Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/pGp5PQfBOzrSLYc28HVE1RKDt7A.roa
File: pGp5PQfBOzrSLYc28HVE1RKDt7A.roa (raw, json)
Hash identifier: qY0jNcNoFVEuKNVDnh3tQzaoHqX0cJ1aOqA9Kcf57rc=
Subject key identifier: A4:6A:79:3D:07:C1:3B:3A:D2:2D:87:36:F0:75:44:D5:12:83:B7:B0
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A4991BB1381769A52078A486CA50D
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/pGp5PQfBOzrSLYc28HVE1RKDt7A.roa
Signing time: Sun 01 Jan 2023 03:05:08 +0000
ROA not before: Sun 01 Jan 2023 03:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210706
IP address blocks: 37.18.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:49:91:bb:13:81:76:9a:52:07:8a:48:6c:a5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a46a793d07c13b3ad22d8736f07544d51283b7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:5d:3b:93:6f:47:be:c2:93:70:11:14:84:
b8:fc:80:46:64:fa:bf:7e:98:70:a0:75:c0:06:14:
e0:e7:16:f3:8f:41:26:e2:5f:b5:33:8e:10:6d:60:
ac:de:24:86:d7:0d:6c:2c:d5:29:55:b3:1e:9d:a9:
63:eb:00:72:02:19:f8:98:c6:f0:cd:50:6c:11:dd:
04:57:29:fe:4a:1a:ee:56:23:3c:6e:b0:eb:3c:5a:
e7:bd:27:9c:03:96:84:d7:9d:ea:79:30:d4:ce:9d:
36:6c:c4:5f:2f:2a:f4:f8:0a:7d:db:0e:19:4d:6a:
23:7b:aa:d7:14:d2:ea:b2:9b:0b:ce:95:b0:42:ac:
09:11:4d:e0:80:c5:7f:c1:a0:92:f5:3f:99:2e:2f:
54:09:8a:98:b0:d2:28:bc:8d:a3:de:5b:7e:89:1d:
35:dc:3b:4a:91:f2:0b:94:f2:57:65:46:83:93:ff:
7a:5b:cd:30:76:46:73:13:37:be:08:19:79:7c:29:
03:da:f8:8c:dd:6b:21:66:c9:ba:c6:30:89:62:98:
1b:8a:fd:4b:d9:5f:78:0f:08:9b:ce:33:0e:bc:ea:
1e:b1:a0:a2:0d:af:96:31:41:94:3d:a4:3f:06:e3:
08:60:eb:88:0b:db:20:14:db:07:93:64:82:df:e2:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6A:79:3D:07:C1:3B:3A:D2:2D:87:36:F0:75:44:D5:12:83:B7:B0
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/pGp5PQfBOzrSLYc28HVE1RKDt7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.18.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:7e:0f:20:c8:17:0a:c6:d3:88:35:87:29:e3:be:83:3a:0b:
17:86:96:ce:98:b2:2d:e4:0c:0e:21:a7:3c:3f:ba:5c:0c:a5:
69:33:c0:0d:fe:ca:03:56:41:2c:c5:1f:13:96:4c:d4:77:a7:
a4:b6:ce:fc:66:a6:3a:b9:f2:d2:16:77:ab:7e:d0:2c:db:6a:
cc:c2:61:d6:b3:fd:03:35:94:11:95:9a:53:1a:7c:ec:ec:cc:
fa:aa:9b:3a:c3:53:17:cc:0d:59:61:72:61:eb:d7:85:cf:a0:
d6:51:42:35:1c:da:03:0d:6e:a9:d2:1a:3f:dd:27:1b:e4:68:
8b:2f:19:7f:31:ac:ba:50:06:78:4b:83:7d:1e:78:b9:49:51:
5e:06:05:f4:4b:3a:28:36:22:c7:23:dd:c3:02:49:19:c0:15:
45:f4:49:ee:6b:62:93:03:b2:d4:e3:16:33:cc:8f:3e:8a:ea:
70:34:d9:7c:dd:49:a1:1b:4e:6d:b6:59:13:4a:f8:ba:84:80:
86:2a:7e:e1:4e:80:c0:45:b5:3d:6f:86:96:67:08:b4:e1:e0:
4b:36:63:6f:b1:9a:19:84:0b:e6:84:1c:65:44:68:f1:cd:f0:
16:dd:8e:ff:7e:b9:48:19:13:b6:2f:a2:a0:9f:b3:50:88:92:
39:dc:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:50 2024 by rpki-client on console-fra.rpki-client.org