Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/q2htwOZyK_oXy4xnIkRUeU-B3hs.roa
File: q2htwOZyK_oXy4xnIkRUeU-B3hs.roa (raw, json)
Hash identifier: g2VxS9ynhT/xCK9RhoigfG0WGp8wjGcpQtJ6yEjhW1M=
Subject key identifier: AB:68:6D:C0:E6:72:2B:FA:17:CB:8C:67:22:44:54:79:4F:81:DE:1B
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF98664FC4ECBBFB86ECEC86D779002
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/q2htwOZyK_oXy4xnIkRUeU-B3hs.roa
Signing time: Mon 02 Jan 2023 00:55:01 +0000
ROA not before: Mon 02 Jan 2023 00:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200723
IP address blocks: 37.63.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:86:64:fc:4e:cb:bf:b8:6e:ce:c8:6d:77:90:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab686dc0e6722bfa17cb8c67224454794f81de1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:e6:b8:38:03:20:0c:ba:99:20:3e:f9:94:
ba:7b:24:42:83:5f:4b:b2:88:e4:5f:a5:8f:58:22:
15:95:50:d8:4d:d1:5e:8a:12:04:3b:81:b9:49:60:
37:1c:dd:59:09:92:3a:2c:dd:12:a5:99:71:f0:77:
ad:f0:0d:6b:40:a9:77:fc:69:55:88:6d:fc:36:3e:
83:1e:6a:a8:54:4c:c1:2f:07:78:41:ae:67:90:7b:
37:51:8e:a0:e1:29:8f:2d:eb:13:1e:4a:84:55:cd:
02:a8:d4:1b:1d:2c:4d:a9:33:f3:b4:55:4b:77:40:
8a:24:0a:37:f9:ab:c8:4a:13:58:5d:d8:6f:b2:d4:
4c:2e:6c:4d:06:c6:c7:24:b7:4c:cb:8c:a4:da:c4:
c2:3a:98:39:ff:34:8b:5c:a0:c5:14:77:fc:b6:df:
b6:31:ca:63:a4:3f:2c:52:a4:90:63:3d:c6:83:24:
06:95:fb:3b:6b:c4:39:4e:61:de:6e:1f:8c:11:80:
f1:ee:0c:df:eb:ab:37:26:ed:67:b4:37:5d:23:f6:
1f:c1:aa:3a:94:b6:15:15:9b:3c:80:2c:b7:cb:77:
41:22:73:b0:f7:07:8b:a3:4b:9e:8c:80:57:c5:87:
8a:85:f2:a6:b4:0b:cd:28:04:76:c0:87:e4:87:14:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:6D:C0:E6:72:2B:FA:17:CB:8C:67:22:44:54:79:4F:81:DE:1B
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/q2htwOZyK_oXy4xnIkRUeU-B3hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.63.79.0/24
Signature Algorithm: sha256WithRSAEncryption
73:43:66:06:38:0a:9e:84:13:a2:24:e0:aa:3d:6b:23:74:b9:
93:67:30:50:e3:90:0e:a2:bc:c5:10:f3:55:b1:4e:4c:dd:be:
e4:86:38:b2:d9:b7:37:38:1f:af:37:6b:20:42:02:67:4b:f7:
a2:c0:4b:56:bb:7c:9b:4c:77:79:5f:b6:93:14:30:aa:b7:b8:
01:1c:e2:b9:84:e8:b5:02:72:b0:a3:c7:e8:41:00:f4:3f:1b:
e8:ef:66:ad:90:e6:f7:6c:f8:f7:8a:80:5a:a2:3e:bb:67:7d:
3d:14:75:b1:b1:ec:14:22:ff:3c:e0:dc:40:db:07:bd:45:87:
ef:a9:37:71:e2:60:fe:1f:bf:c6:9a:ba:7b:57:e9:15:ad:69:
e4:49:94:5a:7b:97:11:53:04:e2:0d:a8:0c:92:14:71:38:ba:
d8:ec:9a:c6:1e:42:63:ca:fc:64:ba:1a:0f:fa:21:fc:07:bb:
b5:3d:f8:3e:43:86:c2:27:24:c1:5c:89:0a:53:7a:a7:a2:f5:
11:a2:c7:ef:5f:b8:e4:b3:71:02:0b:39:64:01:11:05:81:9d:
38:f0:03:e3:d9:e7:27:34:5b:5f:2f:cb:e8:19:25:a1:a7:b3:
0d:41:88:be:c4:6a:07:a1:1d:47:95:0e:07:0c:93:71:d1:91:
05:f6:f7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org