Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/ziEOs4R7JytaF9W_oGIucqEKQS8.roa
File: ziEOs4R7JytaF9W_oGIucqEKQS8.roa (raw, json)
Hash identifier: djuChgl78KqSdcnNzeksnOErcM3i/dgz/tINiHfM1Xw=
Subject key identifier: CE:21:0E:B3:84:7B:27:2B:5A:17:D5:BF:A0:62:2E:72:A1:0A:41:2F
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 01856CB81872B0D3865D4AF673A90223B059
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/ziEOs4R7JytaF9W_oGIucqEKQS8.roa
Signing time: Sun 01 Jan 2023 09:44:42 +0000
ROA not before: Sun 01 Jan 2023 09:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210733
IP address blocks: 37.72.137.0/24 maxlen: 24
2a11:3040::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:18:72:b0:d3:86:5d:4a:f6:73:a9:02:23:b0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: Jan 1 09:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce210eb3847b272b5a17d5bfa0622e72a10a412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:4e:b1:f1:10:c2:02:3d:3a:f6:88:22:55:
70:2d:a4:58:67:37:70:95:c9:39:1e:46:cc:22:3d:
d3:ab:95:a1:17:f5:44:e5:47:71:6e:ba:62:57:9b:
a1:a9:1f:81:b1:c7:c9:62:0c:d1:0e:e9:a2:14:78:
fe:5e:b4:43:94:41:20:96:63:a0:63:3d:b3:e5:52:
74:65:e5:30:d3:a3:ec:6a:21:83:bf:63:4c:b2:ee:
4b:03:71:af:56:7b:3b:54:89:b5:91:0b:32:01:bd:
c6:13:ae:d0:b9:89:7f:1e:0b:3d:fa:30:74:6d:84:
3b:bd:fa:56:73:8e:3c:00:d1:cb:a4:65:57:34:6d:
f3:b8:b4:57:d3:9e:7c:0b:0a:91:26:6c:6e:cd:96:
0f:29:ce:82:38:32:d3:90:65:e7:cb:1b:70:b1:29:
df:9b:e7:b5:4f:39:d1:5c:ca:3d:d6:4d:1d:fc:6d:
7c:4f:50:18:d2:ff:0e:e7:18:a1:e9:77:33:a8:84:
0e:5a:7d:c4:f4:bf:c5:8a:db:01:dc:4f:c2:f9:99:
32:4e:8c:2d:24:84:3f:00:66:fd:13:ce:3c:a2:17:
2e:8e:3e:c5:72:94:55:09:96:1b:b8:44:58:9f:0c:
36:35:62:42:75:02:91:72:99:05:ac:51:c8:ee:f6:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:21:0E:B3:84:7B:27:2B:5A:17:D5:BF:A0:62:2E:72:A1:0A:41:2F
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/ziEOs4R7JytaF9W_oGIucqEKQS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.137.0/24
IPv6:
2a11:3040::/29
Signature Algorithm: sha256WithRSAEncryption
60:cf:70:89:b4:31:13:c0:01:72:b3:b2:dd:90:5a:24:1a:d0:
56:91:af:fe:a6:6a:10:65:e5:6e:7a:16:c1:4e:29:36:4e:29:
26:17:62:bd:31:a7:35:26:f5:29:12:bb:b8:81:ba:af:00:90:
2e:9e:fa:24:79:00:c9:92:6c:6b:37:3c:85:04:ec:2f:16:ce:
2b:9e:03:e9:70:80:b9:5e:f6:0b:55:ed:d0:ca:d0:58:76:f7:
b9:87:a7:c4:6f:0d:6b:79:a0:4e:1b:af:e6:e6:9c:1d:02:ea:
8b:21:f0:9c:08:ea:4b:f8:29:b0:2b:41:65:60:c4:cd:87:10:
61:98:ed:e4:7a:14:d2:c4:08:da:26:f3:f7:28:ef:46:3f:c8:
57:e5:94:81:b8:d3:ff:56:49:34:00:52:b7:47:7c:fa:45:f2:
32:28:a9:81:17:f2:0e:92:4b:e7:00:a8:95:b3:d0:bb:27:d5:
85:97:98:37:d2:09:b6:73:13:9a:21:45:71:71:29:aa:e0:b1:
6b:f0:d9:9d:84:57:aa:c5:cf:6f:1f:73:40:e9:6e:0e:e9:db:
1d:da:ca:69:fd:da:cb:cd:2a:b9:7d:5d:20:5a:3d:b6:72:86:
f0:8c:c1:86:1c:82:89:45:bc:6a:d7:d1:8a:be:b4:e4:8f:bd:
17:e9:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:33 2024 by rpki-client on console-ams.rpki-client.org