Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tY4Nhpa5GwH4OSAsuW180ydFNSU.roa
File: tY4Nhpa5GwH4OSAsuW180ydFNSU.roa (raw, json)
Hash identifier: uF/Vopf/QWiPgpUClHjNOVxLHKH3o3V3r9/Hfa+JoCA=
Subject key identifier: B5:8E:0D:86:96:B9:1B:01:F8:39:20:2C:B9:6D:7C:D3:27:45:35:25
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D17C8D6E249966E471FC50E5CE9D6DE13
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tY4Nhpa5GwH4OSAsuW180ydFNSU.roa
Signing time: Wed 17 Jan 2024 14:17:34 +0000
ROA not before: Wed 17 Jan 2024 14:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 37.221.120.0/22 maxlen: 24
178.215.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 13:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:c8:d6:e2:49:96:6e:47:1f:c5:0e:5c:e9:d6:de:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 17 14:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b58e0d8696b91b01f839202cb96d7cd327453525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:02:ae:06:75:c9:bc:a7:01:d4:84:a0:0a:e8:
e9:7c:91:5d:e8:4f:44:e1:1b:81:a1:ff:c7:50:4c:
8b:f0:3e:9d:1b:37:25:cc:37:51:2b:fa:c8:08:ae:
43:08:5c:34:e5:92:bf:8a:7e:ad:51:3e:94:40:3c:
c4:d4:04:6e:84:3f:b9:40:86:89:b9:bb:6b:07:ad:
62:84:93:95:6c:49:d3:90:13:0f:ad:34:05:8f:31:
27:a5:64:ba:aa:6c:ae:32:c2:ea:ef:ad:fa:6d:d7:
e2:1c:16:2f:25:4d:19:99:a6:37:21:eb:72:68:f0:
67:3a:3f:94:b9:bf:f1:eb:6b:66:86:f9:30:59:a4:
32:70:6d:c5:e6:e3:34:db:c4:6f:b1:71:c0:2c:ec:
d4:48:38:17:e7:38:df:ae:2e:25:34:ef:54:5d:ee:
17:94:21:80:06:69:5d:84:04:a7:7a:58:d2:3c:69:
62:d7:56:df:e2:0a:fa:1e:bf:ee:2c:5a:37:10:a2:
d6:2b:d7:29:64:18:05:ef:2a:c6:64:7a:c3:ef:1f:
8f:7e:65:f9:eb:43:ae:c3:b9:81:a6:54:0e:d2:02:
31:a6:6a:c4:7d:23:d8:4c:4a:8b:00:b1:86:b4:04:
5e:20:c5:d3:4c:20:90:05:b1:26:86:cc:43:6a:4a:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8E:0D:86:96:B9:1B:01:F8:39:20:2C:B9:6D:7C:D3:27:45:35:25
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tY4Nhpa5GwH4OSAsuW180ydFNSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
178.215.226.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c8:50:5f:8c:63:b0:ed:45:ca:97:37:2c:56:e6:25:75:f4:
23:12:7e:f6:5e:cc:fb:35:f8:7b:4d:b7:de:f5:58:11:cd:c6:
66:40:5f:31:0f:0d:11:e7:0a:8a:2a:2f:0f:06:3a:f3:4c:b3:
c3:7e:b2:d3:8f:3f:2f:09:bb:af:d3:f4:e4:23:77:0e:8b:21:
7d:42:0c:ce:83:0b:0c:b3:e8:75:81:47:cb:86:f4:5b:16:f6:
50:e0:1d:bc:4c:d5:3d:84:e8:4f:a8:cf:52:56:82:d4:42:05:
00:7f:2f:e4:17:5b:30:71:8c:eb:a3:44:bd:52:2d:3e:ee:e9:
01:20:6f:53:6c:1d:a4:66:3b:9d:8c:cb:4f:0b:cf:dd:9e:f1:
2a:f5:a5:81:9d:2a:bd:e8:48:01:85:22:36:7e:f8:62:d0:d3:
bb:d3:bd:53:d9:d0:49:6c:c1:36:e7:59:e7:db:54:d2:d7:c5:
ea:81:9a:2b:9d:af:bb:87:c2:c4:34:b6:17:5a:ad:28:f6:57:
1f:20:b6:33:93:3c:38:93:6d:cb:53:6f:e7:92:1c:e8:d8:e9:
9b:6b:9c:65:b7:7b:c3:8a:36:61:09:f4:c6:dd:2b:ac:0a:b1:
70:52:e1:2b:44:95:4e:19:65:33:c8:07:e6:68:c0:cc:74:86:
77:c6:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 16:40:13 2024 by rpki-client on console-ams.rpki-client.org