Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7orbiPYTFXjH1-xishRL4BHtxK8.roa
File: 7orbiPYTFXjH1-xishRL4BHtxK8.roa (raw, json)
Hash identifier: SS7zgcyJ3ptKDt+j/rfCDAmL1xy/X7mf9K4e8tRaimk=
Subject key identifier: EE:8A:DB:88:F6:13:15:78:C7:D7:EC:62:B2:14:4B:E0:11:ED:C4:AF
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188E7881B4FC9889961EC063A1B940B13E4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7orbiPYTFXjH1-xishRL4BHtxK8.roa
Signing time: Fri 23 Jun 2023 09:13:56 +0000
ROA not before: Fri 23 Jun 2023 09:13:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147287
IP address blocks: 37.156.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Jun 2023 10:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:88:1b:4f:c9:88:99:61:ec:06:3a:1b:94:0b:13:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 23 09:13:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee8adb88f6131578c7d7ec62b2144be011edc4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:c8:59:c3:17:4f:b3:22:7e:d4:c4:c8:02:
44:2e:cd:2c:b5:07:44:c1:cf:14:18:e2:16:da:2a:
37:4a:d7:85:d5:01:dc:18:0e:cc:15:74:f3:0d:78:
73:80:1c:1a:c0:12:17:35:19:3e:01:fb:3d:6a:4d:
f1:8d:2c:9a:2c:e8:c3:a4:ad:28:05:31:83:50:9f:
43:a3:cd:1b:7d:17:8c:5c:4a:90:d3:7e:79:3c:b7:
4f:48:7d:1f:a2:ee:dc:89:ca:2c:02:81:47:93:a2:
a4:72:ef:b8:f4:6c:d8:dc:2c:ad:70:9f:ac:5b:a6:
83:ce:a8:cf:3b:9b:ab:d6:7c:e1:f5:58:27:e0:ac:
c2:7e:fb:23:bc:72:8b:82:74:a8:be:8b:4a:01:9c:
f4:de:ce:dc:21:99:5b:bb:04:c3:16:ac:e7:bc:94:
33:a7:93:40:4f:7d:c1:6d:c0:8c:5e:44:8f:51:a8:
c3:f3:c0:65:5b:c9:b3:43:9b:06:51:81:ef:72:ec:
39:47:8f:9b:23:f4:5e:0c:4c:97:df:02:15:3d:d6:
ba:74:c9:bd:70:75:73:89:d2:e1:cc:63:66:cf:cb:
61:7b:da:0f:bf:92:83:f6:c7:a7:47:e7:8b:c2:d4:
4c:aa:71:f2:d7:b4:d1:2a:a0:91:8a:2b:2e:23:ab:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:DB:88:F6:13:15:78:C7:D7:EC:62:B2:14:4B:E0:11:ED:C4:AF
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7orbiPYTFXjH1-xishRL4BHtxK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.5.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d2:f1:69:b7:5e:49:42:f8:6b:70:cd:75:b6:7e:78:27:4c:
c3:93:01:67:71:58:6c:35:1e:8b:21:19:d3:c1:05:91:78:97:
90:b2:fa:b8:f7:8c:9b:ff:08:fa:b4:08:6d:5d:c7:53:ea:88:
75:fc:f6:46:e9:0c:0c:3f:29:f8:92:0f:4b:92:36:00:2a:1a:
aa:16:ed:ca:18:d2:42:83:0f:9f:ac:09:77:9c:2d:f6:b5:53:
8a:8e:b1:ac:74:18:ca:34:f8:40:b0:61:77:f9:8c:e2:9a:e2:
2d:46:b1:29:dd:f5:29:e1:16:44:e0:4d:47:e4:10:26:26:5f:
3a:fd:b6:b5:5b:4a:08:c5:77:a0:8d:69:83:fa:84:12:58:50:
c0:c7:2b:0d:f1:31:85:e2:fd:97:82:b9:e7:c6:57:24:30:dd:
89:59:eb:71:95:2e:aa:0d:e0:f6:3f:74:18:50:49:3a:db:ea:
f1:96:be:57:c7:43:08:3e:2d:4f:ff:97:c9:fc:0b:ba:0c:f1:
c5:c9:28:87:ab:fe:7b:84:31:9c:57:ef:8b:86:67:72:53:6d:
72:9c:62:29:3b:8e:c8:af:1a:59:25:32:2a:83:90:3c:60:e3:
29:0b:e1:54:f8:16:96:b2:29:cd:6c:45:5c:94:bc:75:3d:84:
c6:a2:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org