Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/jM1MqyT6G5Gq9fdo7PwIWUXxEqk.roa
File: jM1MqyT6G5Gq9fdo7PwIWUXxEqk.roa (raw, json)
Hash identifier: /2jaLcFFv2vVdIhlOLJoW/1LY6Ubrqc8r0dGyACR6AY=
Subject key identifier: 8C:CD:4C:AB:24:FA:1B:91:AA:F5:F7:68:EC:FC:08:59:45:F1:12:A9
Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial: 018570D529F0E7E00BF6455174349717083E
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/jM1MqyT6G5Gq9fdo7PwIWUXxEqk.roa
Signing time: Mon 02 Jan 2023 04:54:56 +0000
ROA not before: Mon 02 Jan 2023 04:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200865
IP address blocks: 37.17.128.0/24 maxlen: 24
37.17.128.0/20 maxlen: 20
37.17.128.0/19 maxlen: 19
37.17.144.0/20 maxlen: 20
185.91.16.0/24 maxlen: 24
185.91.17.0/24 maxlen: 24
185.91.16.0/23 maxlen: 23
185.91.19.0/24 maxlen: 24
185.91.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:29:f0:e7:e0:0b:f6:45:51:74:34:97:17:08:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Validity
Not Before: Jan 2 04:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ccd4cab24fa1b91aaf5f768ecfc085945f112a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:7f:de:f6:a1:a2:8b:57:be:e4:fb:4e:54:
9c:be:81:5a:b3:3d:7d:9c:78:63:e2:e7:7d:8e:b8:
97:45:9b:6e:bd:2a:58:da:78:81:7b:4b:90:50:f5:
18:19:60:c7:84:ee:2f:ac:53:36:dc:79:99:d6:dc:
93:b0:a4:92:2a:60:e4:36:7b:8b:17:66:ca:6e:90:
c5:40:ac:3a:87:4a:47:58:76:d6:75:43:12:36:b4:
08:40:74:1a:10:02:b6:24:81:3a:e5:07:dc:58:75:
8e:1b:a6:1c:27:4d:04:4d:64:2a:8c:21:30:84:02:
d4:75:07:ae:2a:60:63:57:f7:b9:23:50:75:4e:cb:
51:43:dc:34:df:3b:56:0f:90:e8:cb:f6:c2:bf:16:
ea:ae:41:1b:76:c4:b6:b4:8c:78:0f:e3:5d:2e:20:
72:fc:30:2e:41:9d:55:15:b1:c9:36:d8:9d:b3:bf:
3a:2e:17:8c:c4:d1:33:d5:0b:56:23:9c:84:42:61:
a4:f6:2a:75:aa:20:35:44:4e:5e:4e:29:4f:af:1e:
b6:89:0e:b9:2a:ee:74:3b:30:ba:94:33:bf:7c:6f:
b7:50:aa:98:49:dd:22:24:4e:ac:f1:b2:52:85:4b:
2f:bc:97:03:4e:ca:fd:9a:54:d2:ca:24:e7:a2:e9:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CD:4C:AB:24:FA:1B:91:AA:F5:F7:68:EC:FC:08:59:45:F1:12:A9
X509v3 Authority Key Identifier:
keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/jM1MqyT6G5Gq9fdo7PwIWUXxEqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.128.0/19
185.91.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:96:42:19:b8:57:66:2c:52:09:d6:fd:84:a6:8a:cd:de:ac:
b3:9c:e3:bf:ea:e0:1b:80:5f:9a:9b:20:d9:48:90:8c:9b:07:
2e:92:5a:05:fe:2b:77:b3:4d:4f:2d:12:c1:02:d3:31:12:fb:
38:bb:67:59:ce:ea:1c:fa:28:73:cb:7a:e4:e0:e8:38:a1:36:
77:f8:ae:8d:00:92:fd:48:e8:c3:6e:9a:28:05:30:8b:c7:0a:
5c:68:be:6b:55:48:ce:0a:9e:1e:b1:12:63:0e:86:2a:de:83:
cf:15:0d:67:bb:4b:24:9f:c7:f0:3e:65:53:9c:82:c5:46:3d:
57:f7:f1:24:d9:34:9d:2b:2a:3f:b3:08:51:89:cf:f4:93:01:
b6:6d:65:43:28:05:bf:ab:76:c4:2e:df:2d:d7:69:05:d7:ba:
87:e8:76:ca:99:5f:6a:59:6e:28:53:d7:7c:55:f5:b5:87:f0:
2e:6c:b9:03:07:f3:e1:a4:33:32:5d:f0:ff:41:0a:6b:5d:a3:
26:01:6a:89:4e:9d:21:68:85:00:4c:48:e6:07:73:b4:cd:32:
6f:85:5d:be:9b:02:24:5e:06:92:a3:86:b9:7d:02:54:68:1d:
78:f8:09:99:3d:7b:d3:e3:c2:fa:c5:90:55:1e:e0:56:51:3a:
5c:8f:8d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:18 2023 by rpki-client on console-ams.rpki-client.org