Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P5VpdlKtUF7ZknrSbVqt45AL6pM.roa
File: P5VpdlKtUF7ZknrSbVqt45AL6pM.roa (raw, json)
Hash identifier: TDy0ddDoXW+kYScyNUexEhkFz7LT5Nv4sueyQtErSNo=
Subject key identifier: 3F:95:69:76:52:AD:50:5E:D9:92:7A:D2:6D:5A:AD:E3:90:0B:EA:93
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018803E093AD78A54D1BE407D3AD0342173B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P5VpdlKtUF7ZknrSbVqt45AL6pM.roa
Signing time: Wed 10 May 2023 04:17:09 +0000
ROA not before: Wed 10 May 2023 04:17:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46573
IP address blocks: 37.153.158.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 20:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:03:e0:93:ad:78:a5:4d:1b:e4:07:d3:ad:03:42:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 10 04:17:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f95697652ad505ed9927ad26d5aade3900bea93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:5c:82:ce:0b:14:60:35:0f:9a:94:67:99:
a2:c0:a2:48:36:13:84:61:05:95:7e:c1:7c:ba:54:
32:da:16:fb:82:df:8a:0d:ed:4f:c6:bb:d7:7a:9f:
fa:cc:ac:03:12:f5:0a:e4:80:fe:8c:a3:11:94:01:
79:0d:fc:4e:1d:91:06:36:c8:d7:28:d2:85:a6:c6:
6a:b7:ee:96:c5:8d:d9:20:f8:10:c3:ee:17:9b:b2:
d5:76:5b:93:dc:ff:2c:f3:34:4b:ef:f5:67:40:36:
9c:cc:d6:dd:48:46:1d:27:4a:25:5d:ec:95:4d:af:
bf:47:10:ea:3f:b5:64:bd:8d:e5:81:f7:39:ed:8d:
61:af:6b:a9:87:e5:fa:8b:66:0e:65:02:62:c1:35:
80:38:60:0b:34:01:8e:17:27:ca:45:78:be:fd:31:
9e:3e:1a:fa:86:fa:2d:b8:36:ed:9f:b0:c5:90:74:
e3:7b:49:1b:35:a8:bb:55:df:3f:1e:0d:65:95:01:
c3:2c:6a:9c:61:38:33:b6:0a:c0:c1:53:8b:5b:78:
22:e9:a6:57:ba:e8:a3:4c:6c:1a:7d:8b:d1:a8:20:
eb:35:79:ee:cd:9b:08:64:4c:07:e2:cc:a5:97:b1:
64:8c:ee:e4:a4:84:e5:fa:06:bc:34:72:88:a3:9a:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:95:69:76:52:AD:50:5E:D9:92:7A:D2:6D:5A:AD:E3:90:0B:EA:93
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P5VpdlKtUF7ZknrSbVqt45AL6pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.158.0/24
92.114.54.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9b:42:58:82:f2:92:1b:11:96:a4:b6:3a:46:b9:45:87:8c:
d8:14:96:8a:14:56:e3:7d:72:65:62:99:ec:9b:93:ae:ce:de:
88:bc:a9:d7:60:86:e4:9e:9e:2e:7a:d3:b3:fd:03:08:9c:8a:
af:4a:3a:93:99:ee:bf:a7:8b:69:54:a7:68:5b:14:06:bc:c3:
29:46:38:9e:7c:d9:8a:29:12:25:a8:3a:01:cf:7e:81:f6:78:
2c:db:24:b4:15:6c:c6:b8:1d:27:aa:35:0e:8c:97:70:5c:50:
85:d4:39:22:2c:c4:11:7e:2e:4d:d4:2b:f3:72:38:2c:36:dd:
f0:2f:75:61:c4:79:28:1f:ca:6b:87:d7:64:7d:7f:a4:c0:d6:
70:17:03:24:9d:03:01:4b:b3:3e:66:f6:0f:99:9a:41:22:e5:
66:d3:a8:af:24:30:6b:c1:89:24:1c:c2:89:03:c9:65:74:a6:
5f:84:76:ae:e2:e6:9e:5b:95:27:8f:bf:a2:13:e7:a3:98:d8:
0a:d2:84:c6:e0:ea:f1:5d:85:e6:64:1e:53:69:e6:53:3b:ee:
69:20:63:a1:15:65:9d:b9:77:40:a1:ee:c5:c3:02:89:cf:4f:
a9:60:48:8a:c3:f6:95:62:50:5e:a1:09:cf:6f:5a:1c:c3:58:
e4:d7:e7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org