Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/k21btp8DKes-PBfb3HQrna5h8zg.roa
File: k21btp8DKes-PBfb3HQrna5h8zg.roa (raw, json)
Hash identifier: sgpjt1QkoZUZCf8O0Ju/Z9DB2JxcaPPCW8XPjSILldw=
Subject key identifier: 93:6D:5B:B6:9F:03:29:EB:3E:3C:17:DB:DC:74:2B:9D:AE:61:F3:38
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A309FAB0BB152A834AD4CFA064B34
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/k21btp8DKes-PBfb3HQrna5h8zg.roa
Signing time: Sun 01 Jan 2023 03:05:02 +0000
ROA not before: Sun 01 Jan 2023 03:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58071
IP address blocks: 37.230.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:30:9f:ab:0b:b1:52:a8:34:ad:4c:fa:06:4b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=936d5bb69f0329eb3e3c17dbdc742b9dae61f338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:7e:b4:b1:54:67:d6:08:3b:02:70:7c:32:
ba:d9:f0:29:4b:39:f1:04:c4:d0:28:fb:d7:b4:10:
e7:02:88:27:da:0c:20:5e:52:ad:02:55:d4:fe:c7:
05:4c:52:0a:c4:c6:35:a2:57:26:76:47:e2:e5:c4:
4d:59:c4:17:df:2d:6c:16:c7:8e:6b:59:b4:d9:a1:
7d:7e:e6:92:5e:58:69:34:f3:8d:63:61:f5:e6:47:
49:64:de:cd:a4:ab:17:2c:24:b3:bb:3a:dc:60:8d:
c4:51:00:f2:60:97:a2:9d:45:e6:23:3a:88:ed:5a:
df:2d:c9:9c:49:eb:3c:96:27:5c:c1:45:78:3b:bf:
e8:c5:c5:2e:19:c6:c4:7f:3c:7e:a5:76:bf:a4:4c:
42:17:e3:90:a9:dd:65:c7:33:6e:1a:1c:ea:bc:23:
c7:8e:f7:0d:8e:13:d1:7a:c6:c4:f2:22:55:50:0b:
43:41:a5:af:6e:4b:87:65:eb:52:15:4f:62:6d:d9:
5c:af:6c:f0:df:98:c5:6f:23:ae:f1:17:57:93:2e:
92:fe:a5:07:62:38:99:b2:f1:ed:ee:67:3d:2b:f7:
76:d4:37:06:d0:6f:e2:01:63:6c:fe:62:23:40:fd:
7c:2b:3e:fa:81:eb:54:2c:51:b7:73:cb:f5:de:b3:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6D:5B:B6:9F:03:29:EB:3E:3C:17:DB:DC:74:2B:9D:AE:61:F3:38
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/k21btp8DKes-PBfb3HQrna5h8zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:07:60:ba:ee:3b:0e:3a:10:ab:f0:7d:91:26:64:61:cd:76:
64:4f:35:23:90:62:8a:46:3e:9b:eb:21:bb:53:46:d5:1f:f5:
2f:da:01:7b:d1:89:65:2b:7e:b1:9d:d3:f6:db:ee:65:cb:49:
a3:de:77:78:65:8d:3c:74:14:e8:b5:02:a1:0e:87:19:f8:e3:
d3:51:75:da:73:d7:8b:87:f5:6c:9b:6b:47:82:cd:31:c5:5e:
ce:b7:23:92:63:ee:27:60:de:88:f5:19:95:10:4b:49:ff:80:
c4:8f:91:a3:56:24:b2:6b:84:65:56:c6:11:08:9f:ce:44:4e:
25:18:4e:28:42:7f:1f:85:56:b3:22:9c:0d:58:52:21:2e:c6:
fd:9c:0b:02:50:81:bf:ce:a0:42:61:96:5f:89:e9:4f:63:a8:
da:0b:13:12:fa:ec:82:b7:ec:52:95:91:2f:e7:d9:94:b5:9b:
1c:b5:d1:b2:72:2d:3b:65:d7:6f:72:06:0b:25:38:7e:d8:95:
4e:1c:12:48:3c:4f:93:7b:a0:19:25:f7:da:2c:8f:59:28:c7:
ee:90:7d:d0:3e:be:12:31:9f:09:d2:14:94:23:8a:e1:ff:e2:
79:24:93:16:17:38:36:fb:b4:31:ed:0b:41:40:1a:71:2e:d0:
5a:57:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:50 2024 by rpki-client on console-fra.rpki-client.org