Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/4bRRJh0xEG3nmbDmLuJZJFrA2Qw.roa
File: 4bRRJh0xEG3nmbDmLuJZJFrA2Qw.roa (raw, json)
Hash identifier: iE0t0eIwszYCEukWBA2zisOs5PMHQ41nMvpKZAJOWt0=
Subject key identifier: E1:B4:51:26:1D:31:10:6D:E7:99:B0:E6:2E:E2:59:24:5A:C0:D9:0C
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 01856C9CB182C02EA407EA73D89D5A44D685
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/4bRRJh0xEG3nmbDmLuJZJFrA2Qw.roa
Signing time: Sun 01 Jan 2023 09:14:46 +0000
ROA not before: Sun 01 Jan 2023 09:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59972
IP address blocks: 185.37.200.0/24 maxlen: 24
185.37.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:b1:82:c0:2e:a4:07:ea:73:d8:9d:5a:44:d6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Jan 1 09:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1b451261d31106de799b0e62ee259245ac0d90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:35:ae:ec:f3:a2:a7:ca:97:31:1e:47:1f:
e0:c0:eb:f0:2c:c3:e8:47:99:70:37:57:2e:99:32:
d5:af:c8:62:82:8c:b6:95:bf:d4:12:b6:8c:d9:aa:
6c:9f:4d:b9:aa:89:e9:2a:98:5d:93:cd:eb:56:a6:
a4:cf:05:c9:f3:e8:1d:ea:0b:32:29:31:94:0e:89:
48:47:1d:d7:e6:32:aa:14:36:01:e6:9e:e0:ea:27:
47:33:1d:20:55:82:11:5b:5d:2e:a3:02:a8:a8:eb:
95:71:e2:a3:38:32:8e:8f:a8:8f:ea:13:10:cb:1c:
0a:e6:38:63:51:9b:ee:10:fc:b5:7c:1a:16:97:21:
5f:9e:4a:91:4f:5a:ff:4c:80:5e:1a:ba:d1:cf:3e:
e8:9c:bf:b8:1b:6d:ff:d0:88:05:f6:e5:b8:97:d4:
d8:5f:31:b2:66:fe:49:58:25:7a:a2:49:d3:0a:02:
d9:a1:49:39:91:86:df:98:08:f6:85:34:38:f8:5c:
f5:f9:50:07:0b:2d:b5:f3:88:ce:c3:53:ca:a1:84:
2f:f2:e1:a9:6a:f1:7d:6f:90:90:da:1a:ca:5f:99:
08:4f:a3:9e:ee:6f:1a:50:c7:ff:28:b0:ee:2c:f2:
86:28:1f:8f:63:e4:19:31:ba:a3:eb:19:ed:c7:b6:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B4:51:26:1D:31:10:6D:E7:99:B0:E6:2E:E2:59:24:5A:C0:D9:0C
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/4bRRJh0xEG3nmbDmLuJZJFrA2Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.200.0/24
185.37.202.0/24
Signature Algorithm: sha256WithRSAEncryption
59:65:b6:21:8c:22:df:2f:1b:08:34:07:0c:6e:40:bd:dc:38:
30:38:29:e3:1e:bd:6c:7f:8e:e8:35:6c:c5:a4:02:67:14:ff:
52:69:d3:6b:48:11:cf:6a:f2:3b:64:d0:fb:f0:8b:8c:c8:cf:
d8:30:8e:44:8b:13:d9:02:62:9e:e1:8b:48:fb:81:de:51:26:
3d:4c:4a:c5:1d:cf:df:64:64:7d:d2:14:ea:ea:b9:2a:45:96:
f2:03:5e:71:ce:3a:44:13:9d:36:af:46:a3:4e:55:77:4a:68:
80:cc:53:a1:2f:52:37:34:d6:8d:6e:4c:07:79:df:49:bf:c2:
2f:20:72:ef:f7:bc:8a:40:62:52:41:52:17:84:5f:1b:00:c1:
3b:d0:de:88:e3:f3:c1:79:dd:91:7d:72:0f:69:33:93:29:81:
34:8c:6a:89:eb:ab:93:9f:45:a9:2a:54:10:92:6a:e0:fe:fa:
72:21:ee:4b:47:8c:1e:5f:75:f9:9a:78:dd:a8:3d:81:93:4b:
6b:40:72:00:15:82:2e:ba:47:a8:0a:f9:c3:b6:71:2b:48:e8:
62:89:41:7f:ac:4a:b0:af:5f:df:7d:e3:85:b3:69:a4:02:50:
0f:92:96:3c:06:8a:01:fb:14:b6:e4:e7:8c:a3:4f:55:ba:f1:
e7:06:5c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:55 2024 by rpki-client on console-ams.rpki-client.org