Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/cIwtozKKbRXmwa07lXGUE9eg_w0.roa
File: cIwtozKKbRXmwa07lXGUE9eg_w0.roa (raw, json)
Hash identifier: fq6pYmvNg9J7Gw6rn5RgWp/hwKoI0YMS94tSogRfguw=
Subject key identifier: 70:8C:2D:A3:32:8A:6D:15:E6:C1:AD:3B:95:71:94:13:D7:A0:FF:0D
Certificate issuer: /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Certificate serial: 0186D6F9144E2F5930DEC2531AA92E7EBF94
Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/cIwtozKKbRXmwa07lXGUE9eg_w0.roa
Signing time: Sun 12 Mar 2023 17:58:13 +0000
ROA not before: Sun 12 Mar 2023 17:58:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45015
IP address blocks: 134.90.248.0/21 maxlen: 21
37.99.248.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d6:f9:14:4e:2f:59:30:de:c2:53:1a:a9:2e:7e:bf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Validity
Not Before: Mar 12 17:58:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=708c2da3328a6d15e6c1ad3b95719413d7a0ff0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f5:97:f6:00:d4:6e:26:d3:04:5f:e6:9f:be:
14:df:40:a6:4d:4c:eb:f1:f4:02:83:c7:8f:d2:7b:
8e:8c:fb:22:4f:7b:6c:99:0c:e1:86:1e:a9:5f:70:
61:52:5b:e9:61:e5:7c:50:7b:6e:ca:1f:74:6e:70:
9a:ff:f1:08:f0:6e:6c:06:81:51:9f:a5:aa:2b:46:
e6:ae:cc:27:81:00:a5:d3:5d:e4:67:6b:b4:75:51:
67:57:16:ee:37:9b:2e:ee:85:21:5d:6c:4b:f5:07:
ce:68:1b:41:b6:28:41:5c:28:5b:3b:49:57:a0:68:
34:e4:42:95:f3:cc:c3:07:68:6f:7e:07:3c:f8:23:
4d:10:16:1b:3f:ea:e1:21:26:a6:d9:e6:dd:09:11:
73:e2:bc:2b:ff:1c:6e:28:19:66:18:31:c8:a7:c5:
66:ca:48:bb:43:0e:0c:de:bd:e1:ce:8d:76:e7:ed:
1e:94:b7:83:94:8f:73:48:02:d2:3c:ea:be:4c:45:
66:a5:ea:16:0d:f2:f2:32:8c:67:7a:a5:44:26:ec:
f0:1e:d5:af:00:5a:ff:6d:5e:e0:fb:27:30:57:90:
23:7a:08:c9:c7:15:42:8c:ac:22:67:c1:fa:2d:cb:
b2:98:c6:9d:19:a5:b4:12:eb:fa:84:a8:f8:1e:20:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8C:2D:A3:32:8A:6D:15:E6:C1:AD:3B:95:71:94:13:D7:A0:FF:0D
X509v3 Authority Key Identifier:
keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/cIwtozKKbRXmwa07lXGUE9eg_w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.248.0/21
134.90.248.0/21
Signature Algorithm: sha256WithRSAEncryption
53:62:80:de:38:00:8b:cf:7a:f1:28:ea:95:f9:4b:74:d8:0c:
5b:77:9b:32:49:cc:0b:9d:4b:fe:47:39:83:5f:a9:ff:e7:fd:
f1:8e:3c:35:b7:2f:8c:19:f1:05:15:aa:24:e2:d2:cb:1f:c7:
2e:60:cf:dd:95:63:ce:c0:21:8f:98:93:c8:49:48:25:10:44:
c3:28:bb:31:39:71:8c:82:8f:46:4a:f7:33:10:22:3d:b8:29:
24:0a:d4:a2:39:66:d4:a4:02:dc:15:18:25:2a:18:01:04:f0:
98:ba:3d:25:a3:e1:05:e1:a3:ca:8d:8c:d5:7f:ea:cd:20:af:
f3:67:75:6b:dd:96:b7:3c:a9:4e:6a:c6:32:3b:23:b4:d8:8d:
ae:0d:d0:72:63:64:03:2d:8a:c9:81:c4:4d:35:22:20:cf:01:
ad:91:e4:71:5c:47:70:74:89:94:6b:df:ef:ab:68:20:e9:ba:
97:d7:25:6f:13:d7:7d:c1:c7:f3:62:43:ef:09:8b:d7:ee:96:
11:ba:c5:c4:04:32:17:9a:60:88:47:0e:e9:6b:c3:7a:8d:f3:
17:23:ca:72:53:f8:b5:6e:e0:b8:a9:f8:97:86:76:59:8f:a9:
2c:27:83:fe:66:b7:10:bd:06:a5:7b:6e:f1:ad:a0:6a:d0:ec:
ed:37:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:08 2024 by rpki-client on console-fra.rpki-client.org