Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/90T_7epvCENM3vRVN0xIFoJMwO4.roa
File: 90T_7epvCENM3vRVN0xIFoJMwO4.roa (raw, json)
Hash identifier: el9M2BpgG3dCxQsnVFLm1HL8/UdMaMtNl+K0IvNDq9E=
Subject key identifier: F7:44:FF:ED:EA:6F:08:43:4C:DE:F4:55:37:4C:48:16:82:4C:C0:EE
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 018570FBC4CD64AD6CA72E67D67E48B5B565
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/90T_7epvCENM3vRVN0xIFoJMwO4.roa
Signing time: Mon 02 Jan 2023 05:37:06 +0000
ROA not before: Mon 02 Jan 2023 05:37:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61113
IP address blocks: 37.209.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:c4:cd:64:ad:6c:a7:2e:67:d6:7e:48:b5:b5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Jan 2 05:37:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f744ffedea6f08434cdef455374c4816824cc0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:44:95:63:86:59:20:67:29:2f:83:8c:81:08:
1f:98:d1:70:01:45:cc:73:e5:f6:19:fc:ec:1c:58:
ec:05:5b:c9:31:8f:f2:af:ec:1c:35:c9:6a:57:d9:
12:ee:5f:92:82:58:8f:98:ef:19:10:04:04:75:46:
a7:79:74:94:52:b8:2f:fa:1a:5b:1b:4a:33:04:fc:
dc:b4:1b:29:da:e6:a9:77:dc:fb:4b:2d:88:88:f1:
bb:c9:3c:f1:dc:73:8f:25:74:e0:d6:be:0e:c1:c3:
09:c5:dd:a4:17:8f:bc:f7:e8:c7:9e:72:8c:4a:a4:
67:02:42:19:65:fd:ea:4d:62:3a:dd:ea:06:0d:04:
da:f4:a5:b8:a6:e7:3e:7b:50:96:d9:f1:87:db:82:
52:24:40:fc:6d:08:20:8f:31:62:77:32:b7:18:cb:
7e:85:51:c1:74:cc:0b:09:b1:ba:65:85:25:2d:12:
f2:d2:3c:e6:16:97:e4:85:cd:fc:d8:31:49:d6:2b:
ab:96:60:7d:6e:ab:ba:a8:a5:cf:c9:3d:ce:5f:2f:
08:4f:da:fe:1a:4d:3e:97:27:f1:43:06:d0:78:db:
b5:f9:0f:1b:94:88:2c:bf:54:51:2d:44:ae:88:be:
57:d3:e5:3c:67:f2:ca:e9:07:62:9a:92:36:8a:c0:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:44:FF:ED:EA:6F:08:43:4C:DE:F4:55:37:4C:48:16:82:4C:C0:EE
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/90T_7epvCENM3vRVN0xIFoJMwO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.251.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d5:16:bc:6f:eb:8e:8c:75:4d:ee:80:2c:b3:0e:8a:ee:68:
3e:2e:d6:fc:e7:85:66:ee:1c:91:7c:f4:f9:18:ae:95:9c:87:
e9:59:a2:60:cd:eb:77:b6:e0:66:69:a9:c8:58:e7:ae:02:b7:
d0:ea:9e:a3:e1:0c:1d:46:25:0e:eb:cc:92:b7:70:4d:c0:06:
63:45:0e:fd:36:2c:5b:23:93:60:be:39:54:f3:25:d2:e9:20:
83:0e:8c:41:96:20:49:a3:f4:9b:db:cc:8d:f9:2b:1f:8d:15:
68:91:f2:de:9b:7c:d0:96:61:80:31:0e:13:bd:71:fd:91:42:
fc:f9:31:2e:4e:61:80:92:94:2e:37:cb:8b:1c:c4:3b:ba:ff:
88:6b:45:0a:3c:b2:c9:4a:84:e4:77:da:e9:53:3f:a9:e2:b8:
4f:2e:aa:32:40:ac:0b:43:9a:87:1d:88:4c:3d:e3:8a:17:03:
8b:0a:14:a2:97:85:97:50:57:40:5f:9b:8b:38:57:1f:08:15:
9b:57:c5:35:72:50:90:9b:77:f1:f4:b8:e0:6d:4e:b0:ec:68:
50:85:20:76:8e:f2:da:fd:1d:11:e9:4e:21:58:3c:73:a3:7d:
37:49:c7:c1:cb:d4:0f:e8:8e:07:5a:e0:2c:a6:4d:db:35:31:
aa:82:41:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:05 2024 by rpki-client on console-fra.rpki-client.org