Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/a6wNQT22Pp8ehcj0lEl4MGBsnnU.roa
File: a6wNQT22Pp8ehcj0lEl4MGBsnnU.roa (raw, json)
Hash identifier: gvwsa57LTy0OPMnIhho1UEze/jABiunxjw6myfl6IbM=
Subject key identifier: 6B:AC:0D:41:3D:B6:3E:9F:1E:85:C8:F4:94:49:78:30:60:6C:9E:75
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 018B95425C1F60E88F10BD7F07762C55ABD2
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/a6wNQT22Pp8ehcj0lEl4MGBsnnU.roa
Signing time: Fri 03 Nov 2023 12:57:15 +0000
ROA not before: Fri 03 Nov 2023 12:57:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6279
IP address blocks: 37.17.185.0/24 maxlen: 24
37.17.184.0/24 maxlen: 24
37.17.186.0/24 maxlen: 24
37.17.189.0/24 maxlen: 24
37.17.188.0/24 maxlen: 24
37.17.191.0/24 maxlen: 24
37.17.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:42:5c:1f:60:e8:8f:10:bd:7f:07:76:2c:55:ab:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Nov 3 12:57:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bac0d413db63e9f1e85c8f494497830606c9e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:74:93:f3:3b:76:a0:d6:41:26:69:ef:cd:
e6:71:9f:2d:c4:80:ed:c2:94:ee:41:92:07:95:99:
a5:39:df:64:cb:15:0f:c5:d2:40:ed:25:76:42:cd:
dc:bd:47:af:ee:39:0b:6d:bc:91:8c:7c:5f:8b:db:
d7:e4:d1:3a:53:47:b8:24:39:5f:5e:3f:cf:fa:30:
ae:5f:e0:cb:68:3c:a8:6d:f8:4d:2c:e5:fc:0d:6d:
c7:6e:14:cd:5f:9c:8f:6b:36:0f:40:d8:7d:26:0a:
70:40:7e:3d:70:a6:26:b5:b5:40:4f:48:8f:69:d6:
0e:9a:24:3e:81:95:19:7d:ac:61:d5:a1:db:87:cb:
ba:5a:d8:18:66:5f:e6:46:b4:2e:94:de:a3:c5:12:
8c:ca:59:d8:94:39:59:6a:87:ad:6a:a8:93:52:5e:
1d:06:da:d3:aa:e2:79:4f:a5:11:71:5d:61:fb:58:
e0:ce:b3:c5:e5:85:b1:70:b1:61:56:f6:2b:b6:fe:
08:c4:df:05:06:fc:e9:3c:64:20:8c:82:95:cd:e4:
3e:df:72:4b:c0:0f:f5:8b:c2:3f:01:fa:b4:f3:77:
b5:98:51:c3:2d:2b:bf:1f:4f:ce:89:2f:ad:4e:7a:
3c:c9:21:45:90:91:b8:0e:17:4f:ef:28:72:5b:33:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AC:0D:41:3D:B6:3E:9F:1E:85:C8:F4:94:49:78:30:60:6C:9E:75
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/a6wNQT22Pp8ehcj0lEl4MGBsnnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.184.0-37.17.186.255
37.17.188.0/22
Signature Algorithm: sha256WithRSAEncryption
e2:92:aa:95:e6:e1:75:21:7d:b4:31:39:17:cb:40:19:ae:c4:
0b:85:8d:21:22:b1:54:58:50:2e:e3:18:d6:e1:f6:92:e5:66:
8e:4c:56:c7:c4:3d:52:6e:68:5a:32:da:7b:8e:cd:74:c0:0d:
6e:b4:59:02:10:d0:e3:3d:2d:09:7d:d7:e2:04:29:14:86:4f:
5b:a9:25:98:86:59:22:c5:59:c6:50:55:f8:4d:32:ce:6c:5b:
a6:bc:0d:08:4a:79:68:28:04:0c:0c:ab:28:ab:91:00:b8:1f:
ae:28:29:47:f7:74:28:a2:20:04:93:cd:1d:d2:5d:8e:6f:dd:
7e:5a:82:8a:69:4a:26:f9:a4:a2:da:3e:71:f4:84:e5:7e:31:
60:ca:75:d5:d4:aa:d5:2b:25:99:a6:bd:a7:fa:a8:5d:c7:5e:
b5:e1:c8:10:e6:94:6c:b2:60:3b:7e:89:7a:ff:d3:44:bb:49:
fc:33:f9:3e:bf:fd:a0:67:ac:bd:8a:25:67:46:c3:1a:bb:62:
5d:73:93:29:e1:45:cd:fd:46:66:71:95:73:1c:16:fc:22:35:
f6:13:cc:5b:00:11:20:43:70:7c:3e:84:37:00:e3:d3:77:eb:
4d:01:0d:dc:c5:bd:15:fd:17:6b:a1:c9:2b:d7:1c:f3:6c:69:
9d:71:d2:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:14 2024 by rpki-client on console-fra.rpki-client.org