Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/KVCnZnfV1KX6PlDFNP9gQ_z4LhM.roa
File: KVCnZnfV1KX6PlDFNP9gQ_z4LhM.roa (raw, json)
Hash identifier: 8yT5Rhxoh+4aKwzbOOmrpcYfsW8pOJkGS+nQtgVQWDM=
Subject key identifier: 29:50:A7:66:77:D5:D4:A5:FA:3E:50:C5:34:FF:60:43:FC:F8:2E:13
Certificate issuer: /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial: 01856C7834E0D36D7E044141F52E6288EA78
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/KVCnZnfV1KX6PlDFNP9gQ_z4LhM.roa
Signing time: Sun 01 Jan 2023 08:34:55 +0000
ROA not before: Sun 01 Jan 2023 08:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210863
IP address blocks: 37.16.72.0/24 maxlen: 24
2a11:5d00::/29 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:34:e0:d3:6d:7e:04:41:41:f5:2e:62:88:ea:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Validity
Not Before: Jan 1 08:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2950a76677d5d4a5fa3e50c534ff6043fcf82e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:38:f0:da:3d:8d:6e:5f:bd:13:8e:08:af:
ed:9a:2c:06:63:48:da:55:1a:fc:23:e4:af:b5:19:
9a:61:f9:67:bf:ee:a0:a6:fa:ec:94:70:80:bc:90:
cf:37:60:34:b2:c4:e2:20:53:51:49:23:f5:15:86:
af:7b:9c:a4:78:af:d3:e3:da:5c:8e:3b:4a:eb:eb:
f0:56:3f:4d:df:31:83:aa:c8:d1:f8:d6:e2:20:06:
f5:50:5a:0a:68:33:58:48:8d:89:66:28:d2:17:e7:
44:39:ef:9a:bb:ee:b4:ed:b6:5f:7a:62:ad:c5:3e:
55:68:81:94:11:7d:e9:98:7d:e5:ca:9e:93:09:83:
98:67:63:ff:7e:82:fc:a4:a8:2c:ed:12:9e:c3:fe:
eb:cd:3c:25:03:34:22:17:8f:85:1d:36:8c:37:76:
ce:79:23:5d:47:99:03:2e:02:e3:61:12:cc:93:7a:
df:c0:e8:0a:00:14:f5:c8:d6:e1:fb:e1:e9:60:f3:
a8:88:3f:67:d9:d6:5c:d9:7d:07:f0:17:eb:b1:f8:
a7:9e:87:c8:12:c2:71:e9:c9:46:96:6a:24:f6:f3:
d7:33:30:80:ad:09:cc:55:c6:b4:06:65:ca:1f:f4:
13:6f:0e:4c:66:0c:8b:f2:c2:a6:9b:5c:d7:ff:75:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:50:A7:66:77:D5:D4:A5:FA:3E:50:C5:34:FF:60:43:FC:F8:2E:13
X509v3 Authority Key Identifier:
keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/KVCnZnfV1KX6PlDFNP9gQ_z4LhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.72.0/24
IPv6:
2a11:5d00::/29
Signature Algorithm: sha256WithRSAEncryption
31:a6:ee:e4:11:84:4c:38:a9:9b:b9:b3:34:f9:a4:71:11:9a:
c3:6e:72:d4:8e:ab:1a:cb:6a:f2:9e:36:08:f8:7f:f6:7f:87:
7c:5d:7a:0e:b2:3e:f8:88:a3:1e:8e:ab:9b:af:2c:0f:39:29:
f2:7c:6c:6d:41:88:00:7e:8b:87:6f:29:08:2f:e1:f4:c1:67:
88:e8:d7:a1:50:35:2f:92:54:61:0f:b3:dd:06:9d:a7:5c:30:
b5:2f:ca:83:63:fc:a8:df:4a:e3:78:6f:e1:81:fc:d5:c7:33:
c0:74:61:2e:5a:d2:6a:eb:15:00:b4:26:33:38:b2:91:09:72:
20:81:f8:32:b2:c6:74:8c:2f:3b:9d:b0:c0:e6:9e:63:00:d2:
af:f4:b8:56:a5:f2:18:bf:8a:a8:a7:81:2a:1a:37:3e:0f:ff:
87:1a:2c:4e:31:77:d6:91:e7:f5:d3:03:67:ee:b8:b1:c6:b8:
c6:07:b3:8c:b7:c3:3d:d2:ee:1c:7f:e9:b3:d0:f6:1b:ab:1b:
c6:21:dc:be:be:7a:87:cf:f3:b6:b2:38:3a:c7:c1:29:99:e3:
05:c5:87:87:bd:e7:3f:4c:6d:f5:18:4a:d9:f3:2b:fb:1a:54:
c3:48:e5:91:dd:74:7b:85:1c:d4:f7:e5:8e:08:5a:e3:3e:05:
f2:16:4e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:55 2024 by rpki-client on console-fra.rpki-client.org