Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/sLYTuIcCoVfBFE9FVUWRNqMqGXQ.roa
File: sLYTuIcCoVfBFE9FVUWRNqMqGXQ.roa (raw, json)
Hash identifier: rL2bvuHXOIcT2JD5ushCPh0vxly9KfF5BRTdgZib5Sk=
Subject key identifier: B0:B6:13:B8:87:02:A1:57:C1:14:4F:45:55:45:91:36:A3:2A:19:74
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 0186E49C33AF72CBFC58897DC341F8CADC14
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/sLYTuIcCoVfBFE9FVUWRNqMqGXQ.roa
Signing time: Wed 15 Mar 2023 09:31:27 +0000
ROA not before: Wed 15 Mar 2023 09:31:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 178.130.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:9c:33:af:72:cb:fc:58:89:7d:c3:41:f8:ca:dc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Mar 15 09:31:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0b613b88702a157c1144f4555459136a32a1974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:de:72:f7:47:fd:c9:ac:3c:9a:8c:7d:89:
a3:7a:47:01:11:49:f6:e3:fa:35:32:9e:f4:9a:77:
bb:87:c0:c0:2d:94:15:a9:a7:ae:a7:4c:20:1e:9b:
75:67:be:dc:3c:09:58:e1:e0:b2:72:b2:6f:21:62:
38:3e:40:eb:bd:7d:60:36:50:90:4d:27:33:e3:3e:
6a:bf:9f:d6:60:e8:af:79:09:a7:6f:f8:aa:0f:c9:
c7:30:db:2f:30:a3:de:3b:e9:53:f9:b2:f1:9e:ef:
e2:4b:2e:e0:45:54:f4:7d:80:83:ea:30:62:7a:18:
b1:2c:4f:70:9b:28:94:48:d3:59:eb:64:e2:fa:9e:
01:ea:85:ed:33:0c:a1:b7:83:68:4e:32:d6:c0:69:
03:ca:c6:3a:f8:f1:3e:2d:a3:b8:bd:1b:75:f4:5c:
16:0c:17:6a:fb:b0:89:b2:bf:39:ac:3f:f8:23:2e:
05:da:2a:1e:0e:7b:8c:52:7f:97:df:e5:28:6e:44:
a0:bf:c6:26:4b:8a:56:0b:e2:7a:dc:d5:53:ee:59:
51:73:a8:ac:2d:c8:4a:51:95:4c:2a:61:d0:6b:02:
6a:78:a6:4f:5f:f1:3a:2a:7f:d9:7a:68:6a:4c:93:
84:28:59:8c:32:ac:3a:d2:37:46:b8:b9:cf:86:db:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B6:13:B8:87:02:A1:57:C1:14:4F:45:55:45:91:36:A3:2A:19:74
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/sLYTuIcCoVfBFE9FVUWRNqMqGXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.130.131.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0d:37:51:07:31:f1:91:79:fb:f8:00:82:21:26:f6:69:78:
44:43:07:fa:ec:7e:a8:26:fa:80:0a:fc:13:7e:33:7d:72:69:
5c:d3:cf:2e:78:2e:72:9e:1c:e6:28:f3:3a:2c:92:4a:c2:0d:
f5:0f:fe:b2:44:84:58:3f:52:0a:0e:e5:9d:47:b9:b0:f3:42:
3e:93:a6:1f:8c:68:b0:a7:3e:c5:ca:24:0c:e6:1a:91:4c:b7:
00:97:99:b3:12:4f:b3:13:34:68:be:fe:78:11:b6:48:6c:88:
30:67:18:c1:40:2a:47:76:ea:c3:e0:58:cd:68:96:d0:ee:7d:
08:9e:d9:a2:a6:94:f1:70:9b:74:38:b9:ca:2e:1a:4e:d8:6b:
34:37:bc:d3:e0:c6:0e:24:9f:e7:ac:81:cb:f5:bd:35:32:a5:
ca:e2:66:8b:53:7f:5b:20:29:be:d0:48:ce:d9:02:cc:2f:4f:
b9:0d:be:12:10:d1:a8:87:25:8c:58:f3:b4:b7:f2:6f:51:6d:
81:08:d2:51:5e:22:a1:1e:6b:35:d8:1c:12:5c:5e:15:76:fb:
c5:86:b5:50:3b:59:88:63:8f:fc:9d:e6:35:ff:6d:67:02:49:
09:49:9f:55:6f:21:f0:30:88:ce:06:61:55:7f:8b:e2:b2:96:
73:26:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-fra.rpki-client.org