Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/fOa21wNcFjXcsecLPQmU0c7xmcA.roa
File: fOa21wNcFjXcsecLPQmU0c7xmcA.roa (raw, json)
Hash identifier: is8nNpKGJlPCdUuLk1IxOvE26K1PleihZuNlWnSVNa0=
Subject key identifier: 7C:E6:B6:D7:03:5C:16:35:DC:B1:E7:0B:3D:09:94:D1:CE:F1:99:C0
Certificate issuer: /CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Certificate serial: 018A48CC03BBCFC5B6549F912018A22A257C
Authority key identifier: 00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/fOa21wNcFjXcsecLPQmU0c7xmcA.roa
Signing time: Wed 30 Aug 2023 23:34:04 +0000
ROA not before: Wed 30 Aug 2023 23:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39425
IP address blocks: 37.156.37.0/24 maxlen: 24
193.162.136.0/24 maxlen: 24
89.40.133.0/24 maxlen: 27
89.43.240.0/22 maxlen: 23
89.43.246.0/24 maxlen: 24
89.43.240.0/21 maxlen: 24
89.43.244.0/23 maxlen: 24
89.43.247.0/24 maxlen: 24
188.241.121.0/24 maxlen: 24
89.37.186.0/23 maxlen: 23
92.114.88.0/22 maxlen: 22
94.176.186.0/23 maxlen: 23
89.35.4.0/23 maxlen: 23
188.241.111.0/24 maxlen: 24
89.46.24.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:48:cc:03:bb:cf:c5:b6:54:9f:91:20:18:a2:2a:25:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Validity
Not Before: Aug 30 23:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ce6b6d7035c1635dcb1e70b3d0994d1cef199c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:ff:61:c2:77:c7:0c:89:ce:60:ac:40:d8:
26:1c:50:57:9b:c0:99:0d:f0:28:68:86:5e:d5:8f:
7f:a9:4e:c9:25:99:bc:b1:7a:99:1c:9c:f6:61:51:
16:f2:d4:66:05:56:e2:d3:a2:3f:31:d9:c7:4d:e8:
d0:72:89:b9:b5:2d:f1:19:c4:90:da:51:b7:77:f7:
ee:ef:c8:74:6d:05:85:f1:95:3b:f3:c1:8d:e7:67:
91:ec:cf:2a:80:dc:4f:6f:7b:06:02:d1:6a:57:54:
13:13:eb:ef:d6:c9:09:2b:e3:d4:4b:ba:6c:0f:48:
9d:b5:d3:5e:8a:53:10:61:e5:53:31:35:b4:01:68:
55:e9:51:7c:8c:6b:83:74:f9:da:d3:c6:83:0e:04:
ab:bf:ec:f1:0a:51:01:88:c1:b6:75:09:bf:09:44:
fa:17:b9:3b:38:42:1b:ae:54:3d:e1:7e:18:9e:3b:
52:69:e8:e4:17:6d:0f:ca:08:94:7a:c2:1d:6c:2e:
de:b0:0a:c1:2b:32:48:28:0f:a5:4a:35:e7:f5:17:
26:01:6e:95:4d:a2:f5:86:21:c6:a9:9b:a6:b6:8c:
bf:2a:fb:b4:16:fd:ac:9e:06:1e:3b:0a:86:39:80:
8a:21:26:d7:d1:ed:45:65:aa:24:0f:28:b7:36:32:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E6:B6:D7:03:5C:16:35:DC:B1:E7:0B:3D:09:94:D1:CE:F1:99:C0
X509v3 Authority Key Identifier:
keyid:00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/fOa21wNcFjXcsecLPQmU0c7xmcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.37.0/24
89.35.4.0/23
89.37.186.0/23
89.40.133.0/24
89.43.240.0/21
89.46.24.0/21
92.114.88.0/22
94.176.186.0/23
188.241.111.0/24
188.241.121.0/24
193.162.136.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:54:24:8a:a1:05:63:63:cc:e6:ea:75:b2:b6:25:d2:10:fd:
18:d6:41:19:79:00:51:39:8d:38:a8:1d:90:fc:d5:35:d6:4b:
b5:11:9a:84:c4:6c:79:8b:15:bf:f8:02:49:2e:b3:7d:67:e5:
6e:c0:09:e7:4d:6c:ea:88:dc:e8:78:35:73:a2:d7:71:76:7c:
9e:50:1c:2d:38:ca:b8:0f:c9:ca:24:12:c8:44:a4:67:df:b1:
d9:c3:46:e0:37:44:ac:3f:17:81:2a:fd:5b:a3:74:32:42:06:
d5:b2:77:ac:d0:ec:90:4b:12:6a:ba:14:b7:93:fd:1c:36:cd:
a8:ae:b9:06:4a:a5:61:28:b3:fc:79:ab:8a:83:59:c3:9e:6f:
58:4e:10:b1:1b:e4:5c:a6:01:53:ee:6f:87:a0:ba:1e:e8:d6:
71:47:78:36:6a:d1:ba:d9:b6:ec:84:7f:4d:cb:5d:c3:75:bf:
2d:92:3b:2d:06:90:eb:1d:f5:1a:26:da:eb:1b:f3:2d:0c:79:
b6:17:39:ae:b9:b6:49:f0:8c:b9:3d:aa:b8:94:ad:90:ae:19:
b4:f6:46:ab:7c:9f:bb:45:f9:7b:f8:ff:82:02:c0:96:a0:5f:
65:29:d1:93:1a:82:a6:1a:db:e6:dd:e7:b1:7b:b1:06:70:87:
19:6e:3f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:20 2024 by rpki-client on console-ams.rpki-client.org