Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/tL_0CCCUnCeXnTXBOG_EmEz4k_0.roa
File: tL_0CCCUnCeXnTXBOG_EmEz4k_0.roa (raw, json)
Hash identifier: BIF0kIa69bCh4oHsMkWhhhkEb/EbnnBi19Q34uJ/fu8=
Subject key identifier: B4:BF:F4:08:20:94:9C:27:97:9D:35:C1:38:6F:C4:98:4C:F8:93:FD
Certificate issuer: /CN=030581eaa969036c33f92ebc4844dc22c55e7513
Certificate serial: 018570CBE8DBAF822CC519BD52BEDB984C8C
Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/tL_0CCCUnCeXnTXBOG_EmEz4k_0.roa
Signing time: Mon 02 Jan 2023 04:44:49 +0000
ROA not before: Mon 02 Jan 2023 04:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57873
IP address blocks: 37.143.64.0/21 maxlen: 21
185.14.216.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:e8:db:af:82:2c:c5:19:bd:52:be:db:98:4c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513
Validity
Not Before: Jan 2 04:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4bff40820949c27979d35c1386fc4984cf893fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:98:42:05:4b:09:75:ec:ac:f2:16:0c:f5:
71:e0:e9:33:b7:42:5d:e4:67:32:2b:e6:6f:ef:de:
2e:78:e8:bc:07:fe:18:6b:79:96:a8:15:46:97:cb:
e4:6e:77:78:de:18:70:3e:b9:69:12:4d:e1:f9:0b:
89:4a:43:51:df:62:3e:a6:ea:10:4e:ef:26:14:96:
b8:81:9d:41:ce:09:44:3f:be:59:e0:44:f2:05:0b:
7c:17:4e:42:29:98:ed:1c:3a:5a:ae:e0:dd:ab:e1:
cd:64:10:2a:a3:d9:26:06:05:84:47:ab:28:02:38:
29:1d:86:ca:32:d8:1c:08:9e:c2:37:c3:3c:53:a4:
43:22:d4:7e:21:d8:e4:60:22:1e:c0:22:8b:5f:7e:
41:e3:d1:d4:6e:ef:00:db:75:bf:0a:09:16:72:05:
c3:35:ac:80:fa:c5:d3:92:46:3f:91:34:53:73:9d:
2f:05:d6:a4:3f:bd:f2:b9:58:d4:96:71:c6:3e:60:
46:b9:be:1e:3b:8c:e4:58:1b:1c:13:3b:fc:70:88:
24:65:30:2a:aa:19:7b:dd:5f:e8:ca:11:1d:93:1f:
87:68:d4:dd:65:7a:34:13:20:26:44:6c:af:b6:6b:
f7:9b:ca:08:ca:b8:ea:02:66:b4:43:53:f2:e4:e4:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BF:F4:08:20:94:9C:27:97:9D:35:C1:38:6F:C4:98:4C:F8:93:FD
X509v3 Authority Key Identifier:
keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/tL_0CCCUnCeXnTXBOG_EmEz4k_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.64.0/21
185.14.216.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:70:0c:3a:e1:2f:e0:fb:b0:73:63:84:00:6d:2b:cf:e6:25:
0f:58:d1:6a:bc:70:fd:60:6f:ea:a6:10:c1:8a:17:af:45:2a:
a4:fa:14:94:e3:4d:54:e4:c4:5c:7e:53:eb:3e:07:98:31:dc:
31:7c:67:49:cc:68:bc:10:5a:96:c1:89:2e:68:88:9c:2e:19:
d0:39:35:22:e5:c6:e7:c7:9e:de:35:3a:0d:4a:ee:7b:b0:e4:
8b:7b:93:8b:04:34:be:7f:cb:a3:cb:2d:b6:e2:11:33:18:a8:
6d:a4:67:63:db:3f:87:2c:d3:d4:64:f6:1b:a7:6d:aa:8a:a2:
9b:94:71:b1:52:65:c8:19:b3:25:27:09:7e:35:c0:be:19:80:
40:89:8e:45:69:96:1c:5d:a9:41:7d:ac:04:0d:e2:2c:f1:ee:
95:d7:c6:d4:39:91:70:35:04:14:86:d1:2c:80:92:df:56:ac:
e3:e2:01:cf:00:a7:9c:b9:45:08:9f:e4:b9:2e:c7:61:23:65:
09:8f:60:41:cb:3a:bb:3c:5f:50:a6:ba:ea:bc:12:1a:19:04:
b7:31:a3:b7:1a:a2:8b:21:36:1b:99:94:29:63:e0:15:da:36:
70:3c:51:0e:bd:fb:2a:a5:6a:b7:3c:c7:ef:30:97:ee:cc:d6:
99:37:cf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:03 2024 by rpki-client on console-ams.rpki-client.org