Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/2v6ydDz08zrsyOmz_YsI6IWnxU0.roa
File: 2v6ydDz08zrsyOmz_YsI6IWnxU0.roa (raw, json)
Hash identifier: Xf/R+dI9pzb5yDyT1cNEfWgrafVSR541hhFSXmgC/Vc=
Subject key identifier: DA:FE:B2:74:3C:F4:F3:3A:EC:C8:E9:B3:FD:8B:08:E8:85:A7:C5:4D
Certificate issuer: /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial: 0185729ECB33074B0AF7A5F7A38C1538A877
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/2v6ydDz08zrsyOmz_YsI6IWnxU0.roa
Signing time: Mon 02 Jan 2023 13:14:47 +0000
ROA not before: Mon 02 Jan 2023 13:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200873
IP address blocks: 37.221.99.0/24 maxlen: 24
185.67.236.0/23 maxlen: 23
185.67.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:cb:33:07:4b:0a:f7:a5:f7:a3:8c:15:38:a8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
Validity
Not Before: Jan 2 13:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dafeb2743cf4f33aecc8e9b3fd8b08e885a7c54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:7b:b5:83:87:08:9a:84:5e:41:a6:85:f9:
76:66:e2:49:d2:ba:70:7c:3a:20:6b:18:a2:c8:20:
68:f0:c6:43:38:9e:b6:44:27:e9:2b:74:76:90:d1:
5b:cc:26:e8:9c:e4:16:d8:94:aa:cc:5e:11:4f:04:
77:53:db:78:a5:7c:be:c9:d5:ce:06:a5:0b:57:18:
2f:44:d9:55:5d:73:e5:ff:f7:ed:74:3f:41:26:00:
93:20:b4:16:09:4d:e0:dc:ea:ba:de:c3:90:1a:18:
e0:88:3e:fd:15:d4:a7:f4:e6:b3:9c:92:73:a8:e3:
2d:78:31:f0:46:b2:4c:53:58:48:ad:e4:a7:e7:67:
8f:c3:95:bd:85:29:f3:d4:15:f5:88:1f:c4:94:cd:
f9:be:48:2d:9c:fd:79:11:b7:2f:64:92:6b:8a:55:
1e:ec:0c:38:09:2c:43:e9:13:c7:c9:95:63:b0:b3:
aa:f0:04:f2:03:7e:29:4c:1c:74:bb:2d:5f:3d:3b:
b4:15:f6:3d:f5:85:99:e7:ab:d0:f3:23:7a:4f:4d:
2c:6c:76:b5:25:50:a7:fc:c4:88:79:d5:c1:6f:ce:
21:fc:c9:dd:d8:22:8d:76:11:3b:03:e8:ea:6b:ed:
d3:7d:70:db:63:f0:a1:52:dc:ce:9e:b0:0c:15:54:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FE:B2:74:3C:F4:F3:3A:EC:C8:E9:B3:FD:8B:08:E8:85:A7:C5:4D
X509v3 Authority Key Identifier:
keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/2v6ydDz08zrsyOmz_YsI6IWnxU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.99.0/24
185.67.236.0-185.67.238.255
Signature Algorithm: sha256WithRSAEncryption
57:60:32:c3:2f:f0:d9:33:16:6b:00:1e:d7:53:01:e8:f6:ab:
6c:d0:41:9a:11:99:58:f9:25:80:51:89:6a:23:de:fd:0d:d4:
bc:56:66:0b:39:4c:f7:af:ae:6d:ef:20:a5:cb:55:65:8f:fe:
5b:5c:ac:e3:64:e7:8e:a0:db:c8:12:e0:58:ae:92:7e:1e:e0:
d2:59:e6:3f:37:89:cc:07:eb:3d:ac:75:4e:a4:bd:96:c4:31:
8b:6b:89:3a:a3:44:3b:bd:a1:e3:7e:10:e5:43:2f:7d:5c:6e:
39:60:4e:73:b1:93:f2:86:32:71:00:fa:de:14:45:4c:fa:35:
b2:2d:86:a0:85:19:d8:11:f3:53:a5:f6:e1:df:3f:fd:79:36:
2c:00:cf:48:a7:86:5c:ff:bd:83:c2:54:7b:79:9c:ae:8c:95:
49:af:fc:c0:88:80:98:81:ba:4b:19:8c:07:01:0c:7c:c3:00:
3e:2b:05:5a:c2:94:b6:d9:a3:e0:1c:0e:14:ed:8e:f6:7c:d2:
fd:71:c2:5a:ee:b2:fc:6f:64:ce:a2:9e:24:5d:75:4b:56:bd:
fc:94:56:01:a4:46:72:f6:17:81:c7:99:14:5d:25:be:78:c5:
4f:d2:2f:1b:13:0b:32:a1:8c:55:c2:1e:cc:34:70:1f:28:fb:
b8:79:96:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:18 2024 by rpki-client on console-ams.rpki-client.org