Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/evXA8m0YmZIBSDt9t7KpkKdAQVc.roa
File: evXA8m0YmZIBSDt9t7KpkKdAQVc.roa (raw, json)
Hash identifier: aqUqr4FzqRZmXrMeIJh4rmgMcFFWN3WOKEKU57QOXdI=
Subject key identifier: 7A:F5:C0:F2:6D:18:99:92:01:48:3B:7D:B7:B2:A9:90:A7:40:41:57
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 018CC501031420F8731881E404CD777159C9
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/evXA8m0YmZIBSDt9t7KpkKdAQVc.roa
Signing time: Mon 01 Jan 2024 12:30:27 +0000
ROA not before: Mon 01 Jan 2024 12:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209360
IP address blocks: 37.61.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 13:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:03:14:20:f8:73:18:81:e4:04:cd:77:71:59:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Jan 1 12:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7af5c0f26d18999201483b7db7b2a990a7404157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:23:f1:9d:58:72:ab:1f:b6:0a:07:93:2a:
25:b0:57:dc:98:82:2b:16:e4:4e:8c:22:f5:47:3b:
ca:c9:1f:3f:c9:8d:a4:be:03:68:34:cc:73:04:a3:
57:8e:18:95:88:01:37:c9:3b:50:67:11:aa:94:b1:
bb:7f:80:11:68:1c:3e:bc:bd:63:8b:65:e8:dd:1e:
ad:98:b0:84:22:28:ae:87:d0:96:87:72:88:0b:1f:
04:a3:c4:28:4d:ee:da:6c:0a:f7:bb:24:f5:bb:5a:
f4:63:5e:c3:47:18:5a:1f:76:51:85:3f:71:0a:f2:
e2:41:be:96:a8:34:52:6c:e4:31:06:c9:5a:af:30:
44:95:26:99:b8:32:32:88:a1:26:52:f7:61:25:d4:
d0:a1:8f:54:0a:77:f7:54:2c:a4:ff:de:65:23:22:
65:77:a0:4a:95:50:c0:6c:19:66:4d:bc:d3:e2:b6:
d0:2f:67:d1:5d:9e:dd:bd:99:17:13:58:39:92:0a:
51:82:6f:9e:ab:9b:c2:49:3a:73:ce:3a:f6:aa:16:
87:ef:24:56:1b:43:a9:da:db:e3:b6:25:2a:9e:5e:
eb:86:be:e4:f2:cf:35:4b:61:18:45:1e:e6:b5:e2:
7c:48:3a:1e:95:b5:27:40:da:de:c4:d9:c9:75:7e:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F5:C0:F2:6D:18:99:92:01:48:3B:7D:B7:B2:A9:90:A7:40:41:57
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/evXA8m0YmZIBSDt9t7KpkKdAQVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.78.0/24
Signature Algorithm: sha256WithRSAEncryption
54:dd:f5:80:23:f9:0b:14:9c:1d:74:c5:29:ef:73:c2:f6:66:
ed:6d:5a:28:af:24:67:a3:70:ad:54:23:05:95:3f:23:cc:69:
df:5b:32:0b:a3:a0:67:6a:1e:59:b9:d6:3a:45:ca:4f:48:66:
f7:f1:4b:18:6a:b8:a1:52:9a:90:7f:15:0d:bf:b7:7c:96:92:
05:9a:d4:2f:ca:ea:1c:bf:b2:4e:7e:74:6f:b4:6e:4b:52:3e:
2b:f9:cf:ce:02:8a:4d:5c:36:db:b8:f0:e6:0b:5e:72:7e:1e:
b8:3b:68:ca:0e:dc:e6:5e:bd:68:f6:78:9f:6b:fc:ee:f4:57:
05:68:79:9f:95:6a:c8:8f:79:03:08:6e:67:31:40:67:6e:15:
38:d1:a2:ef:97:0f:08:d7:67:81:fc:2a:2b:3a:da:e5:74:0f:
bc:67:a3:61:c3:1a:d2:cf:37:7d:fb:cd:ed:d4:cf:f7:a6:c8:
40:ba:ec:77:69:e9:07:4e:54:de:20:d7:5a:d1:63:f3:77:45:
f1:c6:98:a0:62:b0:b0:65:95:4a:77:51:d2:a9:8b:07:e2:a8:
ce:9f:be:1d:57:f5:1e:41:d9:ab:81:3c:47:f1:d4:49:d0:83:
08:10:1c:49:86:96:ba:b1:53:f0:11:04:5a:c5:cc:26:6d:a7:
ea:d4:04:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 17:51:36 2024 by rpki-client on console-ams.rpki-client.org