Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/H9rsCE_QCPujT50DmRxx4sp2EJ4.roa
File: H9rsCE_QCPujT50DmRxx4sp2EJ4.roa (raw, json)
Hash identifier: PpGsXG8h1fJ98v6vyfh95Ue7Z41FY7tgdevmxWX7wAk=
Subject key identifier: 1F:DA:EC:08:4F:D0:08:FB:A3:4F:9D:03:99:1C:71:E2:CA:76:10:9E
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01856CAEFAF0CBB91D1B5D993415EF44F8AE
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/H9rsCE_QCPujT50DmRxx4sp2EJ4.roa
Signing time: Sun 01 Jan 2023 09:34:44 +0000
ROA not before: Sun 01 Jan 2023 09:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39020
IP address blocks: 37.235.53.0/24 maxlen: 24
151.236.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:fa:f0:cb:b9:1d:1b:5d:99:34:15:ef:44:f8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 09:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fdaec084fd008fba34f9d03991c71e2ca76109e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:4b:96:34:0c:90:69:ab:f7:76:d0:75:7c:
05:c7:a8:8d:08:fe:cd:83:0a:1b:b3:be:8d:3e:80:
5e:42:e5:6c:2f:25:cf:8f:b7:19:a3:a6:7d:ca:da:
ce:ff:4a:ac:fe:74:84:25:c7:10:5b:f9:d3:1e:a6:
94:df:75:af:4b:78:75:b4:f3:ea:e2:ee:83:7e:5c:
3f:f9:0f:42:e7:82:56:8f:df:49:cd:62:c2:1e:18:
63:8b:24:42:2d:08:0a:34:47:6d:b9:fd:ef:c0:8a:
a5:00:aa:9c:b5:70:31:4b:ff:39:2e:12:ce:75:07:
ce:cd:9d:85:85:ad:be:82:c0:89:26:69:45:6c:a4:
c7:55:48:98:48:54:3e:b4:1f:3c:54:6e:10:25:47:
c4:09:26:e1:d2:4b:bb:12:ff:ac:96:6d:f9:2a:ad:
80:30:6b:e2:6d:b0:e0:2e:0b:69:e9:23:89:64:65:
f7:32:16:50:5b:16:ff:f0:b4:99:14:07:90:be:31:
35:d4:f1:e3:8c:91:32:c7:c4:fe:09:99:97:20:99:
35:9e:0c:33:2f:13:d0:34:e6:aa:e2:f3:a0:ea:b0:
0f:b2:e8:b2:0b:0a:77:5d:30:d1:88:e8:73:35:0d:
7f:be:89:35:f3:53:71:dc:79:6c:3b:e7:a2:96:73:
52:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DA:EC:08:4F:D0:08:FB:A3:4F:9D:03:99:1C:71:E2:CA:76:10:9E
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/H9rsCE_QCPujT50DmRxx4sp2EJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.53.0/24
151.236.23.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ff:41:3a:40:95:60:75:84:00:42:fe:b7:ba:c7:12:39:39:
b0:9e:39:f3:af:23:0a:7e:26:39:bc:93:9b:4c:5d:9e:a0:2e:
42:fa:f5:5d:2f:c7:42:f4:9c:88:4d:9f:ae:65:24:17:ee:65:
13:74:45:1d:bd:e8:d1:e8:c1:aa:dc:85:33:ef:11:6b:2f:50:
12:c1:2e:05:73:23:4f:b0:d4:c8:b8:1f:26:6e:d4:05:70:81:
4d:48:d1:1d:d7:f4:ae:0b:d5:d7:04:76:01:cf:ad:1b:61:39:
b9:e9:26:ed:13:32:58:21:56:18:dc:50:16:3e:89:64:b9:69:
b5:df:c9:cc:68:7e:5f:5a:21:b8:00:72:ca:7d:52:a5:a0:1e:
74:b1:e5:c2:9c:ae:a1:0b:ba:6e:a0:c5:2d:89:f6:bb:7c:74:
66:b6:08:76:08:42:2f:62:2a:99:e5:88:46:02:23:a0:aa:e0:
30:9d:ce:10:8a:21:0c:49:5e:ab:92:11:87:2c:e1:eb:a7:7d:
53:55:3f:64:d8:2e:82:10:e3:dd:3e:0e:5c:ed:e5:cb:4f:ac:
84:b6:ce:61:fa:4d:d4:f7:52:67:e1:da:1b:9d:15:e2:b2:61:
7f:5d:d8:c7:5c:d1:51:9a:7c:c6:bd:4f:2e:7a:17:71:40:03:
d8:a5:3e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:51 2024 by rpki-client on console-ams.rpki-client.org