Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/X_h6YKvFijvXhXVX4gc21ElGkkA.roa
File: X_h6YKvFijvXhXVX4gc21ElGkkA.roa (raw, json)
Hash identifier: gExtarj8HHY1YAW5t6PiIN1syTLe3NQFyjfNfe4psvo=
Subject key identifier: 5F:F8:7A:60:AB:C5:8A:3B:D7:85:75:57:E2:07:36:D4:49:46:92:40
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 01856C5CAD9A2DB864FF4FC8DD7C90A3130B
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/X_h6YKvFijvXhXVX4gc21ElGkkA.roa
Signing time: Sun 01 Jan 2023 08:04:50 +0000
ROA not before: Sun 01 Jan 2023 08:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12008
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:ad:9a:2d:b8:64:ff:4f:c8:dd:7c:90:a3:13:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 08:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ff87a60abc58a3bd7857557e20736d449469240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:8f:d8:35:2f:2b:95:e8:83:29:27:4a:fb:
62:98:90:98:bb:88:0c:88:df:14:91:55:18:55:b7:
7b:98:7d:5c:7c:7e:58:18:ae:d1:e3:61:82:c2:b9:
ef:af:2a:79:44:cb:fa:82:58:ce:d7:90:e4:5f:c2:
df:79:2d:09:f9:d0:8b:e0:e7:f0:63:25:72:b1:0e:
7f:cb:96:a7:06:d0:79:84:39:1f:ad:f9:8b:03:be:
ec:a5:1c:be:fc:28:d7:a0:94:f1:e3:b6:3f:9b:79:
f6:5b:9c:62:0b:4a:34:3a:5e:5b:9c:d6:f2:86:cc:
d0:81:64:ac:e8:ed:6a:41:c9:67:74:87:7c:5d:b1:
df:6d:ed:b9:6c:e7:1e:47:83:3c:b6:cf:6b:d2:0e:
cf:90:65:e7:76:f2:04:6a:b3:bd:a3:9a:68:63:f9:
a6:66:9c:c3:58:d4:9a:4d:eb:d3:b7:2c:1a:7c:ff:
68:3f:6e:a8:83:bc:12:20:18:dc:73:13:33:4f:6e:
7a:5c:a9:93:ab:62:63:1f:1f:77:70:43:3f:cb:27:
82:13:62:e1:35:d5:22:f3:f7:4e:3b:26:1a:6d:4c:
b2:f1:a1:04:42:13:22:31:eb:68:1b:81:06:50:6e:
9d:ef:d4:bc:9d:40:53:a7:f2:8d:ad:0c:c7:63:7e:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F8:7A:60:AB:C5:8A:3B:D7:85:75:57:E2:07:36:D4:49:46:92:40
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/X_h6YKvFijvXhXVX4gc21ElGkkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
75:aa:30:d7:1b:1e:5e:14:ed:e6:10:8c:c0:34:d3:05:39:f3:
11:1b:89:f1:33:cd:7f:8e:bd:4f:71:ea:5f:2e:8b:b5:91:5f:
30:92:e9:2a:53:53:a5:a3:10:bb:7e:a3:0c:b0:0e:a9:fa:f3:
5e:c6:89:ff:8e:16:31:13:b4:47:74:54:ef:65:8a:ea:0e:bd:
d1:46:7e:d3:cc:bc:a6:e2:3d:ec:48:53:65:32:d2:e6:2a:4e:
84:d2:5c:cb:a7:f3:fd:2c:1c:4d:c2:49:eb:80:69:88:dc:b0:
9e:c7:a0:5b:4a:48:49:98:ab:9a:60:e2:42:12:4c:85:81:7a:
1c:08:2f:ef:24:0c:51:3c:25:14:a8:a9:e8:53:94:ab:3e:9b:
51:3a:f9:51:f7:cf:f3:ee:20:f3:b8:4b:35:1b:98:4c:c3:c1:
65:00:2c:5b:1f:47:bc:39:70:67:4e:9d:01:f1:cd:c0:35:12:
1b:c2:97:94:0f:22:bf:93:27:41:d6:f9:90:16:62:a0:9c:86:
56:4b:69:0e:e7:db:69:07:a5:ad:39:02:29:0f:a5:54:58:b6:
0f:18:57:72:a2:ea:ed:8d:2f:0c:c4:95:37:7b:12:60:a6:1e:
f5:0e:91:e2:d5:80:7e:30:57:3a:15:16:d2:8d:5d:16:84:8e:
3b:52:e3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:08 2024 by rpki-client on console-ams.rpki-client.org