Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/xe7e24QuzCYZxcCZuPSqWbDNRdo.roa
File: xe7e24QuzCYZxcCZuPSqWbDNRdo.roa (raw, json)
Hash identifier: wTTnCwXD+0O4ecSt5xUapXRw7A/dNVugveakLC3Sryw=
Subject key identifier: C5:EE:DE:DB:84:2E:CC:26:19:C5:C0:99:B8:F4:AA:59:B0:CD:45:DA
Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial: 018570FBDC903945FD1A591B7BF01B6A55EE
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/xe7e24QuzCYZxcCZuPSqWbDNRdo.roa
Signing time: Mon 02 Jan 2023 05:37:12 +0000
ROA not before: Mon 02 Jan 2023 05:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8820
IP address blocks: 37.130.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:dc:90:39:45:fd:1a:59:1b:7b:f0:1b:6a:55:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Validity
Not Before: Jan 2 05:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5eededb842ecc2619c5c099b8f4aa59b0cd45da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:3d:05:d0:ef:8a:b1:67:6c:13:29:4e:80:
d4:09:b7:de:23:ab:f6:12:22:1b:7f:4d:ae:80:63:
3c:cc:fa:ef:7a:13:72:2f:fb:60:c3:b8:cc:61:f7:
4d:1f:5f:20:af:2e:f8:f3:ef:86:52:64:37:c9:5b:
97:e2:2e:fd:5e:e1:27:59:03:a9:bb:f9:42:67:9d:
71:ee:9b:e2:89:64:78:0c:8b:d8:37:a3:a4:39:95:
b7:de:dc:db:ac:71:fc:ed:30:1f:f4:25:73:ca:69:
ac:97:c4:4b:be:4b:d4:de:99:12:f3:78:d6:19:3b:
60:7c:ec:72:db:22:9e:8f:e0:16:19:30:01:a4:81:
16:1c:e8:6c:93:3a:51:40:44:5c:8a:73:d9:6d:0b:
a2:af:b8:6d:f9:cd:22:1e:22:c1:ac:b3:7b:40:0d:
40:01:d9:c3:ee:ae:65:07:6d:6f:30:f6:d7:06:94:
9f:fb:1b:48:cd:81:2c:6f:b7:41:f0:22:8b:7e:4e:
06:19:6a:88:00:8d:fb:f3:b0:f6:2b:cf:38:f5:f4:
ff:6e:8f:5b:06:59:a7:72:d5:86:0d:51:ff:57:2a:
fb:f0:84:df:9e:07:cb:d1:d4:b1:7a:1c:ea:e7:01:
15:bb:27:b5:9d:d5:3d:a1:a6:af:9c:96:c3:04:b4:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EE:DE:DB:84:2E:CC:26:19:C5:C0:99:B8:F4:AA:59:B0:CD:45:DA
X509v3 Authority Key Identifier:
keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/xe7e24QuzCYZxcCZuPSqWbDNRdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.137.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f5:0d:83:68:85:26:4f:d7:54:7c:52:05:74:79:73:da:cc:
62:bd:ba:41:3d:c6:9b:94:83:fc:32:95:a7:86:ab:4c:4e:ae:
57:6c:c9:45:52:49:a0:cd:84:25:51:6d:00:e7:6d:01:55:f1:
47:d1:ef:f5:4d:ad:38:db:af:e0:e3:e6:00:99:90:6d:a5:77:
9a:9b:69:19:0a:c6:7c:3a:31:a7:48:79:ca:3f:c4:32:50:28:
30:f8:e5:14:45:2b:1f:43:b5:aa:65:23:5c:ae:51:70:c3:5b:
b7:ee:44:c6:8c:0c:ed:e0:17:a3:24:d3:9b:8a:96:6f:03:10:
cb:51:62:7e:bd:d9:13:79:81:b0:0c:f7:8b:fc:5c:33:f8:46:
ef:4e:6e:0a:09:ee:57:ae:76:49:c0:e8:77:38:3b:75:06:e7:
c1:be:1e:56:1c:08:42:db:34:5b:1e:63:17:25:f6:4d:83:be:
bf:a3:fd:fb:4c:60:aa:de:60:f6:49:5f:c7:1c:7d:b1:93:37:
f9:4c:65:30:0f:ca:3b:a5:4a:08:0c:1b:28:9a:e3:f4:23:29:
e2:eb:e5:05:f4:4e:74:35:8a:9c:47:b6:9e:38:38:16:7b:f8:
7d:10:29:e2:2b:b1:34:fd:f1:47:05:77:2e:06:d2:05:14:b1:
4e:fc:2a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:25 2023 by rpki-client on console-fra.rpki-client.org