Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/eO57abasbdCC_1DiNzMuJZHWrUQ.roa
File: eO57abasbdCC_1DiNzMuJZHWrUQ.roa (raw, json)
Hash identifier: MHavkA1dObWmIWqz0st6kKQQYS9x0MI3N9EISmBE0VI=
Subject key identifier: 78:EE:7B:69:B6:AC:6D:D0:82:FF:50:E2:37:33:2E:25:91:D6:AD:44
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 0187B34340016F6C1884DD5F7A1D6BC4C519
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/eO57abasbdCC_1DiNzMuJZHWrUQ.roa
Signing time: Mon 24 Apr 2023 12:35:41 +0000
ROA not before: Mon 24 Apr 2023 12:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203269
IP address blocks: 37.10.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:43:40:01:6f:6c:18:84:dd:5f:7a:1d:6b:c4:c5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Apr 24 12:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78ee7b69b6ac6dd082ff50e237332e2591d6ad44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:9a:54:e7:7a:de:1c:09:b4:73:82:01:1a:
4a:e4:2e:d5:90:6e:27:19:c4:b7:f9:e1:b1:15:3e:
62:5d:9a:5d:82:7f:4e:8d:89:3c:e0:35:72:53:0d:
f6:bc:ae:9f:ba:4b:1a:8a:96:f4:06:0c:22:68:82:
71:80:b8:6e:2b:d5:29:0a:a8:34:0c:1f:11:94:c3:
33:87:0e:0b:2a:92:ee:64:6f:16:a5:b6:c6:21:9a:
96:e2:9f:cf:0a:20:72:7c:d1:08:d4:af:3c:36:f4:
91:45:ae:2a:7a:d9:18:e9:e6:d4:5d:e0:ab:a0:99:
a2:84:b2:fc:36:03:20:1e:bc:5d:70:42:89:9b:52:
56:bd:88:7c:b6:be:0a:08:7f:5c:80:7b:5b:70:19:
0c:b3:e9:3b:1c:69:aa:dd:17:58:67:b8:ae:89:6d:
96:fb:4d:52:f9:b6:76:b3:30:a8:9c:f4:4d:e3:0d:
d3:ee:9f:7f:68:a4:61:50:00:fa:15:a8:76:45:94:
1e:45:f4:20:b9:65:cf:1c:b0:e5:bc:65:ae:86:09:
04:c0:45:71:82:86:21:ec:25:f5:2a:84:8f:36:c2:
c3:6f:0b:3a:95:4c:1b:3e:38:26:c5:c3:cd:46:01:
fe:39:f4:6a:18:45:bb:71:19:6d:3b:af:88:e2:dd:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EE:7B:69:B6:AC:6D:D0:82:FF:50:E2:37:33:2E:25:91:D6:AD:44
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/eO57abasbdCC_1DiNzMuJZHWrUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.10.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:de:2d:92:12:c6:12:fd:af:4c:12:c6:f9:70:1c:7d:52:23:
64:3b:72:29:a4:62:01:1a:c9:25:34:45:14:ee:9c:d6:45:61:
80:43:9e:b1:e6:a3:31:19:04:7e:13:74:f9:4f:9b:32:11:4e:
2f:ad:27:8b:9e:a2:9e:b6:ae:9d:30:eb:18:bb:6c:6e:5e:25:
97:2c:15:58:d1:65:18:59:7b:be:ff:09:46:65:61:7d:90:44:
1b:4c:65:79:d3:86:d7:1a:43:03:75:09:16:8d:d1:19:87:2e:
88:97:7d:dd:4d:06:a4:2e:54:0e:e6:49:b9:5d:10:e4:6d:26:
8e:8a:2e:e2:ff:6f:ab:05:ba:a6:17:78:58:f9:c3:8a:00:73:
b4:80:0f:b7:de:8c:ef:9b:28:ab:07:c0:c0:36:1f:98:17:97:
f8:01:f8:ba:47:3e:6d:39:90:c2:24:f8:e5:26:8d:71:60:5e:
17:d7:50:40:36:b7:97:8b:5f:e5:fe:f1:2f:89:db:4c:a8:23:
cf:76:f9:5d:01:0d:9f:19:c1:96:8c:e6:65:14:48:20:05:85:
45:c1:25:6e:ba:d8:58:f8:90:ce:ed:5e:19:3e:fe:52:01:9d:
10:54:bd:80:1c:ac:4f:c4:3c:f0:48:ef:23:c6:20:21:13:49:
b3:16:3e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:15 2024 by rpki-client on console-fra.rpki-client.org