Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/5qKyQwCY_RmVL8vW6yTlZo59Tmw.roa
File: 5qKyQwCY_RmVL8vW6yTlZo59Tmw.roa (raw, json)
Hash identifier: zRJH6a3usMui79RuGfQqNkFw24QE0c+/jd2vCDohBBk=
Subject key identifier: E6:A2:B2:43:00:98:FD:19:95:2F:CB:D6:EB:24:E5:66:8E:7D:4E:6C
Certificate issuer: /CN=efc34233ed96424a516e2bf9d39171b62e44b441
Certificate serial: 018FCE01C1323EEAC14B848D2DA31DBF2ACE
Authority key identifier: EF:C3:42:33:ED:96:42:4A:51:6E:2B:F9:D3:91:71:B6:2E:44:B4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NCM-2WQkpRbiv505Fxti5EtEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/5qKyQwCY_RmVL8vW6yTlZo59Tmw.roa
Signing time: Fri 31 May 2024 09:36:12 +0000
ROA not before: Fri 31 May 2024 09:36:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16347
IP address blocks: 37.157.8.0/21 maxlen: 24
193.41.95.0/24 maxlen: 24
2a00:bf40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 02 Sep 2024 16:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ce:01:c1:32:3e:ea:c1:4b:84:8d:2d:a3:1d:bf:2a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc34233ed96424a516e2bf9d39171b62e44b441
Validity
Not Before: May 31 09:36:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6a2b2430098fd19952fcbd6eb24e5668e7d4e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:bb:a2:08:7d:02:20:60:18:7f:61:a8:e7:
62:17:47:de:f1:e5:c2:c2:d0:d0:8d:c2:e6:b5:9d:
bd:64:a2:9a:30:a3:f2:68:07:3e:18:34:26:c4:7c:
be:c2:d9:cd:56:fb:35:d7:46:51:20:6d:b2:36:b9:
5a:2e:be:f0:3b:51:dd:e3:8e:aa:aa:e4:89:e6:e2:
ac:38:ff:82:6f:5e:c4:b9:56:93:ca:6d:f1:f6:70:
3b:6d:27:5c:40:4f:2e:3c:33:66:c9:8b:45:be:6a:
d0:93:56:f7:74:f2:9c:49:ea:cf:ed:bd:b0:34:f8:
9a:92:79:2c:d4:66:85:ee:d4:c1:e3:f6:85:ca:b0:
23:f4:21:16:95:28:1d:20:5c:68:94:69:2c:ab:f5:
bc:ae:6c:fc:23:b9:9d:00:b9:cd:f5:05:fc:a8:b1:
87:e7:11:fe:0c:1e:16:72:2c:af:e8:c7:6c:e8:2f:
4b:1d:6e:2e:f8:7f:18:f4:52:58:0d:0a:b7:64:91:
96:8c:2e:c9:9a:7c:db:a4:aa:5d:c5:5f:c0:f4:46:
c9:38:7b:00:a1:e6:08:c4:a1:e4:f1:c7:7a:c1:a8:
4f:ad:bd:72:29:de:9a:2e:41:f5:ad:7e:ff:92:7f:
48:43:f7:93:56:f9:c0:fe:35:b7:cd:4b:cf:ea:c2:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A2:B2:43:00:98:FD:19:95:2F:CB:D6:EB:24:E5:66:8E:7D:4E:6C
X509v3 Authority Key Identifier:
keyid:EF:C3:42:33:ED:96:42:4A:51:6E:2B:F9:D3:91:71:B6:2E:44:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NCM-2WQkpRbiv505Fxti5EtEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/5qKyQwCY_RmVL8vW6yTlZo59Tmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/964411-d327-4136-ab43-306905fafe0e/1/78NCM-2WQkpRbiv505Fxti5EtEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.8.0/21
193.41.95.0/24
IPv6:
2a00:bf40::/32
Signature Algorithm: sha256WithRSAEncryption
93:80:65:f2:d4:b6:32:e1:8c:12:4c:72:db:c6:22:8a:df:7c:
6a:53:86:12:be:1f:90:2f:58:c3:fb:8c:36:ef:e0:2f:5b:8f:
b1:54:de:2d:b3:91:6d:42:21:75:be:7b:2e:ca:8d:45:11:c3:
c8:19:2f:b5:b1:a2:ac:f9:83:4c:12:fc:c2:ec:81:c0:e2:e6:
d0:67:df:30:65:2f:59:21:f4:64:bd:82:c3:8e:e0:bd:a3:16:
2e:34:e3:06:24:c0:fd:be:e4:14:5d:d3:5c:05:c3:db:be:b2:
23:19:88:b9:ed:36:cd:24:ce:14:30:fc:73:ac:ae:20:97:47:
9e:68:d0:cc:dc:59:1b:f2:8e:70:41:6b:d5:07:fe:a3:57:6e:
ca:5d:94:d0:7c:ed:76:cd:dc:52:29:99:1e:60:e5:33:5e:65:
5a:9a:cf:b2:a5:47:31:88:89:c4:b0:b6:ae:6a:10:41:44:a0:
f8:2d:51:69:4f:bb:26:c2:31:b5:dc:90:2a:f9:bb:8b:ff:63:
e9:60:88:07:fe:ef:2a:75:6f:00:31:f6:89:2a:c9:72:60:33:
92:3a:8d:0e:2b:f1:25:3c:f5:ae:a9:1b:3b:31:92:17:61:89:
7a:80:8e:e5:be:5e:db:cc:76:cd:7a:6c:bf:fa:82:46:f8:be:
c7:e2:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 18:31:11 2024 by rpki-client on console-ams.rpki-client.org