Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/x1HSQXYR1r9DVfnls_kq-WEzc-0.roa
File: x1HSQXYR1r9DVfnls_kq-WEzc-0.roa (raw, json)
Hash identifier: t85r0LrkehBhWL9xtpIIF2KBt5nnFFLPkSPl/J+60XA=
Subject key identifier: C7:51:D2:41:76:11:D6:BF:43:55:F9:E5:B3:F9:2A:F9:61:33:73:ED
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018A1726F8BD0B7E1D3F9F8ECBCB81AB56C7
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/x1HSQXYR1r9DVfnls_kq-WEzc-0.roa
Signing time: Mon 21 Aug 2023 08:12:24 +0000
ROA not before: Mon 21 Aug 2023 08:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57974
IP address blocks: 37.128.248.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 23 Aug 2023 06:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:26:f8:bd:0b:7e:1d:3f:9f:8e:cb:cb:81:ab:56:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Aug 21 08:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c751d2417611d6bf4355f9e5b3f92af9613373ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:51:af:e8:cb:db:08:35:8f:ab:52:82:25:
57:56:56:68:d8:09:55:ae:e3:05:f4:13:64:f5:70:
02:d0:9e:16:dc:1a:4a:ff:cf:5e:a9:22:f6:d7:b9:
79:63:5e:bb:ac:6e:15:d0:bb:85:f1:4f:6a:e8:d7:
07:0a:50:29:36:e4:94:44:5a:19:5f:8c:3a:59:36:
82:3c:57:1b:8f:23:5b:8b:cb:d7:04:7e:8a:c4:1d:
23:75:e9:f9:03:5a:07:56:7d:52:88:65:e1:ae:13:
55:e3:67:63:fc:20:60:79:90:b1:86:f8:6e:4c:f2:
f8:0e:6f:17:13:a4:c8:99:a3:ef:af:7d:ac:fa:67:
f1:1c:22:09:01:20:67:4b:d6:50:cc:f3:8b:ff:8e:
57:a4:0d:b7:3c:b5:e6:53:4d:bd:2e:f9:59:da:6a:
0b:d0:9a:9b:61:fb:81:ed:2f:75:8f:10:86:c4:be:
1f:89:69:2e:e2:10:d0:a0:09:79:38:b9:9b:9b:0d:
4e:b3:e5:43:89:94:13:9a:f0:ca:4b:4c:44:1b:2c:
33:4e:10:21:49:00:c3:e3:91:5a:7e:f7:a8:0c:ba:
09:60:0d:f0:00:84:e8:9c:d7:38:69:b0:70:8c:98:
3f:48:e3:9d:73:71:fb:36:16:b4:e7:e4:e5:3f:f8:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:51:D2:41:76:11:D6:BF:43:55:F9:E5:B3:F9:2A:F9:61:33:73:ED
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/x1HSQXYR1r9DVfnls_kq-WEzc-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:a6:20:69:da:ca:d5:11:70:ed:54:55:a6:25:23:e2:e5:c1:
13:3d:9c:2a:e9:e1:59:7f:6d:1b:db:85:46:c8:78:3f:62:4e:
d5:74:49:6e:2c:a1:85:ca:11:5e:76:38:db:71:73:f9:2b:77:
a4:87:69:c7:38:4f:ba:cf:72:93:b5:7a:9a:e8:36:dd:55:ee:
3e:1c:c6:ef:58:b2:64:cd:13:a4:01:f8:43:96:8e:22:5e:8f:
26:bf:34:1c:d1:2d:48:02:59:79:fd:5e:98:8f:48:a1:8c:4f:
ee:b1:13:d5:80:4e:ea:e4:d9:ab:0c:aa:0f:96:22:22:7e:d7:
07:51:b4:a8:d7:95:43:fe:d8:02:49:29:6c:09:87:0f:9d:90:
3b:7e:cb:c3:c4:10:ed:8e:6c:dc:15:30:75:84:ff:9c:c8:66:
74:d4:a3:9e:d2:57:a4:18:f1:18:06:65:b3:ff:8a:95:a7:14:
72:77:b1:6f:3d:f6:7f:a0:53:31:27:ec:e4:46:e6:62:f7:93:
45:f2:18:87:00:70:a4:f8:92:d2:52:a2:89:16:43:a5:8d:54:
52:c4:5a:85:db:ee:ae:07:34:08:de:1f:de:fd:81:ef:70:9e:
74:25:af:e3:7b:bd:8e:c6:99:56:35:90:2c:d0:3b:a8:ad:1c:
0b:97:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:05 2024 by rpki-client on console-fra.rpki-client.org