Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/7y26rShEjmuhOxNlURFd9_L4NBs.roa
File: 7y26rShEjmuhOxNlURFd9_L4NBs.roa (raw, json)
Hash identifier: KYXJS4lGGmHHiSujQ6BrQ3Ko9MzyLUKe7b8Q23q7fJA=
Subject key identifier: EF:2D:BA:AD:28:44:8E:6B:A1:3B:13:65:51:11:5D:F7:F2:F8:34:1B
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0185CE988518832D8C675C43CCB9178525A7
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/7y26rShEjmuhOxNlURFd9_L4NBs.roa
Signing time: Fri 20 Jan 2023 09:53:00 +0000
ROA not before: Fri 20 Jan 2023 09:53:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200197
IP address blocks: 37.230.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Mar 2023 15:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:98:85:18:83:2d:8c:67:5c:43:cc:b9:17:85:25:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 20 09:53:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef2dbaad28448e6ba13b136551115df7f2f8341b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:dd:41:75:81:49:80:55:e1:02:24:a5:02:
d9:e3:56:d3:f8:1a:7e:db:9f:31:31:5e:cf:67:d6:
e4:90:74:8f:48:81:9a:fc:36:81:60:cb:0b:22:13:
1b:70:8f:93:89:6b:e2:45:93:c4:a0:79:48:60:72:
9e:84:91:86:6e:f1:12:d9:c9:05:13:55:44:83:fa:
96:09:ed:3b:6a:3d:42:19:35:81:d9:d6:48:ba:84:
a9:cc:40:1b:7f:c6:bf:9e:f1:4d:7c:38:b6:5d:46:
9e:f4:35:84:d3:40:e7:ae:35:76:c8:97:6c:44:2e:
c7:39:66:37:4c:e2:4f:98:4d:22:f0:5d:85:e4:de:
f6:6b:14:f6:08:b5:6f:c6:77:ea:7c:80:79:94:04:
ed:84:34:bd:39:a3:73:12:29:0e:e8:3b:25:0c:9a:
1a:79:38:7e:8c:60:0d:93:e0:a2:52:e1:af:c7:4e:
92:15:23:01:11:7b:c8:72:f3:20:cd:e7:db:b2:cb:
c4:d0:c4:9c:fb:d6:f2:39:48:15:62:a8:39:f2:66:
23:c7:52:53:b5:6e:a3:a1:35:ca:7b:ec:49:5e:85:
2f:61:13:0b:fe:ba:c5:c1:32:13:d3:93:d4:24:bc:
d4:cc:0e:d7:f2:4f:32:be:a4:84:9d:4e:45:f6:59:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2D:BA:AD:28:44:8E:6B:A1:3B:13:65:51:11:5D:F7:F2:F8:34:1B
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/7y26rShEjmuhOxNlURFd9_L4NBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2c:4b:11:dd:c6:01:b4:82:b5:f3:3b:84:35:36:55:6f:f5:
ba:2e:e9:73:9a:ff:40:86:ba:1d:b7:b0:f6:99:a4:75:fa:4e:
a3:a8:8f:88:27:20:1f:d9:78:57:56:bc:78:d0:45:86:ad:94:
1a:84:54:5a:46:a1:70:88:75:b1:a5:8f:13:bc:ab:27:14:a6:
74:97:ab:f7:bb:df:8f:f2:30:22:38:39:70:d3:bd:39:b4:9c:
f1:3d:9b:5f:1b:bc:4a:50:33:4c:83:69:72:7e:2e:29:6e:a4:
cc:22:4f:88:eb:18:54:7c:1a:5f:7a:fc:4a:a2:45:68:48:37:
07:13:c0:bb:18:b1:4c:d8:0a:b0:6b:4b:c4:34:80:10:72:7b:
3f:60:45:a8:17:6f:40:4b:8d:f7:f0:e0:94:c7:a0:53:37:04:
24:32:cf:7c:4d:67:9e:34:f6:6c:88:00:6b:2d:2f:61:a2:9f:
6e:a7:d6:ea:62:ee:9a:c7:43:af:c7:be:b4:e2:96:ff:ac:30:
8e:57:bc:a7:c0:5b:0c:07:cc:44:8b:5e:64:8f:0a:48:89:74:
4e:07:ca:b5:fb:86:bc:1e:e2:a1:67:b5:4f:2b:6f:f2:47:e6:
b1:4b:87:46:e6:c0:23:94:8d:f1:21:cb:9f:a6:50:a3:b0:de:
3e:b3:cb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org