Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LFtI77MbsLVj7CuWYG2BKiFyaDk.roa
File: LFtI77MbsLVj7CuWYG2BKiFyaDk.roa (raw, json)
Hash identifier: gvLRsCs0MW75SQbLSacGyCQzNUDCVWBmbF+m5oogqhQ=
Subject key identifier: 2C:5B:48:EF:B3:1B:B0:B5:63:EC:2B:96:60:6D:81:2A:21:72:68:39
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018991C210551D76060264B79C2BD79FB0D9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LFtI77MbsLVj7CuWYG2BKiFyaDk.roa
Signing time: Wed 26 Jul 2023 10:32:41 +0000
ROA not before: Wed 26 Jul 2023 10:32:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147287
IP address blocks: 37.156.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Aug 2023 10:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:c2:10:55:1d:76:06:02:64:b7:9c:2b:d7:9f:b0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 26 10:32:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c5b48efb31bb0b563ec2b96606d812a21726839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:ab:f9:0c:3d:5e:0a:a2:3a:1f:3a:c1:ee:
f9:4a:2a:e2:0e:95:fe:50:74:37:a7:00:30:d6:5a:
51:ab:01:66:3e:78:ab:86:cd:fc:94:51:fa:f9:49:
33:6d:58:da:44:53:48:18:64:5f:0c:0c:20:ff:61:
41:d9:7a:b3:13:54:e1:7c:54:bc:32:2f:c9:a6:6d:
21:43:3f:a6:0d:31:31:63:62:6c:9d:66:24:33:e5:
15:87:2a:61:c0:c7:1a:57:9d:0e:04:a4:56:6d:4f:
11:af:ec:7a:c9:1b:de:10:55:e6:7e:55:b2:17:e6:
4e:46:7f:d4:2b:46:bf:a2:34:2e:9a:72:cc:3e:48:
53:09:4f:01:ca:23:7e:23:ac:f4:59:53:92:ba:46:
dd:47:50:58:b9:8f:47:51:12:f7:7e:a2:db:5c:57:
9f:b4:1a:48:90:ed:b3:15:6a:ed:14:cf:e1:8e:11:
b4:cd:39:23:0c:b6:b3:46:f3:eb:74:20:fa:0c:03:
7e:67:46:61:46:13:8d:43:20:b7:41:d7:27:fd:5c:
da:d8:c2:01:9f:7d:db:c5:72:9c:85:bc:86:15:bc:
c8:8c:14:8e:ba:c5:fc:9e:e3:c7:58:84:cb:f4:a5:
c1:f6:60:2a:5d:f6:32:a4:9d:be:4d:a3:1e:f1:7c:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5B:48:EF:B3:1B:B0:B5:63:EC:2B:96:60:6D:81:2A:21:72:68:39
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LFtI77MbsLVj7CuWYG2BKiFyaDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.5.0/24
Signature Algorithm: sha256WithRSAEncryption
98:79:12:09:4f:1f:d3:e2:3f:77:95:d8:86:d2:c8:4b:57:2c:
f4:70:7e:31:77:a0:a0:a1:08:19:41:de:ed:b7:ac:a5:7a:48:
58:5e:05:c1:15:27:8d:17:15:6e:8f:3c:84:be:ff:71:ea:ab:
fb:b5:1f:7f:6e:f0:2a:35:df:43:50:f7:f1:9e:7f:77:32:00:
ec:6e:ba:45:de:5f:64:8c:0c:b1:a6:af:2d:81:b4:0b:67:b8:
26:5c:41:d4:d4:8a:a3:fb:c1:e9:35:bf:6b:c7:54:47:68:75:
68:fb:94:ec:21:f5:bb:00:37:27:ca:95:10:1f:a7:78:d4:34:
b9:bb:e5:36:48:2f:c3:85:b9:8f:bb:75:ea:aa:f6:05:d1:c6:
f7:16:9e:fc:ec:ac:0a:92:81:86:35:a2:15:3e:33:21:56:2d:
15:c2:59:ba:46:a8:cc:cf:47:c2:b6:cc:bd:6f:5a:3b:f6:ea:
26:fe:44:50:04:07:4e:9c:06:c8:fe:31:50:cd:a6:13:ae:87:
48:83:a7:1e:01:4f:94:1a:14:7c:44:c7:97:ce:f9:d5:07:72:
33:42:eb:b6:be:3e:b3:25:f1:17:1c:d7:c6:2b:45:a4:4c:1c:
b9:9b:7d:6b:6c:6d:40:eb:cd:dd:47:ef:3c:22:90:c5:2a:88:
13:33:96:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org