Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/bYJ0yHix2tI_SNnp9csgmq2y6FU.roa
File: bYJ0yHix2tI_SNnp9csgmq2y6FU.roa (raw, json)
Hash identifier: K0Gk5tNkx+y5lEIx18+4dTgPyq8k18PzS+8wjcz7UIo=
Subject key identifier: 6D:82:74:C8:78:B1:DA:D2:3F:48:D9:E9:F5:CB:20:9A:AD:B2:E8:55
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 01856C5CBF97EEE27AA37D7EB1E3C973D50B
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/bYJ0yHix2tI_SNnp9csgmq2y6FU.roa
Signing time: Sun 01 Jan 2023 08:04:55 +0000
ROA not before: Sun 01 Jan 2023 08:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397241
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:bf:97:ee:e2:7a:a3:7d:7e:b1:e3:c9:73:d5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 08:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d8274c878b1dad23f48d9e9f5cb209aadb2e855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:39:da:2b:d4:53:33:4b:0d:83:95:92:6a:
4f:c5:6b:a7:9c:50:bf:c8:68:6f:51:a1:f2:f5:c0:
3f:49:73:2a:0d:f8:19:4a:e0:82:61:d6:88:3e:4f:
ff:65:3c:bf:74:75:88:67:2a:03:bb:e5:04:de:a2:
38:78:8d:56:a3:b7:94:09:dd:24:d7:b3:90:c3:f8:
ee:07:3b:48:c2:64:00:7f:59:93:c1:07:ba:79:b2:
2f:95:1f:74:eb:16:95:a4:8b:3f:08:a2:62:4f:dc:
97:8e:44:39:74:97:55:de:34:01:84:5a:ed:a7:53:
85:46:5c:2a:b0:b0:7a:74:ea:b4:62:14:98:b9:80:
ba:fb:c0:5a:9a:cb:69:00:ac:f0:e0:38:85:f6:e7:
aa:c4:39:66:ee:15:cf:fd:db:e3:cb:c8:e3:bd:63:
6b:9a:e6:a7:c7:74:78:1b:87:a3:33:61:29:dc:af:
fe:5d:d4:0c:bd:84:9f:c2:65:fe:23:2e:2e:6d:0b:
2b:f9:a5:d2:a3:fd:16:2b:9d:31:f0:f3:32:55:53:
53:09:33:50:39:94:06:f7:b0:09:34:48:2b:fe:76:
8b:80:fc:11:b1:ee:50:68:ba:6e:6a:7a:4f:d1:08:
38:e8:31:69:be:bb:46:c1:a8:03:2b:d9:9c:fe:13:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:82:74:C8:78:B1:DA:D2:3F:48:D9:E9:F5:CB:20:9A:AD:B2:E8:55
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/bYJ0yHix2tI_SNnp9csgmq2y6FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
81:86:8e:9b:ac:d1:c6:33:6b:62:48:ba:49:a2:bd:80:50:75:
bd:35:fe:1f:f9:bb:ac:be:20:29:17:65:10:89:8c:13:17:d9:
89:b7:4f:22:35:2f:fc:17:54:35:be:1a:46:ab:f4:ae:d8:dd:
b4:5b:ee:aa:ad:38:2a:f6:0f:1d:12:57:1d:d3:e3:d5:bc:88:
d9:55:e6:e1:15:30:bb:09:b8:22:d3:17:50:3f:66:c2:5e:f0:
e9:b7:3d:5d:d9:e2:12:66:b6:be:96:9f:76:e1:5c:21:51:4b:
e9:99:2d:62:ba:5e:d6:90:0c:76:32:5f:aa:cd:14:1f:06:ee:
fa:d1:1a:53:00:0c:57:3c:f8:ca:d3:df:fb:ea:14:0c:cd:9c:
79:ec:d9:be:5a:b4:ac:44:2e:96:46:ea:ca:7f:a2:7f:14:31:
da:5c:30:1a:8c:38:33:c4:a2:8d:20:78:3e:a6:b6:b1:5c:d8:
dc:d2:5c:d3:1e:90:e9:5a:e6:3d:53:f7:c4:1b:2c:5a:03:e3:
1b:9b:02:0a:9c:39:45:dd:2f:8b:01:28:1b:8f:54:7e:dd:2e:
4e:13:dc:e5:ec:8a:f0:65:f8:b0:fb:a9:45:4b:ba:03:1e:01:
f9:fe:cb:6d:1a:1a:36:7f:ab:b7:ba:a1:3e:20:39:8e:64:09:
cf:23:d2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:08 2024 by rpki-client on console-ams.rpki-client.org