Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/DwK_RvdxUIOBGygc9ycjRduUt84.roa
File: DwK_RvdxUIOBGygc9ycjRduUt84.roa (raw, json)
Hash identifier: d/5Q9ZjzfMdkseITwjoc4Ao+mnzV/fbYfhas41t9eqc=
Subject key identifier: 0F:02:BF:46:F7:71:50:83:81:1B:28:1C:F7:27:23:45:DB:94:B7:CE
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 01856C5CAFB833D6829965B08D54D05DC06F
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/DwK_RvdxUIOBGygc9ycjRduUt84.roa
Signing time: Sun 01 Jan 2023 08:04:51 +0000
ROA not before: Sun 01 Jan 2023 08:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397213
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:af:b8:33:d6:82:99:65:b0:8d:54:d0:5d:c0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 08:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f02bf46f7715083811b281cf7272345db94b7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:f5:26:c4:50:33:be:99:f8:97:59:f6:0e:
bd:ba:8b:11:f0:ae:06:bd:76:2a:b7:1f:92:3d:1d:
c6:38:42:c1:e5:dc:3a:ff:b3:cf:60:ed:9b:79:16:
81:9e:90:a2:8a:a4:b2:00:e8:d2:d3:1a:24:d3:5e:
fe:e1:4e:25:16:91:66:9a:ab:21:5c:ff:39:73:03:
dc:9d:af:f1:b2:b8:a1:9a:ff:71:47:03:d7:2f:43:
dd:1d:84:39:63:18:4e:c7:03:4a:d7:74:4c:49:cd:
0f:d8:9d:01:37:d4:92:3d:aa:7f:d7:c2:49:96:5d:
6a:d5:05:6c:d1:91:dc:b7:ec:28:16:ae:d6:94:33:
f8:c6:75:3a:17:13:eb:84:8d:ef:2b:5d:60:11:bd:
f2:c1:11:07:70:9e:39:5d:f8:e5:d5:e9:1a:bb:aa:
6e:b1:f1:7c:d5:3f:7c:ff:ca:e8:4c:53:61:38:eb:
e4:c1:6d:57:83:82:a6:5e:7a:16:17:03:3d:60:53:
c9:36:de:05:9f:8d:a6:66:27:40:ec:5e:15:aa:c3:
3d:16:a6:db:98:47:2d:44:dd:c7:29:4c:c9:98:ed:
0b:09:fb:3a:05:d5:c1:b3:f2:11:ee:78:67:94:92:
0b:1c:23:2f:4a:97:f1:9b:a9:ca:28:2d:bb:cf:14:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:02:BF:46:F7:71:50:83:81:1B:28:1C:F7:27:23:45:DB:94:B7:CE
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/DwK_RvdxUIOBGygc9ycjRduUt84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8c:e3:9d:87:95:c0:9c:61:32:f1:ab:4a:5a:62:bb:84:50:
1c:96:e6:3e:3e:2e:92:28:f4:18:02:8e:07:9f:e1:a1:97:65:
0c:bb:c8:6b:ae:9f:e2:5f:89:23:de:3d:10:e5:19:9a:57:34:
62:95:70:d5:67:1f:36:17:b5:e4:50:88:6e:c6:49:6f:81:19:
fb:48:2e:ae:d2:70:03:93:f8:7b:37:22:e3:22:ac:0b:63:3e:
ae:94:4a:3e:cc:18:00:d6:f6:89:9e:6e:0c:09:4f:2d:4a:b1:
08:09:6b:36:0f:da:66:8b:76:6d:38:e0:7f:6d:fd:b6:40:a5:
88:ef:4c:bc:a5:11:20:f0:9e:46:6e:bd:ae:0b:23:14:9b:4a:
d2:5f:6d:0b:cd:11:4a:21:81:5b:b9:a3:29:cf:14:16:d7:b0:
ab:61:b5:eb:da:dc:b6:52:60:e8:9d:97:d0:53:89:b6:76:13:
3b:73:3f:b0:cc:9b:8a:44:5a:c2:4f:54:bf:e1:60:88:e0:e7:
6a:77:2d:08:8c:3e:4d:22:8b:19:4b:00:74:b5:fe:ac:fa:a0:
7f:ad:fe:c2:9d:69:eb:77:d8:bb:c7:ab:42:31:87:4b:58:28:
a7:ee:d3:7b:dc:13:85:1d:57:06:2a:e2:4d:6a:1f:5a:64:b2:
0b:1e:c1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:08 2024 by rpki-client on console-ams.rpki-client.org