Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/OMyype2pBHTUhUlwErgYGEUUbh8.roa
File: OMyype2pBHTUhUlwErgYGEUUbh8.roa (raw, json)
Hash identifier: PtScmtBNwxPaIRPGEBmLnhPNWG8/+nr1+pSWnMOnsYo=
Subject key identifier: 38:CC:B2:A5:ED:A9:04:74:D4:85:49:70:12:B8:18:18:45:14:6E:1F
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018572470D4D688D26BA840BF0E07E8FC912
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/OMyype2pBHTUhUlwErgYGEUUbh8.roa
Signing time: Mon 02 Jan 2023 11:38:57 +0000
ROA not before: Mon 02 Jan 2023 11:38:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51167
IP address blocks: 37.139.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:0d:4d:68:8d:26:ba:84:0b:f0:e0:7e:8f:c9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38ccb2a5eda90474d485497012b8181845146e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b4:17:53:c5:2e:af:3c:62:7d:2e:ff:47:a8:
d0:a7:9b:85:e1:be:50:ba:2a:60:bd:50:65:24:63:
46:6a:e2:0a:50:64:8a:01:73:4f:bf:bc:6f:44:78:
4d:b9:f2:7d:4d:16:b8:b5:00:62:ce:d6:94:fd:05:
e1:79:61:4b:b2:d4:40:b8:93:ec:d5:95:2d:55:e7:
44:6a:55:7f:e4:34:bb:46:68:e5:85:9d:04:6f:84:
6d:e9:13:74:51:ef:eb:16:97:61:ca:8f:0c:4b:3d:
1e:63:2d:9e:fc:a9:77:0a:8e:6e:ee:4b:51:2f:e7:
be:8c:57:6c:c6:b1:8e:7b:25:d7:ad:b0:b4:c0:31:
a4:57:9d:4d:81:2e:ed:92:af:61:33:b3:75:ef:03:
34:54:cb:25:47:1f:a7:03:9c:04:3f:c5:ef:5c:17:
8b:ad:6a:03:90:18:ef:17:db:62:4c:bd:12:8f:49:
17:7a:f1:b2:d5:4e:e4:c4:57:c1:76:d7:6c:c7:79:
2a:9d:6d:50:2e:9e:f6:b6:bf:aa:4f:d9:b1:ac:67:
95:19:0e:7e:6a:05:81:c0:86:df:7d:aa:06:47:c0:
75:3c:19:fb:5d:f4:6f:40:35:54:61:55:66:74:a3:
ae:17:64:fc:a2:38:22:69:2c:a7:29:e2:c4:84:dd:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CC:B2:A5:ED:A9:04:74:D4:85:49:70:12:B8:18:18:45:14:6E:1F
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/OMyype2pBHTUhUlwErgYGEUUbh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.52.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:ef:a9:72:7b:9d:ac:8f:d7:46:ab:6d:82:14:fc:25:4a:ea:
50:f8:4e:58:ee:50:36:e8:95:a9:00:79:a1:34:28:7e:bc:0a:
25:fc:1b:63:c3:eb:c4:46:aa:0d:cc:5f:f8:22:39:c5:03:84:
27:1a:f6:4b:9a:10:b6:63:47:ee:f6:d8:fe:15:97:fb:30:b6:
40:3a:00:0b:79:85:07:56:ee:af:07:a3:63:ab:32:c2:d4:8a:
95:ac:a8:98:ff:59:dd:76:18:e0:66:bf:0d:30:50:24:70:d1:
43:97:4f:26:07:89:b3:df:6f:0e:be:97:fd:50:ac:90:2f:ab:
61:de:5e:17:fa:1e:4b:70:d2:f6:25:96:77:e5:e6:ae:b5:de:
3a:ee:ea:0a:e6:62:4a:b6:94:ab:22:c3:76:9f:e4:cc:b4:eb:
5c:83:8b:8e:ef:fb:dd:be:1b:1f:af:5a:3c:9a:d8:eb:9f:27:
b5:db:08:bf:c3:08:c4:06:b4:de:04:4a:3d:fd:1f:37:c0:3a:
c8:90:fe:11:e9:fa:b9:ac:f7:f3:81:59:7d:e4:f4:5c:cc:e5:
cc:fc:53:99:e8:3e:d3:40:b9:be:21:e9:26:e1:85:3a:3b:b1:
e4:0e:19:c3:13:b9:06:88:de:9e:c8:fb:f5:82:5c:83:1f:69:
4a:73:91:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:55 2024 by rpki-client on console-ams.rpki-client.org