Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/NxRc4qY3P00mR6OiSgKEcNIPf8c.roa
File: NxRc4qY3P00mR6OiSgKEcNIPf8c.roa (raw, json)
Hash identifier: LkpJasmtruvcA+hpSMw4UN9/XPe3Qq0OlNZ2wZODdHQ=
Subject key identifier: 37:14:5C:E2:A6:37:3F:4D:26:47:A3:A2:4A:02:84:70:D2:0F:7F:C7
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 01856EA6A29E6B01CA29CC44D91C706D655D
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/NxRc4qY3P00mR6OiSgKEcNIPf8c.roa
Signing time: Sun 01 Jan 2023 18:44:52 +0000
ROA not before: Sun 01 Jan 2023 18:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205312
IP address blocks: 185.17.169.0/24 maxlen: 24
37.220.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:a2:9e:6b:01:ca:29:cc:44:d9:1c:70:6d:65:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Jan 1 18:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37145ce2a6373f4d2647a3a24a028470d20f7fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:d5:f4:1d:04:c1:96:93:d2:d1:ee:c7:52:
36:e3:61:a1:ff:6d:40:7d:b4:c5:fa:73:1f:c6:17:
ad:bf:14:09:1d:72:3d:3c:c2:8c:fe:22:d8:6f:70:
7f:1d:70:95:4b:4a:e5:77:39:a9:da:81:69:9e:79:
16:20:0f:9b:7d:47:a6:46:b0:44:05:87:73:5d:e4:
1e:20:34:65:aa:d1:17:27:cb:46:53:ad:7e:38:f2:
fb:ed:10:c4:43:96:58:44:d4:7f:78:0f:bc:d9:26:
37:80:4f:ee:56:45:be:f7:e0:66:e6:db:9a:d9:c6:
d9:bb:6b:b1:15:a5:f6:b4:bc:d8:ce:de:07:24:22:
ae:5b:d2:cf:03:9b:6f:62:25:98:fd:f3:fb:fc:e4:
6f:ca:75:dd:4b:35:cf:96:fe:8e:7f:91:37:78:23:
53:af:35:bc:cd:99:81:d3:c1:2e:2b:be:33:0d:8a:
18:c3:06:92:9a:b6:3c:66:22:5a:fb:50:0f:47:4e:
98:7b:d8:ca:b0:02:fe:f8:1d:0e:1b:d6:47:7d:3d:
9f:6c:7d:cf:a9:1f:78:4d:ff:06:4d:c6:82:21:5d:
c1:be:88:12:0d:e3:4c:d2:21:f3:0a:20:51:9e:2d:
92:a4:90:a0:bd:0f:85:7f:bc:fa:a3:b1:e3:b6:b8:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:14:5C:E2:A6:37:3F:4D:26:47:A3:A2:4A:02:84:70:D2:0F:7F:C7
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/NxRc4qY3P00mR6OiSgKEcNIPf8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.164.0/24
185.17.169.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:02:7c:50:76:33:92:70:55:52:60:b7:2e:82:17:85:cc:ca:
7c:9b:86:97:0b:aa:6c:7e:b3:f4:d8:91:bb:cf:8a:81:9e:b3:
be:35:6a:78:88:76:11:e7:23:79:36:bc:9b:68:20:ca:a4:c7:
73:5f:96:ce:88:b0:6e:29:f3:a2:85:56:d6:5b:36:e7:d7:33:
1b:30:69:d2:1d:67:77:ff:6f:ec:90:17:7d:a6:15:3d:e2:d7:
aa:c4:34:6d:bd:a7:7f:79:d3:f0:22:9f:04:c6:72:bc:29:86:
84:65:57:c2:af:e6:bf:bc:e7:2e:a5:37:9b:49:71:cb:e2:9e:
85:7e:55:5f:52:6e:a9:bd:aa:6a:e3:6d:e2:8d:98:3c:3d:9d:
a0:23:3b:47:ce:66:9d:93:27:3d:b7:65:23:ad:5d:5c:af:53:
f3:8c:78:af:92:df:97:be:35:3a:81:23:14:11:e9:26:24:2f:
07:d8:59:5c:98:f0:1c:bf:c5:2b:e3:e7:8e:02:c4:37:d0:ed:
da:ee:95:c2:9c:7e:c4:15:c2:5e:29:98:46:d5:61:9e:4e:28:
8d:31:a7:35:a1:21:de:a8:ad:0f:d1:57:48:d2:69:2c:15:e9:
e3:ed:23:f6:d3:5f:0d:fc:92:73:39:28:04:d3:8f:17:46:cb:
de:91:ad:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:16 2024 by rpki-client on console-fra.rpki-client.org