Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fHHQhuO2GuU2LpG2D88GOU9iox0.roa
File: fHHQhuO2GuU2LpG2D88GOU9iox0.roa (raw, json)
Hash identifier: pPZymq9M+V8sOrAoooxxPjGg9sGs+k+NeSZrbQEywaM=
Subject key identifier: 7C:71:D0:86:E3:B6:1A:E5:36:2E:91:B6:0F:CF:06:39:4F:62:A3:1D
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A389E6254EEA6F192F8C25ECF6751
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fHHQhuO2GuU2LpG2D88GOU9iox0.roa
Signing time: Sun 01 Jan 2023 03:05:04 +0000
ROA not before: Sun 01 Jan 2023 03:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197309
IP address blocks: 37.230.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:38:9e:62:54:ee:a6:f1:92:f8:c2:5e:cf:67:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c71d086e3b61ae5362e91b60fcf06394f62a31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:19:fe:56:46:10:93:d4:5b:f8:f5:31:2f:
0d:a6:7b:75:09:d0:1b:56:e4:29:5e:29:2b:5e:ce:
06:98:5c:00:c1:ee:52:df:6a:64:79:92:bd:d4:15:
22:9c:f3:cb:58:8c:f7:94:3f:af:f9:bf:3c:b3:d3:
84:a5:c8:b5:cb:da:cd:4a:06:8b:26:dc:e1:42:ee:
c4:94:c9:97:d9:8a:6d:1a:11:76:12:5c:1a:22:c7:
91:b2:f3:c6:f4:5f:33:4d:6b:7c:7a:39:f1:0c:7a:
83:6c:bc:c9:75:44:a3:c8:50:0e:a5:f8:e6:c6:a4:
a8:eb:3c:1e:a1:50:76:42:c8:8b:ba:54:6c:6d:49:
0f:9b:7e:2b:bf:06:96:8d:57:eb:a6:d1:66:74:e4:
63:12:56:e9:5d:74:3d:20:42:2e:14:8e:a8:30:9f:
34:01:ee:bb:d0:bb:5b:32:cf:4e:10:39:ff:b5:bd:
72:9c:85:78:bd:2b:67:1a:68:83:c8:29:1c:22:d5:
98:5f:7d:c1:ef:58:64:8a:0f:fd:fa:fc:57:8d:fd:
c6:52:82:dc:bb:1c:e7:34:74:03:fd:6b:1d:e3:c1:
43:7b:d9:3b:3d:f4:c0:96:81:b6:7d:b0:bb:3a:86:
86:1c:ff:e4:e0:3e:f9:67:35:94:6b:1c:ed:a3:6f:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:71:D0:86:E3:B6:1A:E5:36:2E:91:B6:0F:CF:06:39:4F:62:A3:1D
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fHHQhuO2GuU2LpG2D88GOU9iox0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.162.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:8d:0d:c2:15:ac:ff:59:b6:0d:20:dc:91:77:75:97:18:4f:
4e:e7:85:e5:31:85:ba:14:62:3a:d3:5b:f8:48:f9:5b:82:72:
4a:0b:71:a0:69:01:d9:7a:19:ee:d0:26:77:37:0f:fc:6e:41:
50:f2:9b:a6:e4:12:7a:52:97:62:84:6f:c1:c7:0d:b4:b2:36:
38:38:37:c2:a5:c6:74:fb:62:57:50:4c:59:cc:1b:74:da:da:
e0:5e:2d:09:e2:9c:83:8a:fe:6e:f4:cb:7d:b8:a0:23:ec:92:
bd:dc:51:54:d8:28:8d:36:35:32:95:a1:25:5a:8c:fb:33:fc:
e3:59:79:3a:df:10:cd:c6:dd:f5:ac:da:a7:52:d8:52:22:3b:
f0:e2:36:54:c6:64:d9:e8:ae:d8:2e:87:ac:9a:60:1a:87:ef:
05:18:05:ab:0c:ab:dc:d1:6c:fc:1b:fe:06:e4:ce:81:30:fe:
86:b4:03:c6:72:42:4d:ce:23:45:34:da:77:08:dd:ad:41:99:
20:29:e0:cc:8d:76:20:bc:97:60:12:16:0c:fa:ce:41:da:e2:
17:2c:ed:a8:d0:16:f1:d5:58:7a:26:22:6f:b7:3c:47:9b:ca:
73:5e:8e:dc:21:61:b3:22:72:79:37:2c:d5:58:61:12:f3:e3:
72:e8:70:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:50 2024 by rpki-client on console-fra.rpki-client.org