Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/RgOwN7xIv9fJHjV7-8jwqXMlEx8.roa
File: RgOwN7xIv9fJHjV7-8jwqXMlEx8.roa (raw, json)
Hash identifier: VxeA+Tc0lIV5begok70vgRxoqxwaTlLxtry7YUGJClI=
Subject key identifier: 46:03:B0:37:BC:48:BF:D7:C9:1E:35:7B:FB:C8:F0:A9:73:25:13:1F
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 01856EC2004EAEF6DA7E59580E71004224E7
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/RgOwN7xIv9fJHjV7-8jwqXMlEx8.roa
Signing time: Sun 01 Jan 2023 19:14:45 +0000
ROA not before: Sun 01 Jan 2023 19:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 43.252.28.0/22 maxlen: 32
37.61.226.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:00:4e:ae:f6:da:7e:59:58:0e:71:00:42:24:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Jan 1 19:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4603b037bc48bfd7c91e357bfbc8f0a97325131f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:85:37:aa:09:cb:46:d3:92:af:91:c8:40:
f2:77:c9:2c:76:bb:4c:9a:6c:fc:18:63:a9:0e:d2:
a8:2e:cf:56:7e:68:38:27:91:e2:c9:a5:56:f0:15:
6d:54:c5:09:b9:f3:04:8e:91:60:98:fa:40:21:37:
67:25:f8:7f:f5:70:ff:91:68:1f:b0:22:99:19:d8:
cc:9e:23:a5:c3:62:fe:e2:27:41:bc:75:eb:e5:87:
b3:0c:70:e0:c2:96:73:c9:47:7a:d3:ae:2c:db:36:
8e:1a:60:32:ab:5b:a1:31:74:01:07:39:b0:81:93:
be:fe:30:7b:73:42:30:bd:2d:53:e5:d0:70:9b:d0:
01:c8:77:60:c6:1b:a0:14:c7:06:ca:c5:fd:2f:1b:
56:a5:8e:44:c0:e6:54:d1:2a:0e:bf:56:72:3e:af:
a9:d9:c2:13:24:64:c8:99:ad:71:1e:7a:31:dc:b3:
e0:75:54:c9:31:b5:6e:ee:84:26:90:a6:00:d7:c9:
93:76:0d:92:b2:19:28:a3:3a:63:d8:27:41:5b:49:
26:bf:20:5f:c8:c2:4a:3b:d0:83:7b:6a:96:90:c9:
d3:1e:6c:95:54:27:8f:06:f5:b8:3d:ef:3d:12:66:
02:34:1f:8b:3a:bc:31:81:33:82:ef:7b:80:78:92:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:03:B0:37:BC:48:BF:D7:C9:1E:35:7B:FB:C8:F0:A9:73:25:13:1F
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/RgOwN7xIv9fJHjV7-8jwqXMlEx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.226.0/24
43.252.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:47:94:cb:67:3b:03:d3:e4:43:97:09:d9:f6:40:e7:ae:42:
7d:3e:ff:54:96:a0:02:31:38:cd:e2:58:48:ec:9d:0a:6b:96:
1e:12:c9:ff:1d:35:71:a8:fc:40:3e:cc:a9:cc:3a:f0:11:18:
ad:c7:4c:03:fb:e6:73:5f:3f:fe:93:bf:fb:f0:b3:17:ec:af:
47:6f:04:c4:2d:f9:2d:9d:73:eb:97:e0:b2:89:ec:34:ad:9c:
d4:c7:45:d0:8e:5a:ce:90:c6:19:20:ac:fa:3a:5f:a9:5f:dc:
3c:9d:45:55:e1:f0:2b:0e:17:d1:6f:07:10:e1:ea:9b:f0:ce:
78:a4:4d:13:0b:ee:28:5c:5e:9c:9d:86:8b:d9:96:a7:ad:9a:
72:e3:d3:3d:ab:5f:4e:39:82:d5:66:5a:dc:de:8a:73:59:72:
fb:7e:69:0b:00:1f:3d:a6:12:d1:32:6d:9a:d3:6e:68:91:20:
90:7a:e6:3d:0a:64:64:9d:e1:c8:f6:ff:d3:f1:2e:0b:6e:d1:
68:9c:05:6b:5a:64:81:e1:2a:90:da:51:a8:3a:e4:52:d3:22:
c0:ab:e1:74:3a:82:4c:79:88:ed:7e:06:ff:16:28:65:7c:56:
e3:a8:20:bc:e5:f2:d4:f0:13:04:cb:da:ff:98:1d:00:6b:34:
75:c8:ff:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:19 2023 by rpki-client on console-fra.rpki-client.org