Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/p4WJmBuWNnnusac0_uhZ2RZv3-k.roa
File: p4WJmBuWNnnusac0_uhZ2RZv3-k.roa (raw, json)
Hash identifier: nlUcK5lUmP7KoW673udbSRKrmvCHyIzu5pFwwZ9ik0s=
Subject key identifier: A7:85:89:98:1B:96:36:79:EE:B1:A7:34:FE:E8:59:D9:16:6F:DF:E9
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0185724716C8EFB4477A56C64E5554D176E3
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/p4WJmBuWNnnusac0_uhZ2RZv3-k.roa
Signing time: Mon 02 Jan 2023 11:38:59 +0000
ROA not before: Mon 02 Jan 2023 11:38:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205454
IP address blocks: 37.139.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:16:c8:ef:b4:47:7a:56:c6:4e:55:54:d1:76:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a78589981b963679eeb1a734fee859d9166fdfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:28:6a:13:32:f4:0c:6d:1e:a7:17:d6:a5:
93:f4:2e:6c:b9:ae:ea:06:62:6f:53:db:86:24:32:
24:11:82:27:8b:2c:62:21:73:c8:7f:fb:ea:ff:b0:
5c:a3:47:f6:ef:d0:f5:89:ff:07:94:b3:9e:d4:a8:
07:34:0e:bc:c3:1e:d7:60:69:4e:3e:52:1f:08:55:
74:01:6d:78:c1:17:35:33:81:b3:f8:91:33:6e:ff:
6d:83:70:83:ed:1a:9e:21:50:e4:c8:2c:6f:f2:71:
43:1a:db:a5:69:db:25:a5:51:62:80:02:ba:7b:cf:
df:6e:13:e8:dc:1b:be:50:82:e0:2e:9d:1f:f4:6b:
e1:57:a4:b2:0d:8c:11:0f:a1:0c:c8:27:3d:5a:35:
48:82:98:1f:87:05:e7:60:b4:ff:01:4d:71:09:77:
6b:52:be:d5:39:8d:e8:f5:ae:45:0c:a2:8c:ce:35:
69:0b:5c:93:e1:29:7c:e6:78:ba:81:e2:25:fa:ac:
eb:64:41:9b:a6:90:f6:4e:96:55:55:f7:87:f4:b3:
ae:93:85:e2:13:c3:41:f6:6b:23:5a:ba:43:55:d6:
bb:88:22:c8:b8:ec:af:2d:38:5e:a3:4e:ac:06:75:
0e:a4:51:6a:c0:67:50:fd:a3:e9:47:c9:8c:79:bf:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:85:89:98:1B:96:36:79:EE:B1:A7:34:FE:E8:59:D9:16:6F:DF:E9
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/p4WJmBuWNnnusac0_uhZ2RZv3-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.50.0/24
Signature Algorithm: sha256WithRSAEncryption
12:60:b6:d5:4e:e0:63:16:b8:a3:93:ad:9b:9c:0d:23:95:98:
59:df:26:40:e2:ea:19:dd:58:6b:11:05:94:fc:66:64:04:7c:
5f:a1:0d:10:e4:0a:58:58:82:85:cc:18:13:42:aa:72:e2:21:
08:5d:dc:8e:a3:57:b8:d2:c3:bb:7d:ae:40:e1:63:6d:43:f9:
75:a8:14:c0:b7:54:69:b2:7e:8a:9d:04:56:97:9f:26:c4:d6:
1e:50:66:fd:30:0d:47:15:15:64:6e:65:cc:40:05:f1:60:55:
53:0d:2a:7a:6e:be:d8:fe:09:8b:69:d5:e4:cc:58:f1:bb:95:
bf:fe:ba:8b:df:95:4d:92:34:5e:29:eb:32:0c:46:a1:d1:b5:
89:9c:60:e7:05:01:90:99:6a:d4:4e:5f:37:83:a0:94:f7:93:
78:ee:4c:38:14:8b:57:47:5d:b5:19:f6:01:b1:da:b6:c8:6c:
4c:21:45:d7:81:93:78:7b:ec:8c:b5:82:5f:eb:ed:d8:ad:20:
d1:d9:4e:7d:a4:3d:cf:91:50:11:56:62:4e:db:30:9c:03:4b:
30:72:a8:e4:f1:12:51:df:6f:e7:c1:fd:9e:5f:dc:ab:25:c7:
5e:38:b3:1d:89:d2:bb:2f:af:94:bb:13:d4:cb:64:8f:5a:d8:
b8:48:af:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org