Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvVk555qQiwO_i2aF7Ai4nA0oTU.roa
File: DvVk555qQiwO_i2aF7Ai4nA0oTU.roa (raw, json)
Hash identifier: GD+5+xhvx9HiPzwldKqL9L7ff3337H6vTdE8bk0faYc=
Subject key identifier: 0E:F5:64:E7:9E:6A:42:2C:0E:FE:2D:9A:17:B0:22:E2:70:34:A1:35
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01856F26D926FD929C9B935EC6471F47B398
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvVk555qQiwO_i2aF7Ai4nA0oTU.roa
Signing time: Sun 01 Jan 2023 21:04:55 +0000
ROA not before: Sun 01 Jan 2023 21:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42708
IP address blocks: 37.252.8.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:d9:26:fd:92:9c:9b:93:5e:c6:47:1f:47:b3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 21:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ef564e79e6a422c0efe2d9a17b022e27034a135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1b:60:2f:ae:f0:66:f4:20:a5:3d:4d:25:73:
13:d6:a0:1d:06:e9:95:c4:a7:d7:4c:b6:be:3b:96:
b3:15:6a:e7:8c:af:2c:f5:a3:42:fb:fb:3e:6c:af:
35:5f:df:50:0c:ae:94:40:09:e4:c0:b3:4e:77:b9:
0f:a5:4f:f9:a0:26:dd:c5:86:88:40:d2:a7:df:e1:
8e:e8:c8:af:80:37:5e:f4:dd:d4:6b:df:73:4e:aa:
ab:ce:b7:70:9d:ff:77:3a:2e:a3:6a:3b:f5:e0:4a:
b4:a8:70:4a:0f:b4:4f:0d:51:42:04:94:ab:f3:cd:
4a:d2:f9:de:86:f8:d1:81:1f:f6:64:e2:de:a2:bc:
9f:26:ac:93:d8:46:c3:9a:9d:a9:9a:ff:a5:bc:27:
25:83:66:bb:91:a8:05:6b:b6:ab:fa:7e:2e:cd:85:
81:37:44:e2:7c:47:cf:b9:ca:ea:3f:de:18:88:d3:
33:1e:1d:bc:76:78:8a:bd:17:72:12:c1:5f:a9:ac:
25:d3:ac:cc:9b:3a:63:c4:0b:36:62:67:b9:a2:73:
7f:fc:ee:5d:b4:15:bf:33:79:7d:d8:1a:ae:3d:12:
19:cc:33:24:b3:75:be:a7:d5:02:e5:f7:9b:16:19:
98:0d:60:e9:4c:e1:d7:0c:28:bc:9c:d7:32:60:51:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F5:64:E7:9E:6A:42:2C:0E:FE:2D:9A:17:B0:22:E2:70:34:A1:35
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvVk555qQiwO_i2aF7Ai4nA0oTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.8.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:d6:6a:c3:c7:df:d9:7d:23:69:b1:6f:63:d4:25:7a:87:20:
0e:de:f2:04:d3:ba:9c:ff:85:2b:71:73:8b:0d:3c:2f:46:01:
0f:da:6d:16:a4:3b:e1:82:36:ab:2c:f4:67:d0:29:3e:02:9d:
ad:9c:90:67:04:40:36:6c:93:9a:16:36:c1:6a:ed:92:c1:23:
43:c6:9c:eb:cd:77:c5:e7:8c:36:74:04:0b:06:80:8f:c7:8d:
d6:48:4e:e4:2b:4c:97:99:86:72:b8:de:7b:20:e0:8f:fa:c9:
28:e1:a1:27:02:a5:02:7a:5b:fe:b0:62:75:e2:d0:b1:83:c8:
fd:22:d9:2a:10:32:b8:6a:74:71:fc:6c:8e:40:bb:31:32:74:
65:7a:12:b7:02:e4:7d:67:86:97:d7:aa:23:c4:4f:ef:f5:bc:
56:42:6e:9a:01:7b:68:4f:f1:3e:39:be:4c:9c:7b:a8:cb:c9:
36:f6:b2:70:dd:04:95:7d:c5:ce:7d:9e:76:e1:9d:95:3d:15:
3a:ed:9d:db:33:4a:0e:9a:e9:e3:c7:c2:69:ac:cd:8c:9c:de:
dd:01:ad:a9:49:23:86:cf:e3:4d:7d:8b:fb:02:e9:45:fe:30:
99:a6:ac:ad:b2:91:89:77:39:42:99:a9:c6:2f:c1:69:eb:a8:
3f:26:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:42 2024 by rpki-client on console-ams.rpki-client.org