Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/FH8IT8qi3QbNNc8v7x2i8hys6n0.roa
File: FH8IT8qi3QbNNc8v7x2i8hys6n0.roa (raw, json)
Hash identifier: BLQmfufKYSzIN/e6KOEG0wWMGRZiLFtNBQrQMcXnfeM=
Subject key identifier: 14:7F:08:4F:CA:A2:DD:06:CD:35:CF:2F:EF:1D:A2:F2:1C:AC:EA:7D
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01856B8116E4F54B8B5F5E3243881AA625C7
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/FH8IT8qi3QbNNc8v7x2i8hys6n0.roa
Signing time: Sun 01 Jan 2023 04:05:00 +0000
ROA not before: Sun 01 Jan 2023 04:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59413
IP address blocks: 37.110.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:16:e4:f5:4b:8b:5f:5e:32:43:88:1a:a6:25:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 04:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=147f084fcaa2dd06cd35cf2fef1da2f21cacea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:a4:50:22:b5:7e:9a:3b:eb:9d:2e:06:45:
de:96:32:8f:9e:72:c2:90:a5:e6:10:a1:1d:6a:38:
fb:b5:ec:64:17:bf:15:8b:4f:d9:ec:a2:1c:f8:5f:
bd:c8:11:b0:c0:0a:f5:91:43:41:f7:7f:07:2b:b6:
4c:a9:3e:22:ac:31:ce:c7:75:30:b7:a3:4d:2c:b7:
62:e5:bb:2f:42:1c:4a:53:f9:c4:4a:42:2a:57:bd:
cd:b8:54:40:6f:d9:73:1c:14:35:bd:99:65:18:60:
83:61:a8:fa:a6:06:2d:9d:60:a1:a2:21:e1:82:f6:
cb:e5:89:fe:32:73:a7:7d:bb:68:65:9a:ea:4f:32:
53:1e:f0:62:5f:f9:a9:13:1e:69:aa:60:53:e2:39:
33:60:90:be:e4:9a:86:f0:9f:d8:13:d9:13:42:a1:
10:d8:90:59:20:4a:76:79:89:8c:95:22:52:29:41:
6c:58:c6:55:a4:bc:7e:fd:9d:f3:6b:57:ef:74:14:
e0:04:3a:18:30:a9:1a:cd:8e:43:27:3c:70:cb:d3:
88:21:4a:38:33:67:48:53:c1:3a:e9:15:3e:ca:7e:
8b:ef:33:e5:de:50:a0:8b:f1:93:88:dd:8f:60:85:
4a:f4:16:d6:06:ec:b8:c7:f5:e9:5d:d1:02:ab:a3:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7F:08:4F:CA:A2:DD:06:CD:35:CF:2F:EF:1D:A2:F2:1C:AC:EA:7D
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/FH8IT8qi3QbNNc8v7x2i8hys6n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.192.0/24
Signature Algorithm: sha256WithRSAEncryption
02:43:42:e1:af:ec:4f:92:53:ac:4a:3c:36:d0:b5:be:06:08:
f1:5a:3a:fa:65:a5:d8:c2:6b:1d:8b:39:59:62:ad:71:b1:a4:
ac:82:8a:bf:e0:89:15:d2:17:70:59:81:90:95:0e:15:42:a9:
04:14:f2:97:75:73:ac:b2:e5:34:99:44:9b:da:be:97:4c:55:
cd:d6:8b:44:51:e4:03:29:d2:b7:60:c7:b3:24:1f:c3:a7:65:
44:2a:00:82:0d:49:d0:6f:fa:91:7d:b2:92:b0:cd:28:51:06:
da:49:f8:29:bc:9f:9c:68:9e:b0:1e:45:b8:1d:5c:99:f5:05:
c2:b6:72:d1:5a:ae:72:fa:6c:cb:5b:f1:11:4d:af:0f:85:7c:
7c:a1:ae:51:2e:6d:f0:26:3c:ab:f6:80:19:8e:77:f9:a7:a7:
64:4d:d9:53:c9:43:c5:c4:b9:88:15:3f:3d:8f:97:a6:61:0e:
60:f8:65:5a:50:31:d9:d5:61:e6:a4:63:59:dd:dd:c6:0a:94:
72:6f:96:44:00:a1:2d:ec:1a:4e:bb:e1:6e:0f:ca:01:c9:d7:
9c:1b:89:47:e5:d9:ac:d1:c2:cc:d9:ca:4b:72:cc:15:83:ac:
6a:fe:6a:61:57:c3:46:19:e4:5f:57:db:a0:1f:56:77:fa:b4:
59:32:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:10 2024 by rpki-client on console-fra.rpki-client.org