Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/v4zpgqIqdVsNV6FmoPi2pFY9q30.roa
File: v4zpgqIqdVsNV6FmoPi2pFY9q30.roa (raw, json)
Hash identifier: 7w/Ypk8HyqKQRMZOIjeA4CtmfBjBFW2CG5R70FrfnUU=
Subject key identifier: BF:8C:E9:82:A2:2A:75:5B:0D:57:A1:66:A0:F8:B6:A4:56:3D:AB:7D
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 01857079AF28F2B30FB0C7CABE1344BB9E91
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/v4zpgqIqdVsNV6FmoPi2pFY9q30.roa
Signing time: Mon 02 Jan 2023 03:15:00 +0000
ROA not before: Mon 02 Jan 2023 03:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.76.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:af:28:f2:b3:0f:b0:c7:ca:be:13:44:bb:9e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 2 03:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf8ce982a22a755b0d57a166a0f8b6a4563dab7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:0e:53:e0:d6:00:ce:51:d5:9e:4a:69:3c:
fa:69:43:78:1e:d4:bb:2f:99:98:d0:ba:ea:1e:5c:
d6:b9:90:6f:b2:93:f7:91:43:b3:cf:e5:2f:44:3d:
37:cc:bc:56:c3:90:3d:b9:a2:2f:94:72:01:da:fb:
a9:11:df:d4:a2:29:2d:c3:a1:1f:7c:9b:23:1a:3a:
90:cc:a2:67:e9:de:76:d9:46:e8:dc:f1:7b:be:f2:
db:58:d5:f0:4c:e1:6b:43:8a:0f:64:69:8d:e2:a1:
02:73:50:fc:d8:05:41:86:fc:dd:c2:97:01:86:b0:
46:93:df:9e:82:4c:af:9e:66:cb:84:bc:2b:14:90:
76:54:25:7d:ac:dc:62:3a:44:3d:7f:68:72:03:6f:
d5:33:cb:63:0e:79:97:b7:6c:4b:7e:b5:18:38:03:
6c:34:f0:c6:c9:77:00:1a:a4:c1:1d:d2:e4:44:27:
6f:88:77:88:79:7b:58:60:51:bd:3d:a1:a9:1e:00:
2e:e0:76:7b:ef:08:e6:77:d8:65:fb:e8:c7:00:a4:
b6:9a:91:df:db:66:e9:d1:53:ea:3f:9f:9e:45:48:
64:65:60:56:25:bc:99:eb:b1:c4:67:13:9a:61:75:
e3:82:4c:f3:59:3c:09:87:23:27:17:3c:e7:d3:1b:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8C:E9:82:A2:2A:75:5B:0D:57:A1:66:A0:F8:B6:A4:56:3D:AB:7D
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/v4zpgqIqdVsNV6FmoPi2pFY9q30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.37.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f3:cc:ea:c4:d4:db:3f:04:01:ba:dd:66:64:bc:4d:8e:87:
ca:f2:a4:cf:0b:90:82:c6:b8:be:44:3d:b3:16:d1:e1:03:d5:
17:ec:09:67:1e:46:a1:c9:df:cf:b7:cd:fb:64:70:bf:b8:ca:
dc:08:0b:e3:5a:64:87:ed:60:5a:cb:9a:87:6a:bb:59:10:a9:
fa:73:5b:87:f8:04:47:71:f0:52:1b:b3:27:45:1f:14:31:22:
3b:45:ae:88:5f:7b:bd:7d:32:cc:e5:38:d9:10:61:3f:04:b3:
25:f6:d0:c9:21:90:69:d0:60:fc:4b:aa:44:d6:d6:17:0c:b1:
5a:60:a0:76:c6:25:32:48:ec:6b:32:6c:e7:35:50:cf:df:0c:
cf:a0:af:13:1c:cd:71:3d:c7:24:60:f5:58:c3:54:90:af:f0:
c0:54:50:36:95:b4:02:65:63:e0:f6:ca:6f:50:df:7c:a8:4b:
ba:f5:9d:ce:91:43:c2:3b:53:45:25:3c:2b:75:4f:e5:5f:5b:
ee:ed:b9:94:a8:7f:dd:5b:2f:0f:40:1b:da:82:f1:15:36:21:
46:7b:5c:6d:97:9f:70:32:03:9c:12:7e:ea:3b:0b:6b:f4:4f:
89:28:c4:74:c8:42:9f:69:5e:4d:5c:6c:55:ec:98:cc:24:ce:
cd:c6:7f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:30 2024 by rpki-client on console-fra.rpki-client.org