Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/X9Ts3QrUXFNi3rT0hmdl5rynKas.roa
File: X9Ts3QrUXFNi3rT0hmdl5rynKas.roa (raw, json)
Hash identifier: DI+5yM2Qe/5juh5fPvOyQkii8eqfUxbHki8+HOSTKbw=
Subject key identifier: 5F:D4:EC:DD:0A:D4:5C:53:62:DE:B4:F4:86:67:65:E6:BC:A7:29:AB
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018A3BDE9CE5EA7671E77C8AD900B0D0209D
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/X9Ts3QrUXFNi3rT0hmdl5rynKas.roa
Signing time: Mon 28 Aug 2023 11:19:19 +0000
ROA not before: Mon 28 Aug 2023 11:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57494
IP address blocks: 37.139.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:de:9c:e5:ea:76:71:e7:7c:8a:d9:00:b0:d0:20:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 28 11:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fd4ecdd0ad45c5362deb4f4866765e6bca729ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:16:bc:ad:ec:8e:9c:eb:71:f1:b4:6f:b5:
18:09:67:33:3e:53:b2:10:31:5f:a1:af:38:49:24:
8b:4a:6c:d5:f2:08:be:68:2c:3e:b8:fc:57:f8:34:
3e:93:57:22:7f:93:56:f4:e5:1e:f4:cf:74:02:01:
ce:f0:48:dc:ed:93:8c:71:bc:4c:dc:11:88:41:de:
60:c0:95:20:7d:d8:c9:b9:53:04:ad:19:9b:d1:0f:
70:eb:ca:c8:51:cb:c6:58:86:90:3a:5e:0f:e6:19:
cc:b3:51:39:06:1c:97:ed:29:65:f6:7d:ed:24:a0:
65:a3:f0:df:6a:dc:4c:fa:7f:63:e1:03:75:27:19:
f8:73:0b:1a:09:08:8c:bf:77:d7:69:38:f6:59:0b:
06:ca:b7:c9:80:af:5e:e3:c2:da:d1:6e:62:89:41:
53:7b:ec:a3:12:c1:a8:0d:f4:62:f8:fe:8c:61:e9:
2f:a8:47:9c:37:0c:ce:ae:7d:8d:1c:80:df:4a:64:
76:0b:7e:b6:fa:ab:c6:89:49:34:45:51:b3:31:7d:
a0:03:e2:ec:3f:c4:2c:98:df:27:1c:cc:5d:28:92:
6b:82:02:85:50:37:28:92:70:72:a3:8f:5d:a4:ff:
a2:0f:cd:a4:83:1d:26:6c:72:3b:b8:11:e9:d9:14:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D4:EC:DD:0A:D4:5C:53:62:DE:B4:F4:86:67:65:E6:BC:A7:29:AB
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/X9Ts3QrUXFNi3rT0hmdl5rynKas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f7:3e:e9:dd:8e:4e:d3:28:4b:0e:d5:27:63:68:d2:3a:67:
79:71:9f:28:34:32:7d:e7:0d:e8:a9:48:f0:88:0b:7e:f8:fb:
57:de:4c:1a:9e:d0:2f:83:2d:74:76:c5:eb:98:66:c9:e7:b6:
59:5e:d7:a1:a2:1b:f9:d9:e3:fe:6f:2c:39:27:e6:06:ee:1b:
e7:13:a8:17:19:13:38:54:07:db:43:ec:5d:70:8f:01:9b:89:
c3:b3:4b:b5:81:73:ac:d4:b5:3a:56:d5:a3:cf:1c:2c:f9:d2:
5f:f3:18:42:23:2e:a5:33:7f:35:1a:f5:46:fc:fd:cc:e6:eb:
8a:a7:5d:17:57:27:d8:d2:c6:93:03:65:ef:0b:f6:c2:2c:a9:
04:34:ad:94:63:55:50:ae:ae:43:1b:fa:cd:e5:58:aa:e4:93:
2c:d6:23:c1:bc:92:f8:39:ea:ee:02:4b:0e:03:d4:bc:bf:62:
1e:9d:42:1f:6c:bb:77:48:95:67:4d:b3:09:39:6d:f2:8c:88:
2d:b3:1c:20:54:15:9a:bf:9d:df:e0:e7:73:e9:2a:aa:60:d6:
b8:4b:10:c9:3c:2d:5c:8b:d4:ae:2b:b0:63:e3:dc:dd:c7:bd:
3a:15:42:ff:b8:b5:95:17:cc:b6:90:ad:10:fb:ea:2f:0b:f4:
1b:49:64:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:29 2024 by rpki-client on console-fra.rpki-client.org