Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/T_9uE5NhU7_U2zPeVvZl7eiUYJE.roa
File: T_9uE5NhU7_U2zPeVvZl7eiUYJE.roa (raw, json)
Hash identifier: 6twXyecD7YdFU46xCyP1GkSuRMSDZWW1vL2It0Fn+Fc=
Subject key identifier: 4F:FF:6E:13:93:61:53:BF:D4:DB:33:DE:56:F6:65:ED:E8:94:60:91
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A3D3088BF9B0826FE1C805892A71C
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/T_9uE5NhU7_U2zPeVvZl7eiUYJE.roa
Signing time: Sun 01 Jan 2023 03:05:05 +0000
ROA not before: Sun 01 Jan 2023 03:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201825
IP address blocks: 37.230.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:3d:30:88:bf:9b:08:26:fe:1c:80:58:92:a7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fff6e13936153bfd4db33de56f665ede8946091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:84:3a:b2:51:34:01:b4:ac:6a:d9:f6:0e:
d0:71:fa:76:a1:27:55:3a:14:a2:71:5b:75:0b:b8:
b4:dd:53:ea:f5:5b:70:4b:03:cf:a8:30:5c:3b:90:
0a:d9:20:66:80:14:cc:8a:d6:37:49:9d:7a:65:52:
0b:25:36:7f:2d:27:d3:15:2e:4d:5a:b8:46:3c:65:
b2:c4:45:32:af:ce:ca:0d:39:20:45:d8:91:f0:a7:
c9:c9:55:fd:12:35:25:3e:13:fc:f0:c7:62:e4:94:
a3:58:f1:89:43:a5:03:42:df:8c:ab:94:63:41:4f:
c0:4e:69:ae:5f:35:0d:11:13:a1:5e:ae:40:7f:cc:
d5:34:aa:97:b2:b4:e4:a7:b8:cd:c6:b3:4b:18:3f:
a9:8f:95:9f:78:e9:21:94:a3:ca:01:a2:c7:6f:44:
e1:27:71:3a:5e:e3:03:35:06:4b:51:be:0d:95:c5:
12:37:ab:2a:78:ef:8d:df:bc:0c:52:5e:07:36:29:
ef:6c:c4:4a:54:4e:01:7a:05:0f:d9:fb:30:23:28:
88:6e:14:2f:0f:0c:2a:07:f1:63:76:69:ce:5e:9d:
7f:3f:51:e1:cf:70:fb:89:52:07:c4:60:2c:20:97:
dc:64:b5:54:b1:56:c2:5c:91:cd:76:1d:86:20:da:
97:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FF:6E:13:93:61:53:BF:D4:DB:33:DE:56:F6:65:ED:E8:94:60:91
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/T_9uE5NhU7_U2zPeVvZl7eiUYJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.237.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ad:c2:2a:67:b7:e4:11:05:24:13:03:b8:72:dc:fc:af:83:
32:47:74:f8:36:23:92:93:89:57:1f:8c:4c:d6:86:66:d2:90:
0a:0d:47:cb:25:a8:0e:93:2d:8f:21:a7:a2:35:c8:b2:87:e3:
59:09:98:31:76:c3:7b:0d:2a:f5:63:96:8d:38:01:bc:a9:e7:
6a:98:f6:3a:9e:7d:ca:b5:80:e4:e8:22:2c:d7:b4:54:a1:72:
05:6e:eb:f6:37:24:80:df:88:f9:c7:55:8e:6e:df:e7:89:ca:
b0:2d:92:8c:55:1c:40:37:2f:7c:3a:01:4c:4d:1b:69:48:a7:
e1:0d:36:4d:ed:36:53:79:c7:a7:8f:8f:f8:d1:4a:4c:88:f2:
57:9d:ac:d8:91:00:9e:a7:b0:37:7b:be:08:fa:90:73:ca:94:
73:e6:96:e7:68:08:69:df:76:71:5a:0e:6c:8e:f7:4d:58:1a:
4e:4c:ef:5a:ae:c3:6b:7f:76:38:f2:2f:ee:ff:ff:34:be:f7:
a5:e3:2c:75:9e:2d:cb:bc:b6:ab:94:65:0c:a6:67:f0:09:58:
54:ed:27:9f:f1:d5:f1:b4:85:e6:bc:3a:f2:1b:6d:8b:98:e3:
4e:14:27:74:d3:ab:91:7d:fd:2b:d0:3c:ab:08:c2:a8:5e:cf:
34:48:07:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org