Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/lZcMe0JrJRlaFqY5TyWeoiIn1BE.roa
File: lZcMe0JrJRlaFqY5TyWeoiIn1BE.roa (raw, json)
Hash identifier: pgHw5jqxPUuDBJmfN/FT3m4uYUiJPEFIxGSlgV1HarQ=
Subject key identifier: 95:97:0C:7B:42:6B:25:19:5A:16:A6:39:4F:25:9E:A2:22:27:D4:11
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01856E01BF9482EEB3C2056798FDC6D99A4B
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/lZcMe0JrJRlaFqY5TyWeoiIn1BE.roa
Signing time: Sun 01 Jan 2023 15:44:46 +0000
ROA not before: Sun 01 Jan 2023 15:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44592
IP address blocks: 37.114.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:bf:94:82:ee:b3:c2:05:67:98:fd:c6:d9:9a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 15:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95970c7b426b25195a16a6394f259ea22227d411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f7:8a:f4:be:3e:37:06:00:63:cd:45:6a:8a:
d2:7d:59:e3:12:5a:64:0c:ce:11:cc:7f:0e:cb:7f:
b9:26:a6:f1:76:10:d9:bd:6a:0a:ec:ad:c2:c9:b0:
0d:84:be:af:e8:7a:87:73:ef:bb:32:b2:33:d2:a4:
dc:fc:ad:0f:1b:00:ec:eb:ba:70:ae:43:db:7d:77:
89:bb:96:e3:7b:a5:40:ef:67:2c:2f:6e:62:e9:0e:
3d:5d:23:ed:c2:33:3f:b9:5b:f6:9b:a2:14:30:f7:
1a:db:fd:fd:90:ff:af:6a:a5:cb:75:c1:3f:3b:bf:
ac:1e:47:ec:1a:c5:11:94:cf:77:38:b9:4a:2f:7e:
ed:0f:bf:6e:da:8c:ca:5f:fc:8b:a2:87:5a:32:41:
4a:9e:81:88:4d:ff:4c:af:c6:cb:c5:71:3c:87:ab:
72:eb:d8:3e:d9:e8:1a:75:e6:87:6e:5e:ae:ae:1d:
90:d7:b5:92:28:13:cf:ae:f2:4d:96:19:c3:62:c7:
ac:a0:87:94:a1:4b:5c:c3:24:05:7a:8b:a0:fe:d8:
2c:1f:a6:b2:47:11:e8:5b:de:20:08:76:51:af:84:
a4:bd:c5:2b:97:99:87:a9:00:14:d0:2a:14:95:30:
e5:d3:6c:04:de:ab:67:cc:26:c6:30:b2:5d:ee:4f:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:97:0C:7B:42:6B:25:19:5A:16:A6:39:4F:25:9E:A2:22:27:D4:11
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/lZcMe0JrJRlaFqY5TyWeoiIn1BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:30:8b:12:a4:25:84:51:dc:ef:b2:7b:db:d5:c7:28:69:ee:
49:4a:3f:3f:aa:1e:ed:6b:6b:75:01:f6:d0:8e:d5:29:93:4d:
cd:53:32:83:64:4e:6d:9b:af:15:0b:a4:7a:73:ea:5d:62:e7:
7a:c0:5c:ef:57:4d:dd:25:54:42:14:b9:b6:1f:11:44:e2:07:
cd:61:c8:33:48:96:ce:ac:f5:4d:59:27:47:49:da:8b:7d:bd:
6b:bd:56:44:aa:77:54:27:6f:11:f8:5e:57:d6:74:34:d6:45:
f7:5d:7a:c9:96:cb:f0:a9:38:59:60:f7:62:42:50:6d:c0:2c:
6d:20:db:96:9c:1d:54:12:4c:02:85:97:54:a6:a3:6a:7d:f8:
b9:a7:4a:3e:fe:b8:76:f4:59:83:1a:fc:89:16:79:32:cf:d8:
7b:dc:f9:50:66:93:ab:b4:89:cf:7c:ee:ea:da:f9:28:0a:8e:
71:e2:12:c4:5b:89:10:2d:dd:5e:3b:02:a5:13:06:b4:4d:6d:
c9:46:ee:2d:5c:ce:56:6d:d5:25:51:da:30:d9:73:d8:1a:23:
7f:b0:8b:73:85:bf:ee:48:f8:ed:0b:1b:e7:4c:41:52:5a:27:
c2:13:f6:2d:da:e5:4f:30:16:71:72:37:a9:46:0e:ae:02:b1:
b0:45:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:42 2024 by rpki-client on console-fra.rpki-client.org