Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/lNxY9LeN4R-T1kYpfY_ddzBGeiU.roa
File: lNxY9LeN4R-T1kYpfY_ddzBGeiU.roa (raw, json)
Hash identifier: 564TtQTNtIgECQfVRN8m0Xalso9LU73Z/WRzdc0FD9s=
Subject key identifier: 94:DC:58:F4:B7:8D:E1:1F:93:D6:46:29:7D:8F:DD:77:30:46:7A:25
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 01856B37D3B2219ED554ABB5F6FD13B8CE2A
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/lNxY9LeN4R-T1kYpfY_ddzBGeiU.roa
Signing time: Sun 01 Jan 2023 02:44:58 +0000
ROA not before: Sun 01 Jan 2023 02:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202193
IP address blocks: 37.200.80.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:37:d3:b2:21:9e:d5:54:ab:b5:f6:fd:13:b8:ce:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Jan 1 02:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94dc58f4b78de11f93d646297d8fdd7730467a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:7d:cd:42:e1:a1:70:13:59:80:bb:f9:4b:
24:17:4d:ca:b2:4a:9c:8d:f5:84:57:f9:cb:ee:78:
c2:2f:50:08:06:81:d3:91:e1:07:8c:fe:96:3d:d2:
3a:2a:1b:dc:98:39:d9:97:25:2d:a7:59:89:a9:22:
4e:52:38:8a:80:b9:c6:e9:ba:89:ed:3c:52:54:41:
8b:90:04:49:af:41:3a:f9:40:a4:24:9b:fe:8b:51:
30:14:e8:31:6d:ba:6b:e6:c1:40:ae:2f:27:37:ba:
89:69:da:ee:d4:c9:fc:54:0b:ce:26:8a:a4:c4:2f:
40:35:24:4a:b5:7b:fa:6b:c4:09:13:72:07:d8:95:
ec:21:49:6c:57:e7:94:93:25:7f:12:0e:dd:1b:b2:
da:9b:5f:2f:09:eb:d6:1a:57:f6:2c:de:49:bd:35:
a1:66:86:a9:44:36:b3:37:ae:b2:2e:94:e0:6c:d5:
73:ab:a4:78:53:8a:8b:98:7d:a0:47:bb:3a:0a:12:
71:a1:b4:0e:4f:22:16:39:05:8e:95:08:ba:6f:ab:
0c:fc:76:7d:52:2e:67:8b:35:c2:d8:8d:06:0d:4b:
55:1e:7e:b9:bc:2c:9f:c9:3f:77:40:e6:a6:f6:cd:
d8:16:bf:a4:58:f7:78:c3:db:5d:ef:43:0c:05:22:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DC:58:F4:B7:8D:E1:1F:93:D6:46:29:7D:8F:DD:77:30:46:7A:25
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/lNxY9LeN4R-T1kYpfY_ddzBGeiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.200.80.0/22
Signature Algorithm: sha256WithRSAEncryption
84:d3:a2:36:9c:ef:d0:a3:f5:8b:4c:fd:7d:31:78:9d:d9:02:
86:6d:ae:ea:f1:fd:d4:b8:66:92:d0:aa:46:f0:2f:4b:5e:e3:
95:56:7d:4c:84:70:f1:47:01:20:2f:5c:7c:e3:8a:f9:c7:3d:
46:3e:7b:a9:91:6c:8c:73:33:1b:13:a8:bf:ac:f7:26:cb:cb:
14:1b:bb:ab:63:1c:45:37:5b:39:97:d0:75:02:3c:5a:dc:30:
bc:6d:73:fc:6a:fa:be:be:a7:3a:d0:64:60:11:ac:16:64:63:
a2:c5:d9:a3:bc:93:03:21:49:24:d9:b7:84:fd:40:7a:60:ef:
f8:b0:68:66:ee:1d:4c:a4:89:5d:31:9a:b4:4c:6f:f0:bf:a5:
79:8c:71:fd:78:13:24:3a:aa:cf:50:a1:31:26:17:cc:2d:16:
dc:38:64:3e:87:ef:c2:f6:a1:d6:ea:33:95:1a:89:fb:c0:05:
e3:8d:10:14:f2:33:0f:df:53:55:75:f9:3a:dc:19:f9:15:7d:
e1:7e:04:f0:45:65:66:bb:ee:8a:cb:a6:d6:19:76:9b:95:fc:
92:ce:30:37:35:4d:83:47:5b:f5:41:39:11:65:4f:23:13:e6:
1e:4f:72:eb:9b:4b:50:a9:70:a5:6b:04:28:46:d5:38:00:52:
a0:81:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:22 2024 by rpki-client on console-fra.rpki-client.org