Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/TGyme9XnGeJycUcFngVuIkbDCjg.roa
File: TGyme9XnGeJycUcFngVuIkbDCjg.roa (raw, json)
Hash identifier: B9up2dxNj1MwXNt+J1rWKi6BzEcu6gDWtAz8F7EjwEc=
Subject key identifier: 4C:6C:A6:7B:D5:E7:19:E2:72:71:47:05:9E:05:6E:22:46:C3:0A:38
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0186CC3D95855B2EE89CD9A475D854C73281
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/TGyme9XnGeJycUcFngVuIkbDCjg.roa
Signing time: Fri 10 Mar 2023 15:57:13 +0000
ROA not before: Fri 10 Mar 2023 15:57:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200197
IP address blocks: 37.230.171.0/24 maxlen: 24
37.230.170.0/24 maxlen: 24
37.230.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:3d:95:85:5b:2e:e8:9c:d9:a4:75:d8:54:c7:32:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Mar 10 15:57:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c6ca67bd5e719e2727147059e056e2246c30a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:20:dc:1b:0b:e1:8e:34:5e:3c:ad:dc:c8:
25:ab:5e:14:90:fd:6a:44:52:00:5e:0f:38:ce:55:
91:94:2e:a1:ec:c9:d5:cc:ef:17:8f:87:8a:c1:f8:
0d:c5:27:92:e9:34:35:45:5c:72:99:bb:cf:c2:20:
26:76:b5:5d:f2:4d:3b:9d:6d:99:21:ad:6b:1e:f8:
5a:39:7e:d5:d0:9d:ca:fb:bc:9e:bc:aa:19:f1:3e:
9f:b6:d9:81:9a:93:5d:53:ee:44:bc:24:18:b1:96:
b5:c7:47:40:fd:03:80:14:9f:34:cd:5a:d8:ce:fa:
36:b7:85:e2:17:7b:38:c3:6a:6b:92:2c:a7:08:bf:
52:10:94:d7:34:49:ef:4a:ba:ce:be:7a:98:e3:c2:
5b:a1:44:cc:7f:70:82:97:88:5a:e6:6c:e4:9e:13:
28:16:54:32:cf:cd:f0:dd:17:31:d0:b5:80:4b:3a:
78:99:81:72:e4:03:61:81:bd:89:10:10:fc:da:70:
74:23:ab:10:f3:67:f9:de:94:69:97:dc:5e:fe:d4:
84:b9:9f:48:1f:33:86:2f:32:ca:ac:5d:f9:00:c9:
30:cf:3e:53:98:a4:96:ab:71:3a:d0:72:5f:93:71:
6c:e1:08:f7:86:ee:02:81:b2:15:e4:6c:71:e7:40:
5f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6C:A6:7B:D5:E7:19:E2:72:71:47:05:9E:05:6E:22:46:C3:0A:38
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/TGyme9XnGeJycUcFngVuIkbDCjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.131.0/24
37.230.170.0/23
Signature Algorithm: sha256WithRSAEncryption
88:f5:54:73:7c:42:b9:cd:af:28:65:50:f8:58:2b:6c:d0:26:
ef:7d:bf:e6:56:51:ba:a2:bd:e6:08:20:93:cb:b9:53:3c:bd:
f8:53:23:bf:1e:18:c2:64:a6:42:d9:53:48:fd:9c:6a:c3:f1:
9e:f5:44:ff:82:ce:fb:ae:bb:b4:b0:c3:63:da:02:07:08:03:
cb:6c:f2:c2:ec:c9:9e:65:a1:7d:5f:82:9a:27:9b:9c:15:ea:
c5:7a:86:22:54:12:7c:fd:b4:45:e2:08:90:ff:a5:91:f1:44:
31:ba:f3:c6:98:ec:b8:5a:5a:49:68:91:b0:d1:b0:75:f1:f3:
ec:af:70:71:e6:b9:4a:3c:02:d3:9f:4f:eb:2d:76:b3:60:15:
0d:dc:e0:86:d4:29:27:f7:88:4e:4f:af:ae:84:27:27:9a:9d:
fd:9e:f9:ca:4e:12:d1:5b:06:d6:2b:17:33:ea:eb:18:89:fe:
01:21:2d:82:c8:c3:5c:70:ac:b7:15:05:77:15:5c:3d:48:8c:
e2:93:cf:c3:f6:f1:94:d7:01:46:20:7f:5a:e9:5f:c8:3e:47:
bf:a0:02:35:1d:a9:bf:4d:5b:82:a5:14:0e:d3:dc:aa:51:91:
a8:d9:80:b0:42:4e:a6:d9:a2:e7:5f:3a:40:be:73:f4:bd:d0:
59:29:02:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 10:57:23 2023 by rpki-client on console-ams.rpki-client.org