Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/V_75tZ0TZ6SxAqf7nsmDXPLl5AA.roa
File: V_75tZ0TZ6SxAqf7nsmDXPLl5AA.roa (raw, json)
Hash identifier: 0uDiJ5O9GYWAYpFnG+/Djaui9ZKEk1/2J0A2MCPQJgs=
Subject key identifier: 57:FE:F9:B5:9D:13:67:A4:B1:02:A7:FB:9E:C9:83:5C:F2:E5:E4:00
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 018ACB7ACD12FF936334FE12F2CCD0D1DD78
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/V_75tZ0TZ6SxAqf7nsmDXPLl5AA.roa
Signing time: Mon 25 Sep 2023 08:35:37 +0000
ROA not before: Mon 25 Sep 2023 08:35:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16839
IP address blocks: 138.12.128.0/17 maxlen: 24
37.98.232.0/21 maxlen: 24
148.139.0.0/24 maxlen: 24
163.120.128.0/17 maxlen: 24
148.139.0.0/16 maxlen: 24
2a04:37c0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:7a:cd:12:ff:93:63:34:fe:12:f2:cc:d0:d1:dd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Sep 25 08:35:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57fef9b59d1367a4b102a7fb9ec9835cf2e5e400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:98:c2:c5:91:40:ce:c2:f3:35:e9:72:35:
5c:6d:1c:a6:b9:c3:9d:6b:3c:80:c7:70:52:90:ab:
ad:e4:2e:c0:2f:f6:9f:69:ae:d8:a8:39:03:47:5f:
07:73:b2:5c:e6:b0:b8:c4:91:1c:ea:f5:1f:6b:e8:
4d:9e:be:8f:cc:46:0d:51:0c:7a:f7:be:a5:fa:e1:
f0:5e:e5:2b:36:75:ab:e9:86:22:a3:95:0b:3a:56:
91:f0:c2:2f:3e:ed:a9:76:53:cb:9a:5e:34:45:f4:
8e:50:27:6d:22:c0:e4:49:46:7a:c2:ce:4a:49:1e:
b2:31:48:d7:d9:91:7b:3b:57:4c:ea:19:54:aa:2b:
a3:16:8d:bd:a7:a8:e7:8b:53:c1:47:d9:00:c8:95:
b7:2f:54:0a:aa:12:af:d5:07:98:dc:3f:c1:dd:02:
c1:db:ab:70:58:cb:f4:87:da:68:50:5c:21:4b:e9:
96:20:bb:73:c4:ad:3b:5b:1b:8c:ea:ea:46:0a:ad:
f1:b6:8d:29:9f:27:33:29:70:2f:6c:01:8a:aa:ad:
43:6b:50:fb:9f:58:c2:aa:be:aa:b6:ad:d8:5e:d5:
ae:f9:21:39:a0:c1:bc:ad:e8:bb:7e:aa:27:a7:82:
61:02:fc:6b:da:ad:20:3f:c0:23:94:6a:41:94:da:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FE:F9:B5:9D:13:67:A4:B1:02:A7:FB:9E:C9:83:5C:F2:E5:E4:00
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/V_75tZ0TZ6SxAqf7nsmDXPLl5AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
138.12.128.0/17
148.139.0.0/16
163.120.128.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:65:60:a0:52:63:04:7c:8b:15:f4:31:b2:23:eb:10:9a:55:
90:ce:c3:62:c1:0c:b9:ae:5e:f8:37:0c:e1:08:33:2d:f4:c6:
fe:53:2c:8f:f4:5b:c1:34:7e:a6:6f:5e:0a:1e:c5:0f:b2:26:
a7:21:74:60:5d:e1:74:30:45:83:dd:e7:ce:f4:3e:ea:46:0d:
b7:f8:3b:39:4b:f3:35:be:a2:8a:94:1c:77:95:8d:d4:cc:80:
10:f8:66:70:77:a6:68:54:bc:6b:d9:9d:ae:62:2b:63:94:9e:
3b:26:09:26:f3:f6:34:d1:86:aa:47:df:eb:8f:67:78:2c:a0:
d9:bb:7a:49:67:ec:f8:cb:a4:50:78:6e:5c:49:30:c2:28:31:
9b:85:14:0d:62:51:9a:0d:bb:ea:66:9c:c6:b4:36:c3:40:50:
1d:8b:77:72:6d:16:3b:a4:33:d7:3b:19:2e:28:fc:0a:63:16:
5b:14:35:0c:4a:1a:1e:cd:ce:d5:ab:18:8e:44:93:93:46:98:
be:c1:d6:1c:39:2d:66:7a:c9:fa:3e:54:38:b3:5e:bf:19:39:
71:51:c5:8b:a8:11:3c:2a:79:1b:c0:50:af:63:ef:1e:68:71:
6b:ec:0b:ec:7c:3e:ab:b2:27:f1:9e:8f:80:c3:a5:27:c6:55:
66:8a:fb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 13:02:42 2023 by rpki-client on console-fra.rpki-client.org