Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/o6UyyuF5r3hEJc94YmgnPdgHGHc.roa
File: o6UyyuF5r3hEJc94YmgnPdgHGHc.roa (raw, json)
Hash identifier: tXF2HPPj4lbphDTNsi54UF/i9x4kyRtZNHNPKsywkH0=
Subject key identifier: A3:A5:32:CA:E1:79:AF:78:44:25:CF:78:62:68:27:3D:D8:07:18:77
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 018CC87149BBBC96C765FF31DDF067941976
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/o6UyyuF5r3hEJc94YmgnPdgHGHc.roa
Signing time: Tue 02 Jan 2024 04:31:56 +0000
ROA not before: Tue 02 Jan 2024 04:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 37.140.244.0/24 maxlen: 24
94.103.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 14:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:49:bb:bc:96:c7:65:ff:31:dd:f0:67:94:19:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 2 04:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3a532cae179af784425cf786268273dd8071877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e2:f4:3e:38:8f:ee:cb:ed:a9:c9:36:fe:3c:
63:51:af:c0:70:35:63:70:8e:1a:12:8c:53:c7:33:
ec:3e:c5:99:01:f6:e6:db:28:76:27:28:85:43:ac:
60:e9:7c:b1:af:5c:03:ff:cd:7e:03:ef:34:d6:fb:
94:05:a7:31:a2:34:b4:f6:b3:96:42:f7:98:fe:e4:
91:d6:90:4e:f7:19:b2:1e:04:1e:64:63:84:b0:9e:
4b:3a:27:19:52:03:d5:d6:31:f6:60:13:de:eb:ee:
05:a6:42:f8:07:d3:54:e6:b8:fe:24:f3:66:24:3f:
bc:aa:9a:e3:43:cd:7c:89:39:8d:82:2b:54:58:cd:
43:32:29:82:e4:e5:2c:35:e8:b5:36:2f:e9:d1:30:
30:44:75:e9:25:92:14:19:ac:a6:23:e9:eb:9c:27:
13:75:d4:b0:e8:da:1a:5a:5e:61:21:14:82:b4:0c:
1b:61:71:f3:4a:a8:5e:1c:9c:4e:f4:81:29:2a:3f:
a5:d3:18:e8:fc:00:55:41:f0:38:1a:0e:72:d1:d1:
2a:24:6f:2c:65:ef:a3:47:f3:61:4f:85:81:7e:cd:
d2:1c:ee:e8:aa:85:38:99:b0:c7:3c:cb:c8:6f:14:
1e:c5:de:96:da:ed:1d:89:93:e8:0a:92:eb:dd:10:
42:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:32:CA:E1:79:AF:78:44:25:CF:78:62:68:27:3D:D8:07:18:77
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/o6UyyuF5r3hEJc94YmgnPdgHGHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.244.0/24
94.103.177.0/24
Signature Algorithm: sha256WithRSAEncryption
87:54:6d:29:5c:78:91:6f:62:1e:c4:81:fc:02:79:a0:82:1f:
3c:07:4f:18:9b:26:b8:7e:fe:e4:59:72:f9:eb:4d:d5:11:0b:
5e:d1:17:59:6f:30:c4:26:bb:86:77:2e:ad:92:5b:45:a8:ef:
3c:36:52:37:6d:e0:73:0b:6e:50:7f:c6:ef:e0:eb:ac:d6:9f:
06:3c:33:24:c1:f5:38:5a:28:99:ff:09:9d:6f:1b:45:64:27:
e6:4a:fb:18:90:09:04:e1:88:b1:e8:00:62:ce:0d:54:8c:37:
89:32:eb:e9:71:d8:2c:a1:7c:f0:ee:5f:b1:ff:f7:d8:0d:74:
77:68:fa:91:2e:60:b1:66:92:85:2e:4e:fe:13:d7:02:a1:34:
bc:e7:85:6f:d3:a4:12:9b:9b:ce:be:ec:9c:b6:58:54:9d:53:
40:3a:09:8e:c0:96:1c:9b:75:47:4b:b3:13:b9:6f:f5:8c:0d:
1a:ba:f4:9d:4f:ce:c9:05:e7:07:09:c2:84:9b:60:78:95:de:
4e:f4:9c:f4:bf:dd:bb:e7:3a:5d:0d:cd:b0:ce:b8:c8:c4:04:
38:e8:d8:15:c3:99:85:01:f5:41:ed:fe:c5:79:84:10:18:2f:
c1:0f:d3:cc:c4:cd:f3:ba:6b:8a:63:44:c6:4a:f8:8d:28:ba:
9f:58:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:18 2024 by rpki-client on console-fra.rpki-client.org