=
Subject key identifier: 7A:12:58:5B:0F:FE:57:40:44:84:36:8F:FB:0F:25:3E:B7:1F:93:C9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F8180AE16D23145C1BA2A3EA7F0FA622E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ehJYWw_-V0BEhDaP-w8lPrcfk8k.roa
Signing time: Thu 16 May 2024 13:04:05 +0000
ROA not before: Thu 16 May 2024 13:04:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215343
IP address blocks: 37.139.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 06:56:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:80:ae:16:d2:31:45:c1:ba:2a:3e:a7:f0:fa:62:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 16 13:04:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a12585b0ffe57404484368ffb0f253eb71f93c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:13:91:88:94:6a:8b:ad:63:69:55:4b:88:
68:af:cf:0b:39:e6:e7:65:95:a0:8b:89:6e:e9:a9:
e2:60:43:0e:51:f0:d9:e0:25:72:72:10:ed:5e:72:
c1:f7:62:c0:48:a4:20:23:6e:bb:6c:31:da:e4:51:
a9:dd:6b:7e:bc:d5:be:d6:bf:47:e5:95:39:1a:b2:
57:4b:7e:fd:94:28:d3:9b:ca:8e:3a:ab:a4:e3:3e:
73:47:aa:29:c9:45:b9:de:9c:ab:fb:57:75:d4:71:
0a:f8:a1:1c:1d:e2:28:b4:d6:e7:9a:43:9d:76:50:
db:f4:34:2b:2f:2b:ab:bf:1c:51:f1:38:b8:9d:7c:
69:2d:eb:55:d9:06:a4:18:5a:41:d0:0e:41:d2:d1:
c1:b3:ba:39:59:d7:09:56:f7:56:51:1d:b6:3a:4d:
1c:08:db:00:d7:7e:53:55:41:a7:42:37:1d:10:a4:
c1:b6:8a:fc:35:f8:70:0c:96:70:87:60:01:72:74:
7b:87:a9:8a:58:47:77:d0:45:5f:5a:21:30:e8:01:
4e:db:47:c8:90:d6:70:93:ee:fc:c2:21:96:e2:4a:
64:95:b9:3c:a4:bf:f5:30:9e:2a:5f:54:1e:33:10:
f4:64:e0:2b:da:7d:e1:6e:76:2b:a2:1b:8f:72:5b:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:12:58:5B:0F:FE:57:40:44:84:36:8F:FB:0F:25:3E:B7:1F:93:C9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ehJYWw_-V0BEhDaP-w8lPrcfk8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ff:8e:c6:bf:d1:c1:2a:7f:e2:a6:af:09:12:ac:55:0f:e0:
e2:1b:e6:56:b7:7a:c7:2b:86:f9:90:43:2a:9a:ed:40:4c:6c:
01:fc:4f:7a:5f:38:61:d2:6e:a9:38:df:5f:6d:b7:29:9a:de:
29:10:fb:3d:38:07:8b:80:f7:ad:03:14:b6:bf:85:e2:74:2b:
5c:55:71:ca:5f:ee:85:f9:49:e3:b9:75:fc:c4:8d:e1:f7:f2:
fb:ad:d4:ec:85:37:49:d0:36:91:95:a4:cb:bf:fd:31:73:3a:
58:58:99:09:ed:48:90:d7:70:43:bb:b9:80:80:ea:82:86:6e:
8b:83:8a:a1:75:7c:80:d2:01:e4:c7:8f:75:ef:46:5f:13:3a:
19:ea:df:30:11:a7:4b:1f:7a:c5:76:dc:1b:0a:50:3a:09:5e:
54:63:8e:b4:45:18:1a:6b:e4:8b:9a:7b:cc:b0:e2:5a:a9:83:
91:9d:d7:2e:40:3e:27:bd:c8:ec:12:c4:22:92:96:ff:fb:17:
ec:92:4a:2b:33:27:c6:b1:77:96:79:45:58:fb:c2:23:81:5a:
d0:e3:ba:e3:bc:b9:61:25:71:45:98:35:bd:61:0c:c8:91:15:
13:b9:e4:44:09:01:52:16:c1:9d:60:b7:15:8f:95:ec:ec:65:
68:90:62:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:39 2024 by rpki-client on console-ams.rpki-client.org