Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/1ed9K-HJrZ_VkVZaZ4uixqhrfx8.roa
File: 1ed9K-HJrZ_VkVZaZ4uixqhrfx8.roa (raw, json)
Hash identifier: UfKIEVquv7/+vPZFDbV4/T4ES6khnANRo2GdkpO8k1g=
Subject key identifier: D5:E7:7D:2B:E1:C9:AD:9F:D5:91:56:5A:67:8B:A2:C6:A8:6B:7F:1F
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 0185711552E20AB25E282FF40ABB9458C83A
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/1ed9K-HJrZ_VkVZaZ4uixqhrfx8.roa
Signing time: Mon 02 Jan 2023 06:05:00 +0000
ROA not before: Mon 02 Jan 2023 06:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 37.75.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:52:e2:0a:b2:5e:28:2f:f4:0a:bb:94:58:c8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Jan 2 06:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5e77d2be1c9ad9fd591565a678ba2c6a86b7f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:cb:40:5c:7d:5f:9a:3e:95:9a:60:07:99:
d1:19:3b:a7:34:62:58:a9:38:66:01:80:62:e4:e9:
6d:ce:c3:18:0f:cc:32:a4:e8:a1:cc:87:b7:2b:3e:
18:b3:80:d5:c7:01:56:88:b5:f8:72:1a:b4:62:4f:
fe:de:1e:52:64:b7:6e:92:a2:82:d7:6e:50:51:f6:
c3:31:1d:17:6f:22:c9:fa:4b:ac:14:40:30:3a:52:
8d:75:a6:33:8d:12:91:d3:28:49:70:8b:d3:44:f5:
b9:27:fb:a4:6c:06:33:6e:7a:a1:5c:6c:1e:25:f3:
37:85:23:e7:80:ba:70:0c:31:c5:20:b1:b8:3f:82:
ca:ad:b5:1a:0b:50:d0:57:5d:35:6c:ff:91:8a:91:
5e:5b:56:0d:c3:36:f8:3d:a6:de:b8:89:ee:df:cb:
ec:5e:67:21:7f:d0:23:53:14:e2:f1:8b:8e:32:7e:
f8:5d:b9:77:d7:49:ed:c5:3e:ea:9a:75:59:76:63:
12:7b:90:a7:bc:02:7f:e9:28:81:1b:ee:a5:76:2f:
89:06:52:08:8f:00:1e:25:c7:a8:28:e7:df:05:a6:
f0:59:cc:56:af:24:a7:60:be:84:6d:da:9b:ce:83:
92:2e:f9:92:24:2b:dc:f5:f4:d6:17:5e:af:01:ed:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E7:7D:2B:E1:C9:AD:9F:D5:91:56:5A:67:8B:A2:C6:A8:6B:7F:1F
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/1ed9K-HJrZ_VkVZaZ4uixqhrfx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.237.0/24
Signature Algorithm: sha256WithRSAEncryption
71:19:79:20:3a:0f:a7:a7:fc:53:00:87:92:8b:93:38:b9:f8:
2e:c5:d3:d2:6d:12:6c:de:bc:0f:ce:62:7b:4e:20:af:25:80:
20:ae:99:dc:fd:ee:2d:5d:bc:ce:9c:e7:90:82:00:c4:6b:6c:
1a:c6:98:bb:ed:fe:79:d2:37:9f:99:9b:6d:2d:d1:1f:5e:37:
09:6a:7a:b3:1c:cf:80:1b:a4:5c:70:86:4b:4e:5c:52:8d:d5:
bf:e7:39:02:f1:f5:ad:8e:a1:06:dc:5e:83:ef:de:f2:4c:85:
5d:59:f6:f4:23:ce:8b:3e:e4:7b:8c:d3:46:1a:de:d7:cb:02:
f1:c7:e8:1c:ca:ab:5e:d5:cd:32:aa:29:0d:7e:34:6a:49:89:
b5:61:5e:b0:2b:33:10:8c:47:c4:53:93:e4:ac:49:67:dd:60:
1c:47:09:24:cf:fb:91:c9:80:2f:77:7e:c5:a4:a6:7f:b2:34:
c2:e4:c3:36:ec:83:cb:ac:2d:9a:e7:97:73:86:08:5b:f4:aa:
bf:45:09:93:79:9d:a8:bc:f4:2c:e3:56:a5:63:dc:0b:3e:e2:
e1:87:da:13:49:cd:d8:5a:f9:0b:1f:22:24:19:ee:d1:c5:d8:
14:72:ee:ee:bd:96:39:bb:68:1d:9e:95:f5:12:81:5b:e4:45:
7f:f5:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:32 2024 by rpki-client on console-ams.rpki-client.org