Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/xaPhIsRDY0HmSNL3QgIcFp7F8bM.roa
File: xaPhIsRDY0HmSNL3QgIcFp7F8bM.roa (raw, json)
Hash identifier: BMTN7XuFY8751kZrUM+zLj85ND58Ua5UDc7TONwHzcE=
Subject key identifier: C5:A3:E1:22:C4:43:63:41:E6:48:D2:F7:42:02:1C:16:9E:C5:F1:B3
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 0186D7A32D0351830683B6F380FE2BBFA686
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/xaPhIsRDY0HmSNL3QgIcFp7F8bM.roa
Signing time: Sun 12 Mar 2023 21:04:00 +0000
ROA not before: Sun 12 Mar 2023 21:04:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 37.153.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d7:a3:2d:03:51:83:06:83:b6:f3:80:fe:2b:bf:a6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Mar 12 21:04:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5a3e122c4436341e648d2f742021c169ec5f1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:64:d2:ea:84:1d:11:3e:2f:91:8d:73:a3:
20:9f:83:d3:6d:8a:00:70:fb:40:1a:01:c9:bf:e8:
6f:7b:39:d5:e9:38:c5:89:a4:db:09:ac:b3:02:b1:
b8:5a:ca:37:5b:66:a8:f6:f6:c8:0e:a4:3f:61:1f:
e7:1b:96:9e:eb:75:30:74:7f:91:a9:77:8b:f0:0f:
19:55:6d:7c:a2:cc:9a:df:79:27:35:2f:14:70:33:
03:84:b0:15:f4:f9:ac:31:fa:cb:1f:ca:ea:81:f9:
0d:64:07:0c:e9:78:c6:8f:ce:be:72:41:c1:4a:01:
bb:a1:a0:e5:d9:b1:71:c2:69:00:69:c3:83:8e:4d:
ed:13:b7:85:24:91:25:7c:08:f5:39:3a:d7:89:92:
02:20:06:56:35:58:1f:f4:b6:2d:9a:7c:34:bc:e7:
2a:f5:5a:83:fb:46:f4:86:09:e2:35:26:5a:ce:bc:
5c:43:49:a7:7c:c0:52:a4:b0:b4:8c:6c:47:c4:32:
5a:f3:60:e9:b9:a4:38:10:63:78:4e:94:91:88:30:
f4:e8:4a:74:5f:d4:94:7e:aa:2f:8e:be:a1:ed:32:
57:dc:e3:b1:f0:59:67:ec:db:34:c9:0f:cd:4a:13:
6d:bf:b9:01:dc:27:fa:65:91:3a:19:97:28:72:3e:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A3:E1:22:C4:43:63:41:E6:48:D2:F7:42:02:1C:16:9E:C5:F1:B3
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/xaPhIsRDY0HmSNL3QgIcFp7F8bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.157.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ee:c0:d1:2d:ed:98:62:5d:c4:75:ef:1a:70:b9:6f:38:d5:
2f:20:c0:fc:48:13:ef:36:0a:26:00:73:c7:f1:79:0f:14:42:
85:4f:68:e8:73:95:83:05:2f:20:01:30:d8:c3:bd:b3:25:9c:
84:38:de:6c:a3:e5:1c:2d:da:2d:ba:38:67:44:cf:06:72:9c:
cc:01:cc:57:74:0f:d5:c6:a6:f4:5b:ba:af:99:8e:0f:3c:73:
37:4d:c1:14:62:57:f5:19:6b:de:fa:11:6f:57:e9:3f:45:92:
a5:93:4d:3a:55:a9:36:4b:5e:51:2e:eb:c0:92:32:4f:f9:62:
f5:12:5b:10:ce:8e:90:7b:a0:ed:bc:2d:f0:5f:f4:a1:e0:44:
5d:f1:bb:d8:43:5b:c4:b8:e4:16:b0:2c:74:ee:24:15:b4:71:
40:57:c8:cf:a4:03:32:53:e5:12:ab:20:5b:91:17:e5:21:fa:
bd:50:b9:a9:74:f9:0f:ea:4d:1f:db:f1:8f:62:9d:66:e0:54:
98:3d:68:98:13:7f:eb:e9:18:3f:6e:5d:42:09:79:5a:a7:43:
82:46:5b:11:10:78:4a:1b:9c:3b:ae:57:77:8e:25:af:a4:49:
53:77:9a:43:85:37:44:89:15:77:b9:76:75:90:78:8d:2e:c4:
15:a7:11:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:45 2024 by rpki-client on console-ams.rpki-client.org