Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EVVeR8oOhYnFiiu0_SCCeAqmKYI.roa
File: EVVeR8oOhYnFiiu0_SCCeAqmKYI.roa (raw, json)
Hash identifier: uUrXlC/7ZDkpVn1HsYoybr7+853YYuzZLbu1DNy+TE4=
Subject key identifier: 11:55:5E:47:CA:0E:85:89:C5:8A:2B:B4:FD:20:82:78:0A:A6:29:82
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A4049172EF6487B9881AB036E74AE
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EVVeR8oOhYnFiiu0_SCCeAqmKYI.roa
Signing time: Sun 01 Jan 2023 03:05:06 +0000
ROA not before: Sun 01 Jan 2023 03:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204496
IP address blocks: 37.18.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:40:49:17:2e:f6:48:7b:98:81:ab:03:6e:74:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11555e47ca0e8589c58a2bb4fd2082780aa62982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:76:65:a8:5d:42:0b:28:4f:4b:51:4e:b4:
74:e9:b3:55:a7:25:df:ef:20:d9:68:93:1c:2e:ed:
7a:9b:cc:65:cb:54:53:c4:bc:bd:63:21:9e:c8:36:
7d:74:2d:18:cf:b4:ff:5b:10:e1:e2:1f:04:3b:b3:
c6:47:f2:05:47:07:83:04:cc:66:ac:12:19:c6:4e:
40:3a:bd:c8:df:11:9d:17:0a:e5:91:ef:ba:a5:7a:
ec:0e:6f:b8:9b:86:55:f5:c0:a3:7b:fd:fd:bc:dd:
6a:d4:06:d6:28:ef:6e:36:d2:9c:d0:5f:57:44:e2:
7f:4e:16:2c:8d:35:c3:f1:79:a0:d8:f8:5a:45:e0:
8a:e6:bd:a1:8b:97:cc:b6:ce:16:8b:3c:9f:d6:d1:
75:f3:75:42:74:71:e1:5f:19:ba:04:d1:00:86:b6:
79:70:fa:1f:7c:c8:79:04:08:da:9e:2a:f8:5f:97:
de:83:d4:c7:6e:ac:a6:51:44:ae:e3:1d:12:20:e6:
7f:be:57:43:aa:ca:ca:15:ef:44:32:51:99:eb:85:
30:30:c1:65:fe:a3:5d:12:c2:35:5e:ee:40:a2:df:
3f:99:a4:32:33:1a:a1:79:17:41:97:86:c4:e8:7c:
10:6b:df:4a:ba:92:3e:29:dd:f9:9d:a1:56:c4:5c:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:55:5E:47:CA:0E:85:89:C5:8A:2B:B4:FD:20:82:78:0A:A6:29:82
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EVVeR8oOhYnFiiu0_SCCeAqmKYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:a2:c8:4d:c0:ca:79:4d:59:9a:3f:23:32:94:6d:0b:9d:95:
9c:fc:56:d6:ef:9e:3d:95:b2:0f:4a:d6:3f:db:d1:6a:c0:35:
c3:7d:47:5a:3c:04:d5:b2:8d:8b:ce:07:36:90:e5:fe:0c:70:
64:71:4c:39:f1:ef:5c:78:ad:97:95:b5:11:b4:3e:31:58:90:
88:23:6f:50:82:45:e7:4c:40:f6:fb:d4:6b:8e:fa:2f:71:af:
9b:76:3f:1e:b6:e7:8f:c9:9e:7f:aa:75:e8:b0:01:95:55:97:
5a:ae:ba:ea:1b:00:d7:22:32:cb:52:39:b7:87:bf:99:04:64:
44:0b:8f:8b:76:60:47:9b:36:68:72:7c:75:69:ee:ca:c9:d2:
2b:d4:b0:e0:e4:4b:ae:43:f8:9d:6f:6f:ea:d4:f4:a9:db:f3:
e3:46:22:e2:1c:be:86:b3:b9:24:07:ed:53:89:67:0c:ad:6b:
e1:91:41:0d:d4:de:c1:be:62:c6:64:26:fb:7f:0b:5c:50:12:
97:ea:38:06:1f:ee:c3:04:4c:50:d1:05:27:a0:65:9c:be:92:
a4:cd:6b:1e:6d:6a:98:3b:2b:0e:a8:fd:86:87:e2:7c:2c:d3:
a8:91:80:70:1d:12:e9:f4:8b:c0:8b:ae:f0:27:cc:4e:37:47:
d5:a3:41:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org