Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/g9jqlTHsqoI9bu1yd5KSOfVAclU.roa
File: g9jqlTHsqoI9bu1yd5KSOfVAclU.roa (raw, json)
Hash identifier: M5OBAVmpq2SVR4nK+9Oj7HZDVDO7BoyyO5V7ilLO4Ug=
Subject key identifier: 83:D8:EA:95:31:EC:AA:82:3D:6E:ED:72:77:92:92:39:F5:40:72:55
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01856F26D9A4DAB0E6BC88935CCFEEB5AA2B
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/g9jqlTHsqoI9bu1yd5KSOfVAclU.roa
Signing time: Sun 01 Jan 2023 21:04:55 +0000
ROA not before: Sun 01 Jan 2023 21:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43333
IP address blocks: 37.252.6.0/23 maxlen: 23
37.252.10.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:d9:a4:da:b0:e6:bc:88:93:5c:cf:ee:b5:aa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 21:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83d8ea9531ecaa823d6eed7277929239f5407255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:8b:79:f2:b2:da:71:1e:03:57:9f:2d:c6:
f2:dd:c1:08:f6:65:1b:2a:54:f6:55:b1:b5:d8:23:
e1:d9:7e:af:35:22:ea:9b:a9:18:6a:dd:76:62:66:
c3:13:55:bb:96:4b:d6:7e:2a:ea:1e:88:7f:2e:d8:
f9:9d:6c:29:e8:af:63:e7:88:fc:b9:d6:8b:19:80:
9e:7b:c7:4e:0d:b5:c9:d7:04:8b:3a:f7:d1:eb:b6:
b0:50:a8:4c:c3:57:90:ff:bb:6e:dc:79:c5:99:9a:
a1:ba:aa:38:49:f9:b3:85:5a:9d:f4:10:af:4e:34:
74:24:05:fb:99:ef:43:9e:62:8e:04:f7:07:de:85:
30:9c:c8:3c:64:81:6b:45:71:56:24:1d:a4:49:0c:
b2:82:c1:29:89:03:81:9a:71:8f:05:c1:ca:3c:42:
2f:3a:aa:a3:44:ab:60:62:c8:51:16:4e:eb:62:9e:
a6:0f:be:40:44:d6:73:e0:33:11:7d:d1:f0:d3:29:
b2:5a:b9:82:d7:5d:5a:ac:9b:f5:ac:8a:77:cd:82:
34:f2:ae:f3:2a:78:3a:dd:1a:3a:1f:16:cf:d4:a2:
84:88:77:45:d1:6f:b7:df:0f:84:06:09:26:4a:ed:
cf:02:a0:f3:91:41:6a:83:48:07:c6:9f:0c:40:d2:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D8:EA:95:31:EC:AA:82:3D:6E:ED:72:77:92:92:39:F5:40:72:55
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/g9jqlTHsqoI9bu1yd5KSOfVAclU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.6.0/23
37.252.10.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:fc:43:66:b3:5b:2c:58:71:f7:d6:9d:85:45:74:17:a3:15:
63:8b:63:a1:79:2e:1b:b0:90:6c:db:ae:34:2a:a1:8d:02:85:
77:f5:2f:40:41:82:27:70:a3:46:84:72:86:eb:0a:04:9a:f1:
58:e3:cb:34:85:2d:cc:ab:83:a7:35:9a:3b:a6:9e:3b:84:55:
5b:84:94:bf:bf:33:9a:a5:f5:55:b1:c3:49:3d:53:59:65:fe:
d2:24:21:0a:15:a1:1a:ca:82:1c:00:43:18:66:6f:5b:46:9c:
09:be:05:00:46:8b:5c:1a:68:94:91:8e:36:4c:6d:66:f1:ae:
72:21:06:a7:90:ac:1c:31:2b:9e:93:93:06:2f:2b:ca:e9:6f:
5e:3c:95:af:65:d6:d8:2d:db:45:13:03:38:09:84:d5:4f:03:
2f:aa:e4:2b:75:81:71:9a:e1:e8:35:cc:fa:b9:2b:21:db:12:
4e:0e:ca:77:97:d1:5a:bf:45:ba:9c:da:92:7d:f2:73:dd:ab:
63:b4:47:9d:2b:a1:ad:b8:ec:05:16:ed:f3:eb:14:41:3b:ef:
1a:dc:ca:4f:9a:6a:58:b8:01:17:fa:59:fb:f1:5e:0f:f4:95:
d2:b3:28:10:96:7b:05:c7:09:e5:6a:d0:5c:9a:cc:88:f3:8c:
e8:b5:ee:94
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvJtmk2rDmvIiTXM/utaorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjMwMTAxMjEwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2Q4ZWE5NTMxZWNhYTgyM2Q2ZWVkNzI3NzkyOTIzOWY1NDA3MjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodCLefKy2nEeA1efLcby3cEI9mUb
KlT2VbG12CPh2X6vNSLqm6kYat12YmbDE1W7lkvWfirqHoh/Ltj5nWwp6K9j54j8
udaLGYCee8dODbXJ1wSLOvfR67awUKhMw1eQ/7tu3HnFmZqhuqo4SfmzhVqd9BCv
TjR0JAX7me9DnmKOBPcH3oUwnMg8ZIFrRXFWJB2kSQyygsEpiQOBmnGPBcHKPEIv
OqqjRKtgYshRFk7rYp6mD75ARNZz4DMRfdHw0ymyWrmC111arJv1rIp3zYI08q7z
Kng63Ro6HxbP1KKEiHdF0W+33w+EBgkmSu3PAqDzkUFqg0gHxp8MQNJvTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIPY6pUx7KqCPW7tcneSkjn1QHJVMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEvZzlqcWxUSHNxb0k5YnUxeWQ1S1NPZlZBY2xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJfwGAwQB
JfwKMA0GCSqGSIb3DQEBCwUAA4IBAQBO/ENms1ssWHH31p2FRXQXoxVji2OheS4b
sJBs2640KqGNAoV39S9AQYIncKNGhHKG6woEmvFY48s0hS3Mq4OnNZo7pp47hFVb
hJS/vzOapfVVscNJPVNZZf7SJCEKFaEayoIcAEMYZm9bRpwJvgUARotcGmiUkY42
TG1m8a5yIQankKwcMSuek5MGLyvK6W9ePJWvZdbYLdtFEwM4CYTVTwMvquQrdYFx
muHoNcz6uSsh2xJODsp3l9Fav0W6nNqSffJz3atjtEedK6GtuOwFFu3z6xRBO+8a
3MpPmmpYuAEX+ln78V4P9JXSsygQlnsFxwnlatBcmsyI84zote6U
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:11 2024 by rpki-client on console-ams.rpki-client.org