Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/J-eCFZgER1Y6k_wbmqpgp9htjs0.roa
File: J-eCFZgER1Y6k_wbmqpgp9htjs0.roa (raw, json)
Hash identifier: ZsIzxS+FRJQhe0LTlghsVwGdEh430zEcqbe02G5f9dY=
Subject key identifier: 27:E7:82:15:98:04:47:56:3A:93:FC:1B:9A:AA:60:A7:D8:6D:8E:CD
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 01856E0AF58244EA40DDF7F72A6954644C5B
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/J-eCFZgER1Y6k_wbmqpgp9htjs0.roa
Signing time: Sun 01 Jan 2023 15:54:49 +0000
ROA not before: Sun 01 Jan 2023 15:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200640
IP address blocks: 37.34.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 07:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f5:82:44:ea:40:dd:f7:f7:2a:69:54:64:4c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Jan 1 15:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27e78215980447563a93fc1b9aaa60a7d86d8ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:3a:11:fc:e9:7c:6b:e5:03:0b:f8:b2:4c:
63:77:ee:cd:07:3a:e5:de:d1:11:e0:2c:49:5e:db:
35:13:a7:f1:20:e5:9d:28:a2:ea:90:4d:b3:7e:e0:
30:d1:c6:50:28:98:40:1f:60:f7:d7:83:23:ba:22:
51:f0:a2:aa:d7:18:51:ae:92:0e:47:4f:10:16:20:
47:de:09:59:1d:2c:2e:c8:e9:6e:71:7c:16:1d:cb:
4d:01:0e:b5:6f:06:a5:d1:d2:74:11:d7:48:fa:e3:
38:2f:82:a2:38:08:b5:3d:38:3b:43:99:b3:57:3b:
30:99:12:67:f2:7b:9d:85:ff:eb:ac:8f:f2:7e:67:
0a:72:30:60:ce:73:22:42:6f:f1:d8:de:63:1f:e0:
35:9e:3f:24:13:6b:d5:9c:2a:d0:98:34:d5:ee:89:
3f:52:90:bc:9a:86:e9:62:80:c0:39:31:37:d0:45:
50:8f:cd:14:da:6e:9e:6c:12:5c:0d:2a:5a:f6:d9:
d9:11:0b:cb:b7:1f:0f:3a:a0:48:c9:e2:8d:98:62:
25:4d:ae:9b:f8:42:6b:6d:08:98:2a:5a:28:94:9b:
04:82:5b:99:af:fa:c0:34:e5:6a:4b:33:ae:cb:3e:
a0:59:dd:49:fe:58:31:fc:86:5d:8c:1c:c9:aa:fb:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:82:15:98:04:47:56:3A:93:FC:1B:9A:AA:60:A7:D8:6D:8E:CD
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/J-eCFZgER1Y6k_wbmqpgp9htjs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.100.0/22
Signature Algorithm: sha256WithRSAEncryption
62:6b:c0:8e:62:29:e7:ab:60:74:9d:dc:6d:34:ed:d4:09:8d:
14:6d:19:8c:82:47:56:29:e1:b9:56:98:0b:29:ca:ac:5e:b5:
5e:48:a9:df:ab:6a:ab:4c:6a:8c:94:dd:be:59:79:51:97:08:
86:3f:c6:dd:08:0c:5d:05:7c:fd:a2:59:98:e1:26:c0:e0:77:
94:20:3f:ff:b7:e6:ae:86:8a:44:25:bc:da:a9:5b:74:14:dc:
a3:cd:95:25:1d:08:8f:22:ef:21:80:f9:af:be:fd:cf:64:57:
66:bc:91:4b:0a:8c:93:64:01:02:9d:6f:01:2b:c3:d1:c1:48:
a3:ba:4d:04:35:90:e1:5c:0d:44:11:62:c9:e1:4b:3d:87:1e:
67:0b:94:1a:fb:e2:3a:23:ea:f1:88:36:ab:64:77:cc:bf:78:
42:a7:95:c5:6e:9a:c3:d4:e1:11:08:f2:2e:2c:c7:28:c5:15:
fb:e1:ee:1b:73:a6:47:1c:ed:a9:f5:a3:75:a6:2a:e5:68:aa:
79:c7:97:76:ca:21:c4:1a:5d:36:d1:50:43:c2:b5:9b:2e:e9:
8a:a7:06:ed:0f:6b:d3:2e:53:82:1b:b0:9e:8e:e8:8b:e8:67:
00:20:00:7a:31:f5:12:cf:5a:35:4a:16:6c:4f:c6:44:cc:c3:
38:16:6c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:32 2024 by rpki-client on console-ams.rpki-client.org