Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/E_84EI4kYsHfHmxwmyA5W2fxhCA.roa
File: E_84EI4kYsHfHmxwmyA5W2fxhCA.roa (raw, json)
Hash identifier: qvpvRkuwge7pOQA4QbvpifhCHZY/cjvpmoyHwkeONas=
Subject key identifier: 13:FF:38:10:8E:24:62:C1:DF:1E:6C:70:9B:20:39:5B:67:F1:84:20
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018C492EEA5A2D508A55091B6445EA969380
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/E_84EI4kYsHfHmxwmyA5W2fxhCA.roa
Signing time: Fri 08 Dec 2023 11:27:40 +0000
ROA not before: Fri 08 Dec 2023 11:27:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203446
IP address blocks: 37.114.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:2e:ea:5a:2d:50:8a:55:09:1b:64:45:ea:96:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Dec 8 11:27:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13ff38108e2462c1df1e6c709b20395b67f18420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:f3:26:84:9e:31:e8:f7:40:96:85:54:88:
16:2b:70:3d:25:4a:12:6c:63:a4:04:29:0e:5e:3c:
46:bb:8c:7e:2f:38:37:7c:79:a8:af:26:b2:7b:90:
ea:ad:b2:20:cb:50:03:d7:92:33:b4:9f:b6:7a:63:
06:ee:e2:83:5d:86:f4:4e:0d:28:b1:42:5d:09:9b:
5b:4d:f0:4d:9d:fe:b9:0b:ed:01:53:82:71:e9:77:
71:44:0a:d4:47:5b:75:d1:24:0c:68:db:29:ed:3b:
1c:11:4b:9c:69:78:26:a2:1b:ef:4c:60:4a:6f:c5:
28:52:5d:db:a1:80:eb:4d:b8:e0:00:f2:19:25:2a:
57:34:60:95:9a:06:34:1c:a8:29:ce:37:69:9a:87:
e8:3a:1b:f5:a2:3c:d4:a0:99:c6:21:2a:a2:a4:6f:
10:6e:9e:d3:55:67:2c:77:fa:f8:9c:98:e2:d9:72:
73:88:b4:37:d1:32:6c:11:bb:48:eb:bf:c6:f7:0b:
04:2a:7e:73:60:7c:ac:b7:44:4e:28:ee:f9:26:e9:
76:da:d8:3f:e8:6f:fa:ab:27:66:4d:94:a3:ef:a5:
14:5d:1a:31:3e:e7:a8:30:e9:6e:e0:5c:be:b9:b7:
3a:07:8a:5f:a0:e5:66:ea:dd:52:e5:cc:1f:80:8f:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FF:38:10:8E:24:62:C1:DF:1E:6C:70:9B:20:39:5B:67:F1:84:20
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/E_84EI4kYsHfHmxwmyA5W2fxhCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.41.0/24
Signature Algorithm: sha256WithRSAEncryption
97:97:14:45:99:55:1d:66:67:6e:2b:29:35:3e:94:81:0d:bf:
c5:d0:7c:69:9c:8c:71:d0:83:95:ab:8a:f3:08:3a:73:0b:d7:
e3:cc:94:da:d9:4c:e1:ff:27:8b:50:43:da:f6:43:4b:a8:c6:
ba:3b:ef:e9:26:8c:e5:ed:fe:6e:b6:99:ec:1c:3d:84:37:a5:
cc:e6:c3:a4:0d:cd:94:dc:42:8f:9b:8e:ed:d8:fa:57:c6:e0:
aa:be:09:27:3d:5c:06:2d:77:44:dc:ae:7e:f9:01:a5:73:41:
71:ec:77:6d:e4:c2:35:07:f4:69:ba:3b:a8:54:55:18:e6:cf:
3f:7f:fd:b4:0c:78:bd:56:fa:1b:02:a7:49:38:2b:01:08:70:
63:1c:22:7d:cb:fd:06:9b:41:0f:1c:9f:a0:55:fc:e7:be:7a:
60:28:a7:d0:67:26:a2:71:39:f3:11:79:1d:8c:dd:0e:25:a6:
a6:66:11:e8:7d:7b:0b:de:cb:1d:7d:38:90:6f:1f:cb:f8:cd:
6f:39:16:b8:0e:d6:81:ef:87:b7:b9:71:7d:97:06:1f:f4:5d:
da:af:9e:cd:1a:80:ae:1e:c5:a9:5a:62:71:c6:5a:97:4c:6d:
95:24:c3:61:d1:78:08:b8:1c:ff:a7:04:19:c5:7d:1e:3f:71:
38:0a:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:51 2024 by rpki-client on console-ams.rpki-client.org