Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/1WA3HKU9x_hFgsxquzzz5wz3m28.roa
File: 1WA3HKU9x_hFgsxquzzz5wz3m28.roa (raw, json)
Hash identifier: w62Lv+bWsjTeG4kiktuJr/bfxtbkJ9Q2AyJ7Yr+UuT0=
Subject key identifier: D5:60:37:1C:A5:3D:C7:F8:45:82:CC:6A:BB:3C:F3:E7:0C:F7:9B:6F
Certificate issuer: /CN=efc34233ed96424a516e2bf9d39171b62e44b441
Certificate serial: 01857139E877D80C174918FF2B087531E910
Authority key identifier: EF:C3:42:33:ED:96:42:4A:51:6E:2B:F9:D3:91:71:B6:2E:44:B4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NCM-2WQkpRbiv505Fxti5EtEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/1WA3HKU9x_hFgsxquzzz5wz3m28.roa
Signing time: Mon 02 Jan 2023 06:44:58 +0000
ROA not before: Mon 02 Jan 2023 06:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57928
IP address blocks: 37.157.8.0/21 maxlen: 21
193.41.95.0/24 maxlen: 24
2a00:bf40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:e8:77:d8:0c:17:49:18:ff:2b:08:75:31:e9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc34233ed96424a516e2bf9d39171b62e44b441
Validity
Not Before: Jan 2 06:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d560371ca53dc7f84582cc6abb3cf3e70cf79b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:30:6c:d3:9b:28:e8:38:19:30:21:88:32:
b7:99:b2:8c:bc:95:c6:9b:e1:01:03:fa:ca:af:a4:
cb:61:85:86:2c:a0:d8:bc:4a:ac:b9:c3:6c:b6:64:
83:1f:82:ff:4f:dc:48:9e:9b:d8:14:26:ee:47:dd:
95:e1:b5:21:88:69:85:05:20:ac:13:84:ec:d4:76:
9f:c9:5b:6a:cb:2e:c9:0a:c3:b5:b9:a9:d5:01:4d:
5d:68:64:2d:11:fd:16:d3:7d:8c:f4:d0:df:e1:38:
5d:8f:df:a1:e6:26:3f:53:ed:a4:9e:f3:8f:f8:3f:
08:ae:83:88:31:29:c7:38:9f:43:f2:07:28:b8:3a:
91:c3:8b:36:f3:92:8d:37:68:1e:36:bc:22:0a:b4:
43:32:79:4b:31:eb:35:b3:5b:d7:19:6c:44:52:8f:
83:14:0d:62:08:ca:98:6b:ed:88:3b:f5:34:91:ac:
9d:83:ba:23:9e:68:d6:9c:c4:68:81:bc:3b:cf:c1:
11:32:f1:03:7c:91:bb:a1:ec:01:f6:6d:55:80:0c:
2a:26:a4:2e:53:4f:e0:33:06:4f:d7:76:20:7d:46:
6b:9f:cb:fd:fe:37:2b:66:0e:d9:f8:35:7f:e3:c1:
c4:dc:e7:6f:16:9d:f7:bc:0a:06:c4:7a:59:08:40:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:60:37:1C:A5:3D:C7:F8:45:82:CC:6A:BB:3C:F3:E7:0C:F7:9B:6F
X509v3 Authority Key Identifier:
keyid:EF:C3:42:33:ED:96:42:4A:51:6E:2B:F9:D3:91:71:B6:2E:44:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NCM-2WQkpRbiv505Fxti5EtEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/1WA3HKU9x_hFgsxquzzz5wz3m28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/78NCM-2WQkpRbiv505Fxti5EtEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.8.0/21
193.41.95.0/24
IPv6:
2a00:bf40::/32
Signature Algorithm: sha256WithRSAEncryption
ab:66:90:19:e0:9f:bb:68:09:47:6b:c0:d6:03:4e:b1:ea:b6:
e7:5a:a0:3e:cc:42:b3:e0:68:03:1e:64:e2:0a:6a:ba:d1:ce:
4c:71:cd:38:3a:9a:27:3b:c1:95:19:57:b2:76:84:ad:e2:e0:
d4:56:a3:21:b1:d3:e3:69:98:6d:72:29:e8:61:a8:d3:33:21:
24:23:69:9c:c6:8a:db:d0:72:c5:97:f0:56:66:82:51:29:c4:
4e:36:0e:45:0c:22:62:33:01:42:c1:6d:10:5a:8b:1a:f1:bd:
23:5a:9d:29:82:f8:fc:06:b8:63:62:98:d5:d5:ea:bb:c5:ed:
d5:91:74:57:b2:d4:7c:01:f9:54:e5:9c:50:93:b4:5b:47:f3:
ac:d3:ff:f3:20:c9:99:4d:a1:d6:a4:c1:b7:04:33:d2:ff:9e:
9a:53:dc:9a:c7:fc:82:77:11:e7:df:2e:60:5c:ae:5a:ee:f1:
90:11:41:24:2b:c3:39:4e:fe:34:8c:6a:03:65:75:1f:5e:c7:
fa:b3:9d:f2:03:e6:8d:31:f4:a6:f0:ae:20:4d:cc:53:1f:d2:
2a:0d:99:c5:0c:7b:73:88:25:1a:b4:97:e4:d6:f7:06:5b:3d:
c4:87:10:27:59:4b:68:83:38:25:3c:30:e4:1a:39:01:05:57:
3f:c7:57:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:59 2024 by rpki-client on console-ams.rpki-client.org