Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/5M3NhY0BLDxwsdISye3XAY1BKi0.roa
File: 5M3NhY0BLDxwsdISye3XAY1BKi0.roa (raw, json)
Hash identifier: YI9okh/f2j9FsC5GY5XZiSB7of7vA/mHcwf3nqs4+pU=
Subject key identifier: E4:CD:CD:85:8D:01:2C:3C:70:B1:D2:12:C9:ED:D7:01:8D:41:2A:2D
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 01857155649100FF764162391ACBA923D708
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/5M3NhY0BLDxwsdISye3XAY1BKi0.roa
Signing time: Mon 02 Jan 2023 07:14:59 +0000
ROA not before: Mon 02 Jan 2023 07:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 37.0.8.0/24 maxlen: 24
37.0.10.0/23 maxlen: 24
37.0.14.0/24 maxlen: 24
85.202.168.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Nov 2023 15:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:64:91:00:ff:76:41:62:39:1a:cb:a9:23:d7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 2 07:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4cdcd858d012c3c70b1d212c9edd7018d412a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:58:a3:a2:ee:cd:9e:23:30:e7:34:31:e7:
56:4b:bf:e2:0c:41:1c:8d:f5:f7:73:40:40:12:94:
19:9e:a5:d5:e2:13:df:13:f8:a6:10:d6:24:d2:78:
51:e1:8c:63:d6:a0:20:a1:73:12:6a:16:bc:68:a4:
91:71:23:c0:e1:6a:49:4a:ab:6b:c5:56:43:81:60:
bd:ff:ac:9d:bb:62:35:13:d8:84:77:d8:14:f1:95:
fc:6e:c6:19:28:30:44:6a:a7:c4:1d:b6:ff:56:03:
1a:63:c0:92:59:1e:8c:e1:81:5b:4c:82:0c:7d:70:
bd:36:4c:58:25:4b:9c:eb:8e:85:dc:64:9f:d8:1e:
00:59:2f:2d:bf:59:ab:64:13:1d:e3:77:5d:db:cd:
53:f4:72:ab:fb:5f:e3:96:a2:54:43:66:9a:b8:41:
bf:08:43:c5:89:67:e4:aa:a0:c2:a0:a3:b5:47:bd:
54:7a:d4:5a:49:21:e4:f9:f9:14:db:7e:8f:35:01:
10:08:e0:04:30:bc:08:f6:bc:c4:b2:0a:07:04:a4:
4c:40:49:12:41:9b:d8:7b:5e:c1:15:e5:19:b0:41:
20:8b:2e:2e:c5:eb:5e:1a:88:f8:ae:64:80:33:e8:
0b:6b:d7:dd:57:ca:63:da:5d:14:25:02:f0:81:6a:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CD:CD:85:8D:01:2C:3C:70:B1:D2:12:C9:ED:D7:01:8D:41:2A:2D
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/5M3NhY0BLDxwsdISye3XAY1BKi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.8.0/24
37.0.10.0/23
37.0.14.0/24
85.202.168.0/23
Signature Algorithm: sha256WithRSAEncryption
38:71:c3:55:fa:0c:11:0f:b3:b8:04:22:db:3f:4c:74:3b:9a:
99:51:b4:ee:27:33:f4:78:8b:ec:77:e1:19:03:a7:d7:ff:cd:
b7:d7:06:0e:92:8c:27:8c:00:02:ac:6d:41:f1:6d:39:34:89:
f6:6b:bf:1d:00:43:ff:a8:49:04:91:2c:4e:48:8e:73:9b:96:
dd:25:e3:38:14:ee:40:90:8c:5b:51:f1:1c:11:2f:12:e4:17:
6b:3e:fd:e7:90:fd:bf:ed:92:65:b3:dc:db:61:e2:5b:5b:0c:
4b:9b:68:97:2c:d4:88:6c:48:01:b6:3f:bf:45:02:93:80:d3:
5c:c5:88:5f:65:1c:90:6d:02:51:32:bc:72:4e:99:54:aa:af:
19:69:66:ef:69:a2:9e:14:7a:5a:f1:2e:da:4c:49:6c:58:4d:
64:47:a5:ea:88:e3:7d:45:60:c4:81:e8:55:c1:2d:d6:f2:56:
f2:9d:d1:89:9e:5c:91:a6:06:af:9b:c4:c8:f4:75:35:05:95:
8d:79:1a:17:93:05:a3:40:5b:62:f0:98:d3:0b:aa:25:fa:5b:
fb:bf:b6:4b:0e:0b:40:2a:a6:11:2d:e4:7e:fa:f4:a4:69:09:
3b:ea:a4:20:86:fd:71:db:6c:82:42:40:a1:98:c4:cb:aa:99:
db:fd:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:58 2024 by rpki-client on console-ams.rpki-client.org