Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/kEeFMQ5go1n8Rqmuv32mIS-90xU.roa
File: kEeFMQ5go1n8Rqmuv32mIS-90xU.roa (raw, json)
Hash identifier: vPte4zGQmClrJn3vDP9X0hLYxnfljAbnBxPxwWbD38E=
Subject key identifier: 90:47:85:31:0E:60:A3:59:FC:46:A9:AE:BF:7D:A6:21:2F:BD:D3:15
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 01856E01CA00D4188C899B1E23B902AAB990
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/kEeFMQ5go1n8Rqmuv32mIS-90xU.roa
Signing time: Sun 01 Jan 2023 15:44:49 +0000
ROA not before: Sun 01 Jan 2023 15:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49858
IP address blocks: 37.156.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:ca:00:d4:18:8c:89:9b:1e:23:b9:02:aa:b9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=904785310e60a359fc46a9aebf7da6212fbdd315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:fb:23:d3:1e:46:17:6e:3c:c8:18:c4:f0:
ad:63:65:22:be:09:91:eb:dc:f2:97:9b:3b:09:c0:
1f:1a:ef:88:90:df:ad:3c:05:c9:17:1c:2b:67:0f:
22:19:ae:31:f3:55:0c:af:d3:66:95:d4:c8:1f:a3:
98:b8:27:d1:5d:e5:e5:7b:7c:8c:e2:27:ab:fc:3a:
c4:16:dd:17:57:fa:96:f6:c1:96:e7:0b:be:a5:a7:
a9:0e:d8:97:00:eb:33:12:f6:8a:f5:d8:86:5f:61:
a6:50:28:49:09:1e:e4:22:93:00:a8:5e:2f:d4:85:
cf:2f:b8:d9:4a:a1:83:2f:41:7f:84:da:7b:d2:ac:
d6:5f:68:bf:9e:0e:7a:0e:01:d5:73:fa:ba:c8:98:
32:66:3d:65:08:07:d9:6e:41:9d:5b:2a:5f:a6:f0:
b9:29:f2:40:88:61:a7:6f:ef:0c:f6:1a:45:12:4e:
2d:40:c7:0f:54:12:9a:15:fb:40:d7:9a:14:8b:39:
c1:00:f9:e3:b0:eb:6c:df:35:0d:dc:b3:3a:9a:87:
c5:90:82:85:45:a2:12:65:a0:15:62:19:0a:3d:92:
d0:7c:a0:f3:bf:3c:10:5e:8c:c8:fc:2d:e7:89:20:
7b:53:f8:7f:e2:1b:de:f8:aa:f1:ae:13:da:5d:2d:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:47:85:31:0E:60:A3:59:FC:46:A9:AE:BF:7D:A6:21:2F:BD:D3:15
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/kEeFMQ5go1n8Rqmuv32mIS-90xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.194.0/24
Signature Algorithm: sha256WithRSAEncryption
13:11:22:b4:86:8d:bc:85:d9:ba:c2:93:88:0a:93:ec:e8:2d:
af:08:e8:82:9a:76:f7:e5:89:11:96:45:71:d0:75:32:02:66:
c6:13:fd:e3:b4:d3:39:36:59:83:68:72:d9:ca:5a:f5:a0:2c:
32:19:79:12:91:9c:87:22:14:db:1c:7c:d5:c1:b7:14:84:39:
72:11:0b:ca:70:7e:e3:84:c9:64:09:e1:81:3b:cc:01:8e:9a:
67:58:b6:a8:3b:e4:84:f9:7d:0b:ed:be:fa:a9:e7:70:d2:5d:
d7:5b:ff:97:b4:52:54:5c:b0:79:32:a7:aa:8a:27:3f:68:77:
a4:b2:6a:83:bf:1b:2f:56:24:aa:c9:69:d2:94:b8:e8:7a:60:
57:7e:80:d6:d2:0e:7a:99:1b:7b:4f:f2:b1:53:e3:0b:0c:a9:
4b:04:4e:1f:94:f5:65:2f:54:0b:26:45:d9:61:bd:a8:fb:9b:
ad:6e:d8:8a:86:a1:09:91:f0:94:de:e2:d4:d0:d8:6d:bd:b1:
70:f9:c9:32:59:f0:a3:25:22:0c:44:fe:89:b0:8d:8e:c0:ee:
5d:f8:4a:55:00:9a:cc:81:60:b4:b4:dc:03:27:ad:1c:da:08:
f9:98:f5:91:bc:48:0b:a0:98:dd:24:94:e3:ce:45:f7:df:33:
d0:65:5f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:12 2024 by rpki-client on console-ams.rpki-client.org