Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/23W5W6WrlJgIfeUvJsrIgLYyUnE.roa
File: 23W5W6WrlJgIfeUvJsrIgLYyUnE.roa (raw, json)
Hash identifier: 8CpwA+cIl7OMcs9nX2HUf/z8k4sda3dy9HtYIDfTmVA=
Subject key identifier: DB:75:B9:5B:A5:AB:94:98:08:7D:E5:2F:26:CA:C8:80:B6:32:52:71
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0188FC12E6D3879D88724DA05511A047FE52
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/23W5W6WrlJgIfeUvJsrIgLYyUnE.roa
Signing time: Tue 27 Jun 2023 08:57:57 +0000
ROA not before: Tue 27 Jun 2023 08:57:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200088
IP address blocks: 37.252.6.0/23 maxlen: 23
37.252.10.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:12:e6:d3:87:9d:88:72:4d:a0:55:11:a0:47:fe:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jun 27 08:57:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db75b95ba5ab9498087de52f26cac880b6325271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:06:7f:38:5b:02:4d:7c:94:9b:c0:c4:1b:
b0:ed:e3:ea:55:25:a6:7e:68:cb:19:1c:05:6e:bf:
24:c5:b0:6d:19:ee:45:6d:a7:65:c9:e6:d3:52:79:
97:1b:2f:7f:82:69:ee:1b:9d:31:d0:03:ed:34:57:
e9:03:5e:2f:8b:b3:c3:8e:5f:c3:91:bc:cf:45:64:
ae:4a:66:66:f1:1c:0d:4e:8e:59:4b:ed:f8:47:47:
12:b7:69:6f:cb:29:0b:c8:99:5d:a2:db:9e:5d:42:
2b:58:e5:c5:74:1d:b8:a7:d0:fb:27:57:9a:b5:63:
34:54:f5:56:c4:9c:26:c5:7d:b3:5d:b6:ed:ab:ae:
2d:35:c9:4b:9d:df:ee:c8:f2:12:6b:16:40:bb:ff:
8a:b4:1b:d8:96:5b:f6:02:c8:79:c5:a9:58:a0:9c:
4b:b5:0a:3c:74:1d:46:86:78:31:55:71:b9:45:81:
97:b1:a0:4d:de:ff:70:08:1e:03:da:05:9b:a0:ec:
cb:b5:73:b9:89:89:27:f3:15:12:62:47:2b:17:ae:
b6:cc:d2:17:1d:8f:05:2f:be:1d:1f:80:0f:c0:55:
01:59:52:dc:5e:22:d2:8d:99:af:80:d0:9d:14:52:
33:44:fe:72:b2:65:aa:7a:ea:de:73:d6:12:cf:79:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:75:B9:5B:A5:AB:94:98:08:7D:E5:2F:26:CA:C8:80:B6:32:52:71
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/23W5W6WrlJgIfeUvJsrIgLYyUnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.6.0/23
37.252.10.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:bd:03:b6:60:7c:b4:87:19:d2:f2:91:ed:fc:18:77:10:f7:
f9:f9:c4:aa:70:69:6d:a2:cf:11:31:5d:54:e3:3d:9c:31:32:
c6:7f:4e:5b:fd:32:b3:91:67:d8:05:4c:29:2d:a0:f3:08:df:
e0:7f:50:0f:3d:86:1d:89:db:49:f3:77:c3:85:53:62:6d:27:
63:e1:8e:14:f0:75:18:8e:90:b0:90:1b:d8:ff:a6:b1:6d:10:
ce:31:a4:f7:01:e6:09:84:f0:10:ca:5d:e2:bd:90:a1:0e:b0:
6c:b5:ac:29:73:08:35:5e:9a:31:36:14:eb:50:9d:90:88:bd:
9d:66:e7:be:01:16:d7:70:24:f1:79:24:33:05:18:49:51:7c:
9d:ff:ed:b6:ab:3e:cb:4c:f8:bc:d2:26:72:a2:28:39:2d:44:
5c:a8:68:8f:68:a7:41:b2:49:0b:87:e3:55:51:eb:e4:e9:45:
6f:6f:92:58:49:9b:8b:55:83:ac:80:13:0b:1a:9f:59:ed:96:
bd:3e:02:d0:92:a8:d1:50:5c:7c:63:cb:b9:f6:66:db:60:22:
89:98:79:44:43:5b:f3:d9:a5:ff:8e:18:da:96:9a:8c:75:c8:
88:d4:88:ed:fb:b9:0e:5e:fc:d8:0b:87:cf:9b:91:8f:6d:23:
12:7d:5a:3f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYj8EubTh52Ick2gVRGgR/5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjMwNjI3MDg1NzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjc1Yjk1YmE1YWI5NDk4MDg3ZGU1MmYyNmNhYzg4MGI2MzI1MjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b8GfzhbAk18lJvAxBuw7ePqVSWm
fmjLGRwFbr8kxbBtGe5FbadlyebTUnmXGy9/gmnuG50x0APtNFfpA14vi7PDjl/D
kbzPRWSuSmZm8RwNTo5ZS+34R0cSt2lvyykLyJldotueXUIrWOXFdB24p9D7J1ea
tWM0VPVWxJwmxX2zXbbtq64tNclLnd/uyPISaxZAu/+KtBvYllv2Ash5xalYoJxL
tQo8dB1GhngxVXG5RYGXsaBN3v9wCB4D2gWboOzLtXO5iYkn8xUSYkcrF662zNIX
HY8FL74dH4APwFUBWVLcXiLSjZmvgNCdFFIzRP5ysmWqeurec9YSz3mObwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNt1uVulq5SYCH3lLybKyIC2MlJxMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEvMjNXNVc2V3JsSmdJZmVVdkpzcklnTFl5VW5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJfwGAwQB
JfwKMA0GCSqGSIb3DQEBCwUAA4IBAQAbvQO2YHy0hxnS8pHt/Bh3EPf5+cSqcGlt
os8RMV1U4z2cMTLGf05b/TKzkWfYBUwpLaDzCN/gf1APPYYdidtJ83fDhVNibSdj
4Y4U8HUYjpCwkBvY/6axbRDOMaT3AeYJhPAQyl3ivZChDrBstawpcwg1XpoxNhTr
UJ2QiL2dZue+ARbXcCTxeSQzBRhJUXyd/+22qz7LTPi80iZyoig5LURcqGiPaKdB
skkLh+NVUevk6UVvb5JYSZuLVYOsgBMLGp9Z7Za9PgLQkqjRUFx8Y8u59mbbYCKJ
mHlEQ1vz2aX/jhjalpqMdciI1Ijt+7kOXvzYC4fPm5GPbSMSfVo/
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:58 2024 by rpki-client on console-fra.rpki-client.org