Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/OtnSBCvX6zOnuvTD2J9ddSJgoWQ.roa
File: OtnSBCvX6zOnuvTD2J9ddSJgoWQ.roa (raw, json)
Hash identifier: UMauTbSOXhpYyXIb0pUozdLQ16yismEREOkAYy65rLw=
Subject key identifier: 3A:D9:D2:04:2B:D7:EB:33:A7:BA:F4:C3:D8:9F:5D:75:22:60:A1:64
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 01856C5CBEF90E97C08875AA4AEA99CA60AA
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/OtnSBCvX6zOnuvTD2J9ddSJgoWQ.roa
Signing time: Sun 01 Jan 2023 08:04:55 +0000
ROA not before: Sun 01 Jan 2023 08:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397239
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:be:f9:0e:97:c0:88:75:aa:4a:ea:99:ca:60:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 08:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ad9d2042bd7eb33a7baf4c3d89f5d752260a164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:60:eb:69:b7:ce:ee:24:27:30:35:5f:52:e0:
7f:c4:d2:d9:fc:a6:4d:2f:19:c5:62:fb:c1:60:28:
c2:fb:1d:a3:e6:14:65:05:b1:0d:04:44:6e:cc:a0:
de:bd:f6:50:f2:eb:7f:3f:64:00:e6:20:9e:bb:4b:
ce:27:7c:e9:b9:5b:e6:b9:5a:4f:71:13:64:0b:fb:
32:66:b1:17:bc:bb:ea:22:fe:39:6e:e6:01:6c:be:
99:77:cc:56:a4:05:e8:3d:b3:f9:0d:18:a5:c0:87:
34:c2:3a:ca:f3:4c:b5:b1:38:de:78:37:a1:2b:e5:
c6:dc:ac:c7:77:c5:37:da:06:da:82:fc:f0:cd:2e:
82:9f:81:5f:a1:bc:06:17:ee:cc:43:61:59:6a:70:
f0:bc:8e:d8:12:47:45:16:b1:6a:11:49:a9:15:a6:
ad:6d:4b:4e:c7:d0:9e:5a:e7:e5:cf:08:f9:9f:a8:
0c:30:67:5b:1a:9a:4b:76:73:c9:fd:68:03:44:08:
7f:4c:08:f3:b8:e2:71:8e:e0:66:70:3c:89:98:b7:
5c:34:d1:e4:d6:71:89:61:da:88:a5:02:49:d8:00:
df:1d:f8:f9:07:24:29:32:bb:10:ae:f1:ef:a2:5b:
09:dd:fb:3c:a4:4a:02:cf:9e:00:41:d6:11:46:a6:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:D2:04:2B:D7:EB:33:A7:BA:F4:C3:D8:9F:5D:75:22:60:A1:64
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/OtnSBCvX6zOnuvTD2J9ddSJgoWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
58:0e:0e:f7:05:cc:aa:32:44:38:f4:c5:37:45:1e:a6:c4:ed:
e6:d2:02:20:76:ab:cd:f5:5d:a5:34:85:f2:28:0c:45:46:d2:
e0:36:fc:25:2c:8c:6d:93:bf:de:df:8c:2e:c1:73:6a:89:8d:
ee:a1:51:49:3d:b1:9a:b3:41:21:af:5e:e8:3e:8d:c9:39:19:
99:b2:36:99:63:71:e3:b7:37:cd:89:d1:cb:39:01:d6:93:2d:
13:0a:ee:aa:b6:cb:79:a5:16:4f:b6:1c:32:31:65:b8:57:c9:
c3:21:a6:98:7e:cd:2c:64:b1:15:ea:26:d6:3a:5a:10:05:1b:
bb:06:97:9f:f0:8b:7d:9b:f4:ad:e4:84:de:85:96:12:7a:f6:
a3:3b:02:c9:2b:a2:9b:c5:17:ee:19:a6:ad:a8:d0:ce:4a:66:
a9:89:36:e2:c0:cd:7b:92:c5:a7:34:49:f8:e9:ec:6e:e7:6f:
c5:ed:f3:1c:30:9f:d4:52:25:30:bc:e9:2f:56:82:b7:ac:d6:
bd:20:26:21:3a:02:d2:4a:0f:c3:0a:2d:7d:9e:d2:bf:7e:61:
4e:1e:eb:f1:01:ac:fe:72:67:3b:ba:c6:ab:16:a6:55:c7:88:
9a:2b:cc:d0:ff:a9:52:b0:6a:b4:e4:54:01:46:0a:77:d9:b6:
ac:50:48:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:08 2024 by rpki-client on console-ams.rpki-client.org