Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/WAxKpEhPew7cTq-oNUUCwtZ0pMQ.roa
File: WAxKpEhPew7cTq-oNUUCwtZ0pMQ.roa (raw, json)
Hash identifier: DWRHr4PF81qDiDFzP7cIzNoXe/Zedr38tdtOR9WyfM4=
Subject key identifier: 58:0C:4A:A4:48:4F:7B:0E:DC:4E:AF:A8:35:45:02:C2:D6:74:A4:C4
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 018ABB7BA5D6263456FD4835A8BEAD56C50F
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/WAxKpEhPew7cTq-oNUUCwtZ0pMQ.roa
Signing time: Fri 22 Sep 2023 06:02:37 +0000
ROA not before: Fri 22 Sep 2023 06:02:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 37.221.65.0/24 maxlen: 24
37.221.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bb:7b:a5:d6:26:34:56:fd:48:35:a8:be:ad:56:c5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Sep 22 06:02:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=580c4aa4484f7b0edc4eafa8354502c2d674a4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:07:3e:65:93:27:0a:cc:fb:6e:2c:0b:f7:
5a:07:93:82:51:be:07:fd:79:06:4f:6e:d9:95:8e:
4e:43:58:97:40:52:20:e9:19:a2:30:f5:65:90:c9:
b3:82:40:21:2b:ac:c9:95:05:8c:93:04:b3:d2:78:
94:a7:a5:bd:42:a9:b0:45:56:3f:9d:38:2f:b9:a7:
34:68:ad:4d:27:eb:a8:71:04:f7:5e:aa:5d:92:ad:
90:05:f3:8a:4b:e3:cd:68:bb:4b:7d:d4:fa:d9:1b:
1f:42:8c:06:fb:92:ad:69:93:b1:67:3e:19:7d:f7:
45:26:6c:58:46:4a:e8:71:19:6e:77:79:9b:a9:15:
52:c5:34:6b:1d:5e:92:53:bb:9e:dd:d5:27:46:e0:
df:0e:27:2c:f2:6a:57:9f:62:8a:98:71:c3:29:da:
ab:79:8a:4b:ec:09:01:ae:b5:fb:13:57:3d:2a:31:
3c:e4:d5:18:1a:f1:77:28:72:0a:a5:02:9a:ad:2b:
51:a1:01:f3:44:b9:cf:e8:16:de:b8:03:75:89:5a:
6c:cf:6a:d5:77:bc:62:ff:9f:13:88:85:35:ad:86:
cd:ec:5d:dd:e1:51:8c:cd:c2:6a:dd:6f:c6:20:87:
f6:3f:a5:65:34:df:eb:4c:04:f7:3c:fd:3a:ac:43:
46:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0C:4A:A4:48:4F:7B:0E:DC:4E:AF:A8:35:45:02:C2:D6:74:A4:C4
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/WAxKpEhPew7cTq-oNUUCwtZ0pMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.64.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:1c:be:2e:32:92:e1:a9:e4:2b:d5:f8:d9:2f:f6:f4:60:dc:
bf:31:f7:a8:c5:db:00:0f:e6:a2:4b:f6:87:05:d6:ec:6f:f6:
ea:7a:7e:21:fc:0d:02:7b:65:aa:d9:db:65:0f:01:c5:ea:27:
ed:fa:7c:16:15:24:75:6f:24:52:37:aa:c9:ef:3e:f8:cf:56:
e0:e6:89:ac:26:2b:16:2c:59:43:c4:7e:d0:ff:2d:c9:b3:b3:
90:bd:2e:6b:da:dc:11:ba:3b:f2:fc:85:6e:0f:00:12:6b:b0:
7a:c4:00:38:4e:55:02:38:67:9e:31:3f:55:9f:6f:43:ad:fd:
41:48:d0:65:12:d4:7b:a5:8b:21:4c:05:cc:4c:c9:7c:06:db:
09:da:6b:11:da:e0:da:b0:83:ad:6f:db:40:19:db:6d:c2:6e:
4f:f2:fa:d6:a2:16:f7:98:1b:96:9f:f1:51:60:f1:5e:d6:95:
56:00:55:cc:df:7a:13:cf:df:5b:d2:b5:ed:6d:81:b8:9c:9b:
ce:1c:e6:28:10:05:f1:2c:f6:50:36:99:34:42:fd:ae:12:b3:
e0:b9:0c:00:a0:02:d8:07:5d:b9:67:c3:6c:4a:86:bd:3d:a5:
e3:61:39:93:ac:fa:dc:3a:e0:a3:60:cd:4f:3f:f0:af:bc:ef:
4d:55:28:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:41 2024 by rpki-client on console-ams.rpki-client.org