Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/5FUwX7E7JtNdeRjpp1Y3IXtrkII.roa
File: 5FUwX7E7JtNdeRjpp1Y3IXtrkII.roa (raw, json)
Hash identifier: XU+4tCyprLeQitwiYkHE1UOp64W3cLE2KuZXV5k+PVU=
Subject key identifier: E4:55:30:5F:B1:3B:26:D3:5D:79:18:E9:A7:56:37:21:7B:6B:90:82
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 01856C5CB0C560F4FDB426DCAD063493959A
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/5FUwX7E7JtNdeRjpp1Y3IXtrkII.roa
Signing time: Sun 01 Jan 2023 08:04:51 +0000
ROA not before: Sun 01 Jan 2023 08:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397217
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:b0:c5:60:f4:fd:b4:26:dc:ad:06:34:93:95:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 08:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e455305fb13b26d35d7918e9a75637217b6b9082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e8:dd:82:06:20:57:65:3b:87:e8:de:3b:1b:
ea:4d:f5:b6:3c:4e:e5:b4:b8:a1:6a:6e:40:6e:66:
96:6a:d2:6a:8b:fe:57:a7:d9:16:f0:01:96:19:a6:
11:6c:69:39:0c:cf:51:6d:13:a7:f3:3f:c6:ca:a5:
e8:28:b8:7b:89:d5:14:4c:5e:47:22:af:3b:d1:a0:
50:52:77:08:68:df:70:a7:a7:75:0c:ef:83:f4:72:
4c:24:1b:73:de:c4:5c:6e:54:b6:71:ad:3f:a9:aa:
08:ca:4d:e3:87:f4:c7:0a:ba:be:e4:08:95:46:13:
59:41:68:38:02:0c:ef:46:54:8a:19:1f:0d:62:0c:
ed:6c:65:d2:68:fd:59:23:7c:49:61:53:b0:a9:84:
a9:0d:59:07:e9:27:03:da:b0:17:81:bf:df:09:20:
84:34:67:da:21:09:c7:fb:5c:94:71:7d:d3:ef:c5:
cf:2c:19:70:72:f6:1d:fc:99:92:b0:85:4f:01:00:
21:d9:19:29:d1:ad:9e:4e:1b:97:2d:cc:0e:9d:59:
b3:40:5a:a8:0b:43:5a:b3:d3:d1:dd:47:f3:45:e0:
d5:0c:a9:51:da:9a:6b:2a:8e:04:68:fd:6e:26:95:
39:94:28:7c:a9:52:a6:1a:44:a8:cc:db:a9:fd:09:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:55:30:5F:B1:3B:26:D3:5D:79:18:E9:A7:56:37:21:7B:6B:90:82
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/5FUwX7E7JtNdeRjpp1Y3IXtrkII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
71:56:8c:e8:0e:65:c5:e4:4f:48:6d:64:e6:77:14:e2:96:3a:
b7:15:9c:61:66:0f:a3:43:57:d5:91:93:fe:6b:bb:4e:53:03:
06:b4:57:19:0e:8e:8c:17:93:de:f3:dc:85:83:dd:cd:d0:26:
31:ed:f8:e6:0e:3c:54:3d:21:0c:af:e3:7f:89:b2:0a:74:a7:
2d:c1:7d:d6:0f:1c:39:38:d3:72:7f:d1:ef:2a:87:ac:d1:7c:
32:18:bb:39:97:22:df:56:3b:13:46:dd:4d:3c:90:57:80:8d:
01:b8:d8:a7:1d:ef:67:de:ca:2b:99:17:29:69:d2:b7:78:43:
cd:c8:32:65:1d:1b:07:8f:6a:6c:53:8d:b6:b5:6e:90:f3:31:
2a:e8:72:ae:ac:0f:e1:2b:38:e0:c3:ec:5b:7d:c2:ae:a2:6a:
b3:a7:19:75:20:d5:fc:94:ba:e3:56:9c:9c:51:87:53:2e:f2:
86:bb:37:d2:9b:08:cc:4c:ba:a2:f9:eb:4b:1c:aa:72:0f:87:
8d:35:ff:df:ed:4a:f7:d8:4c:fc:ac:1d:cd:bf:60:3c:10:8b:
1d:fb:43:78:81:5c:c9:81:7f:d4:15:f7:0f:06:da:04:44:cd:
e0:22:c2:b2:ad:de:0e:f7:23:11:23:79:c5:ce:28:9f:f0:76:
da:d0:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:08 2024 by rpki-client on console-ams.rpki-client.org