Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/tqk_xYirHMVtNe_OI3pdVnOe-cA.roa
File: tqk_xYirHMVtNe_OI3pdVnOe-cA.roa (raw, json)
Hash identifier: VIn+IyPfkt0bx8A8/n/Fb6OX/9JpqN8RshNZwJqYTa0=
Subject key identifier: B6:A9:3F:C5:88:AB:1C:C5:6D:35:EF:CE:23:7A:5D:56:73:9E:F9:C0
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 0189E05D9D392295949A2F6BC8E005E1758F
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/tqk_xYirHMVtNe_OI3pdVnOe-cA.roa
Signing time: Thu 10 Aug 2023 16:52:58 +0000
ROA not before: Thu 10 Aug 2023 16:52:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 926
IP address blocks: 37.10.116.0/24 maxlen: 24
2a13:9440::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 14 Aug 2023 11:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e0:5d:9d:39:22:95:94:9a:2f:6b:c8:e0:05:e1:75:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Aug 10 16:52:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6a93fc588ab1cc56d35efce237a5d56739ef9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d0:35:a5:26:e4:7e:9e:77:75:8b:8e:c9:80:
6a:c4:dd:0c:1c:32:5c:ca:c4:26:02:00:d1:24:b7:
fb:ce:a2:b3:7e:b1:65:e2:64:66:9a:17:53:62:13:
06:3f:7b:c7:15:ae:54:d7:c8:db:9e:de:9c:d6:1f:
a7:27:e4:56:71:e2:13:06:46:3e:4a:8f:b3:e8:2e:
e8:43:85:ce:20:6f:ba:ed:b0:2b:6f:0f:e5:e2:b4:
90:56:11:e3:c7:a2:45:3a:41:c9:95:63:3b:89:3f:
52:54:8e:7e:ec:98:b7:9f:60:4d:29:b5:b0:23:17:
13:e8:0a:d8:8c:fb:fc:fc:66:55:e2:e7:22:36:c4:
97:b7:d2:5c:ee:b7:76:75:f8:88:d2:ee:8c:db:39:
6f:0f:ce:04:4f:c5:ca:cf:17:48:76:e4:89:86:58:
ee:ef:61:6d:32:65:b5:88:66:6c:00:26:17:b7:fb:
dc:67:2e:91:82:e1:1c:9e:c8:84:6b:e7:0d:ab:97:
26:56:5b:1e:1e:cf:ba:0c:06:c5:96:2b:41:a0:b4:
bb:b6:ef:c0:6b:4f:94:f5:4f:5b:d0:92:9b:32:ee:
48:d4:2d:ad:89:22:fd:7a:76:99:3f:25:4d:a5:16:
4b:1d:ea:a5:28:82:b3:c0:8a:96:75:55:0a:4d:1e:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A9:3F:C5:88:AB:1C:C5:6D:35:EF:CE:23:7A:5D:56:73:9E:F9:C0
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/tqk_xYirHMVtNe_OI3pdVnOe-cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.10.116.0/24
IPv6:
2a13:9440::/29
Signature Algorithm: sha256WithRSAEncryption
78:02:4b:51:bb:45:d8:c7:5d:c1:79:7e:28:a7:5d:ec:c6:ce:
06:1a:3c:5a:60:f7:30:5d:95:a2:57:51:09:ce:3c:e6:a4:a3:
25:e7:94:3b:0a:b5:f6:01:6b:7c:b9:f1:e3:33:16:b5:25:21:
d1:62:c7:69:46:a8:16:d1:4c:8a:ae:6e:09:41:2a:ee:6d:76:
4c:39:7b:86:b3:7b:a6:ef:7e:33:e7:f9:28:1b:6b:8b:36:9a:
89:78:93:93:f4:0f:83:9a:2a:9e:f4:e4:31:9a:3b:a7:cd:4d:
81:a0:f6:70:5d:62:0d:ee:81:d8:c9:8a:8e:7f:5b:cc:a9:2b:
18:2f:4d:bc:00:99:85:1d:d6:70:ed:08:40:58:c3:bf:c5:62:
d0:25:43:b4:f5:d1:be:5d:f7:ab:c9:f5:60:16:88:b4:ee:76:
9e:35:64:ae:d2:92:73:10:7c:8c:86:74:e8:3d:11:bc:66:03:
2b:ae:7e:7e:8b:09:16:f8:a7:d5:51:04:c5:87:d7:d2:c2:b3:
b4:d3:0b:e3:96:ad:39:86:8f:c4:3d:1d:12:4a:7d:9e:bc:19:
b4:7e:1a:da:20:29:33:cd:d0:29:47:93:e4:46:f6:c4:55:f5:
ab:0c:40:44:e4:ae:03:fd:3a:e9:45:ff:76:17:c3:14:b0:ef:
19:a0:62:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:37 2024 by rpki-client on console-fra.rpki-client.org