Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/uu4iI4PbWx9N33YDvI45KXCNMm4.roa
File: uu4iI4PbWx9N33YDvI45KXCNMm4.roa (raw, json)
Hash identifier: halIkYl0ENv3F49IEiEis5KNFg+P/Sqjy9zCFs08nvI=
Subject key identifier: BA:EE:22:23:83:DB:5B:1F:4D:DF:76:03:BC:8E:39:29:70:8D:32:6E
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 01856CAF362D5B129D75FA7D53AD437F4479
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/uu4iI4PbWx9N33YDvI45KXCNMm4.roa
Signing time: Sun 01 Jan 2023 09:35:00 +0000
ROA not before: Sun 01 Jan 2023 09:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57785
IP address blocks: 37.143.172.0/24 maxlen: 24
37.143.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:36:2d:5b:12:9d:75:fa:7d:53:ad:43:7f:44:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Jan 1 09:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baee222383db5b1f4ddf7603bc8e3929708d326e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:6f:b8:36:f0:51:79:e6:22:6e:42:6c:7f:
f8:c8:4c:f6:bc:3f:76:9f:46:22:0b:6c:40:17:33:
19:c9:43:3a:b8:92:d0:af:87:2c:22:a0:0e:c6:01:
27:91:d8:1b:55:b8:88:04:c6:42:66:94:77:87:a3:
19:d5:ad:69:34:c4:e9:72:9e:39:2a:a2:9b:79:69:
82:8c:05:b6:e9:11:3f:90:26:9e:31:3f:35:48:47:
09:1d:29:a3:fb:b0:39:92:24:46:f9:ff:2e:13:cc:
b4:39:27:0b:06:a6:73:44:4c:7a:00:57:e0:4c:60:
99:c5:dc:6f:c6:53:06:10:45:e1:52:a0:72:d5:f9:
fd:a3:98:61:09:16:78:18:66:20:59:7e:dc:d1:c6:
51:d9:e8:df:12:d0:8b:84:4a:88:e8:c9:a5:43:3d:
dd:c6:e0:ce:23:2d:b9:f8:42:36:d5:74:7f:df:34:
3d:57:a1:35:6e:97:3b:4f:fa:37:65:51:2a:87:00:
f6:27:78:3f:03:04:57:3e:59:43:b4:2e:94:4c:b2:
bd:95:34:2e:0b:3a:78:b5:fc:a0:72:e3:cd:51:39:
5e:8b:86:39:2c:3b:62:d3:62:83:5b:01:88:5b:ce:
4b:81:a6:e4:71:7c:89:ff:69:91:ad:57:66:06:b3:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EE:22:23:83:DB:5B:1F:4D:DF:76:03:BC:8E:39:29:70:8D:32:6E
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/uu4iI4PbWx9N33YDvI45KXCNMm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.171.0-37.143.172.255
Signature Algorithm: sha256WithRSAEncryption
59:2d:cf:b3:c3:85:e1:e9:ba:fd:c0:0d:e3:fd:0d:8b:00:9d:
97:91:cf:8c:ed:74:2a:ad:8d:fb:32:a0:4f:a2:43:15:fd:da:
50:17:43:a1:a9:60:c2:2b:b8:22:2a:1b:7d:65:38:d9:94:06:
38:11:dd:42:fc:8d:c0:d8:3c:e1:b5:67:70:55:3b:73:85:46:
b0:8f:30:97:80:c6:cf:d0:75:12:6f:65:37:ca:80:1d:e4:08:
43:0e:72:0f:91:44:63:46:c7:66:b5:f2:00:06:cd:a7:2f:1f:
f4:c0:64:81:94:9e:bf:36:c6:a1:cc:cd:35:2d:3b:1a:a0:08:
fc:3a:d3:5c:12:27:fc:3d:fd:2c:de:63:ed:13:e1:9d:eb:a0:
aa:8a:5c:76:04:b5:99:1a:5f:bb:78:0c:14:10:5f:7c:75:72:
40:30:e1:4b:fd:e4:fa:22:c3:71:eb:6b:71:d2:bb:0f:3d:0a:
6f:8f:8c:c3:d1:dc:27:7f:ea:f5:cc:9e:fb:75:c2:e4:c4:01:
2e:8b:53:cb:38:54:90:a9:81:a7:8b:04:5e:09:2e:74:fb:2c:
64:e9:b3:f9:2f:a6:d8:17:14:22:ac:2e:a2:ab:29:4e:6b:5e:
26:fd:82:1c:72:4d:d1:bb:d8:f1:6f:83:fd:15:8d:c8:e0:33:
0a:1d:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:36 2023 by rpki-client on console-fra.rpki-client.org