Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/bbZOJSckC5F755BN6DltJH24F2E.roa
File: bbZOJSckC5F755BN6DltJH24F2E.roa (raw, json)
Hash identifier: FOjALf/J0PzNJvLgQbuktJhiwSb61sejTTu4MW7EtOc=
Subject key identifier: 6D:B6:4E:25:27:24:0B:91:7B:E7:90:4D:E8:39:6D:24:7D:B8:17:61
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 01856C5CB75146129F79B1C13FF0B9B00596
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/bbZOJSckC5F755BN6DltJH24F2E.roa
Signing time: Sun 01 Jan 2023 08:04:53 +0000
ROA not before: Sun 01 Jan 2023 08:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397226
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:b7:51:46:12:9f:79:b1:c1:3f:f0:b9:b0:05:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 08:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6db64e2527240b917be7904de8396d247db81761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8b:38:8d:6b:64:1e:59:bf:6e:77:8d:33:cb:
4b:9c:85:cf:19:e5:25:23:90:a5:ea:ff:f9:aa:c1:
5e:f4:2d:6f:60:5a:a2:df:30:0a:bb:64:d2:94:89:
3a:fb:25:b0:28:91:b0:cc:75:27:16:3f:e7:1b:f1:
7e:b6:51:a2:00:ab:d0:d8:da:b1:05:c4:a1:0b:5c:
46:4b:2a:1e:98:69:4f:0b:13:87:fd:d2:01:72:93:
e8:47:0d:71:d6:e4:76:42:6e:b1:c0:dd:84:b2:25:
98:ce:7b:c5:d1:07:20:af:da:69:11:c3:ec:2a:25:
c2:bc:ad:f1:48:fc:59:fa:fb:88:3a:2a:88:09:8b:
84:6c:fc:f9:3b:e2:67:be:4c:6a:f9:e0:7c:c9:79:
80:ef:1d:20:76:28:c1:93:2c:31:a9:ac:9a:78:b0:
f5:08:0e:9d:f0:ad:f3:7a:a2:17:7a:92:b8:75:9c:
88:07:33:de:16:66:eb:0e:63:2e:d4:1f:8c:ab:96:
96:ad:24:8b:36:a5:bb:3a:1f:25:c6:2b:2d:92:b3:
77:c0:2b:60:25:c6:1f:52:a4:db:34:75:d6:db:6d:
2f:8a:00:b6:4d:fd:40:0b:fa:ab:64:37:26:3b:51:
70:ee:a0:98:0d:2e:3e:3d:2a:10:c0:95:b4:3a:68:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B6:4E:25:27:24:0B:91:7B:E7:90:4D:E8:39:6D:24:7D:B8:17:61
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/bbZOJSckC5F755BN6DltJH24F2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:8b:74:72:aa:f3:19:2e:4f:04:59:b0:29:a3:fc:20:fd:4b:
48:bd:c7:5e:f4:fa:28:e2:1e:91:40:e6:be:7f:b5:05:2e:e5:
67:6f:cb:f2:b4:b8:c7:a8:b7:0f:8e:78:42:8a:e1:1c:89:92:
ec:af:30:03:a4:31:f5:b7:c1:95:36:b1:f4:57:fd:b2:54:e2:
a0:8b:a4:fb:3b:fa:00:62:3c:7c:c1:19:66:89:a6:1e:35:75:
3d:76:f6:a1:1f:83:81:73:15:ab:87:1a:f5:92:a8:84:b5:4f:
06:06:6d:8d:a1:47:16:1f:99:f1:2d:55:c1:dc:e1:fd:4c:4c:
12:32:19:72:6a:d4:46:b4:4c:98:a8:1e:a7:6e:85:88:1e:4d:
fa:34:8b:a6:c9:1b:dc:e6:3d:e4:e6:d6:ea:7b:2d:60:9e:8c:
8a:25:db:5a:76:18:d2:ee:ef:e0:1c:8f:0a:d9:30:8c:87:3f:
3b:b6:aa:fb:72:62:4c:88:ed:64:08:a7:ef:dd:78:d3:95:6f:
bd:22:4b:0c:80:3a:a8:0e:fe:ba:92:70:0e:6e:ca:24:7e:3d:
22:61:bd:b2:f3:63:94:f0:7e:18:36:4f:a0:09:90:13:c0:07:
ac:8d:8b:6a:dd:ec:55:b4:f8:d0:fd:57:d2:c0:04:6d:6a:fa:
c8:12:f5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:06 2024 by rpki-client on console-fra.rpki-client.org