Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/J2AWGNPBZwVcoxGF4R5nfQW0CFo.roa
File: J2AWGNPBZwVcoxGF4R5nfQW0CFo.roa (raw, json)
Hash identifier: T2qEcK+STT++xO7uP5uxuvqc3rN6cvKuk33K2thQIvA=
Subject key identifier: 27:60:16:18:D3:C1:67:05:5C:A3:11:85:E1:1E:67:7D:05:B4:08:5A
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 01856F42E7A13791FC7D270E50B5A06C060C
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/J2AWGNPBZwVcoxGF4R5nfQW0CFo.roa
Signing time: Sun 01 Jan 2023 21:35:33 +0000
ROA not before: Sun 01 Jan 2023 21:35:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 37.1.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e7:a1:37:91:fc:7d:27:0e:50:b5:a0:6c:06:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Jan 1 21:35:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27601618d3c167055ca31185e11e677d05b4085a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:5f:0a:bf:b4:ed:59:30:d0:60:73:ea:5f:
42:ef:45:74:ca:e8:ac:3e:4d:13:81:25:59:c6:10:
20:49:7f:67:fe:e1:47:5f:d5:11:99:10:cb:e3:2c:
80:fd:78:46:92:0f:d2:53:d0:cb:8b:57:e9:4f:48:
41:01:42:60:ce:fe:2d:c8:98:31:11:30:50:9d:0a:
65:0e:d4:b0:22:9f:cf:c8:ab:e2:a1:03:e5:29:a3:
6a:8e:49:87:3f:ab:d8:75:82:09:ed:7c:c7:87:e7:
a1:f9:66:63:af:14:ec:17:ea:aa:c7:38:6b:bd:68:
34:8c:0a:8c:9a:24:8f:bf:a5:26:aa:ff:cb:ec:cb:
44:c1:af:73:93:68:6a:c9:cc:53:cc:eb:b0:7a:0b:
32:ef:f8:22:41:1c:5b:5d:be:da:1b:48:23:02:02:
9f:41:91:5e:a9:32:7f:ad:63:c0:7c:d7:51:ee:92:
96:e7:b0:26:e9:8c:84:c9:c4:f5:8e:90:ed:e0:0f:
66:07:23:5e:58:3f:5a:3f:24:ca:d7:a8:5e:55:4d:
3f:ef:8a:23:29:c1:c8:0a:ca:f4:03:4b:c7:cd:ec:
28:08:00:5d:70:25:f6:8b:0b:19:70:46:67:2b:cd:
7c:53:b0:3d:53:b2:5f:01:63:19:40:78:08:ef:88:
01:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:60:16:18:D3:C1:67:05:5C:A3:11:85:E1:1E:67:7D:05:B4:08:5A
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/J2AWGNPBZwVcoxGF4R5nfQW0CFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.190.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8b:b8:55:a1:a0:f4:4f:fc:37:f7:d2:a5:ac:aa:67:c4:57:
c0:20:f5:f8:e9:aa:15:5e:f3:86:9e:32:d4:0c:07:97:8b:ad:
70:b0:36:60:cc:57:0c:cf:b9:0e:e0:0a:ea:b2:e7:d0:5e:56:
9c:5e:e2:f8:8f:cc:e6:de:23:d0:8c:82:22:d9:45:7e:17:ed:
c4:c4:8e:99:92:29:b3:76:e3:35:57:77:84:44:d1:ea:d8:40:
10:65:57:28:33:76:65:91:d1:28:4c:7b:52:38:ea:64:dc:13:
38:67:5f:b9:5b:3e:0c:a3:16:8c:41:a2:42:dc:0c:97:a7:43:
dd:21:7f:06:de:0d:d0:e7:63:de:d5:66:e3:b5:c3:c8:04:da:
d0:86:1a:6d:6b:9c:82:6f:75:0f:d4:20:6d:79:1e:94:7c:a8:
ba:05:bb:5c:98:4c:17:7d:c8:eb:80:88:19:b6:cc:cf:7c:19:
e1:34:1f:83:47:0e:a2:65:82:c1:ec:c8:f1:62:d4:02:ca:c4:
24:fa:c6:5a:28:5f:c8:3b:fa:51:e7:6f:0c:5a:c8:db:27:ec:
07:34:24:2d:cc:33:b5:8b:00:b4:a6:51:77:c1:65:a3:ab:60:
00:22:a0:d1:c0:ac:c7:30:b1:1f:14:7b:c2:59:1a:0d:49:b5:
ce:e4:22:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 08:11:02 2023 by rpki-client on console-ams.rpki-client.org