Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/K9ItNCVgGw7_Y7NOgIcJ8ggKrAA.roa
File: K9ItNCVgGw7_Y7NOgIcJ8ggKrAA.roa (raw, json)
Hash identifier: fA9BHSq2Djs95J7MFNKLwEl5/YH03sGn9QAy2dkGNWQ=
Subject key identifier: 2B:D2:2D:34:25:60:1B:0E:FF:63:B3:4E:80:87:09:F2:08:0A:AC:00
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 0190B550909E5B77EABBCEF8DF027B170F2F
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/K9ItNCVgGw7_Y7NOgIcJ8ggKrAA.roa
Signing time: Mon 15 Jul 2024 07:34:34 +0000
ROA not before: Mon 15 Jul 2024 07:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60989
IP address blocks: 37.34.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 16:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b5:50:90:9e:5b:77:ea:bb:ce:f8:df:02:7b:17:0f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: Jul 15 07:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bd22d3425601b0eff63b34e808709f2080aac00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:9e:41:ac:42:f6:50:2a:0b:1c:5c:d1:03:
d2:a9:1a:36:2a:0a:13:ad:5f:a4:10:3c:f0:78:5a:
33:e8:82:64:f0:b1:15:c8:57:a4:02:91:d1:c9:1a:
8b:3c:e1:3e:df:59:95:c7:d1:fe:90:8a:72:7b:3f:
ff:69:74:61:9e:42:f6:92:a2:4b:68:f9:27:bd:78:
8d:64:46:5b:a7:35:22:49:39:04:d9:cc:15:aa:e2:
97:7e:ba:42:3a:e0:ed:00:2c:b2:45:d2:55:82:01:
8a:99:8d:bb:3e:06:2b:ac:79:7e:bd:61:9f:80:cb:
7e:da:9a:23:03:38:72:90:12:05:88:f0:63:f0:0f:
7e:58:5b:7c:1f:21:06:a6:d8:4e:ec:24:d9:7b:33:
30:1b:75:c5:c6:4f:14:a5:dc:b1:52:60:5c:ba:66:
cf:3a:a2:54:a0:16:bf:e5:1e:16:36:28:a7:41:cc:
c4:a0:49:97:db:9b:14:dd:46:0b:d6:4b:cb:31:ec:
71:cf:97:de:0a:b9:e5:4e:99:29:06:ec:2a:be:25:
f9:7d:df:50:3a:99:17:95:46:22:8a:4e:e9:90:ac:
40:d5:a4:cb:22:42:0a:48:40:cf:95:54:2b:1f:6b:
cb:53:77:0a:ea:86:91:e1:24:b8:99:dc:9e:0c:11:
6c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D2:2D:34:25:60:1B:0E:FF:63:B3:4E:80:87:09:F2:08:0A:AC:00
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/K9ItNCVgGw7_Y7NOgIcJ8ggKrAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.76.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0b:fe:7a:2e:40:c8:4b:a9:29:4d:3b:d7:ab:eb:3e:7b:b4:
da:9f:30:95:c8:89:4d:93:8d:b5:28:04:29:07:e1:ba:c2:e5:
e4:18:5f:6b:0b:81:3e:42:71:d1:ee:d7:4e:25:4e:9d:99:de:
ec:69:db:d8:c0:f0:c1:e2:cd:2e:bf:cf:cb:5e:f6:8a:93:96:
69:4e:c1:93:61:25:1c:11:f6:23:c2:5d:20:e1:26:27:87:5f:
15:bf:2f:1f:f5:d6:73:cd:57:ca:9d:8a:bc:1f:e4:ba:6f:db:
7b:b3:c0:bf:50:bc:88:fe:6f:b8:98:48:b9:2b:de:e8:80:bc:
49:bc:7d:06:52:1f:4e:9f:23:04:39:67:c4:dd:be:b0:52:65:
0b:a7:68:2e:aa:60:c1:ca:69:15:f4:66:2c:6a:6e:aa:2c:ba:
68:84:04:1a:fe:f4:4a:54:7b:4f:71:92:15:b4:05:82:d6:6f:
33:f0:18:50:41:c8:ad:e5:9a:da:aa:e1:ed:66:fa:8f:61:fd:
57:91:fb:5b:d1:f6:47:92:d9:00:4b:d2:1c:85:2b:85:7d:c0:
6d:16:fa:32:a0:f7:da:04:e1:f2:bb:1c:9e:5f:cd:e3:aa:7d:
c9:65:00:91:8e:ba:93:50:a2:ba:cd:7c:ae:a5:ed:62:69:fb:
2f:3d:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 19:59:40 2024 by rpki-client on console-ams.rpki-client.org