Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/H8lVNyUfDouiQMQtqXAt6rkZ3cQ.roa
File: H8lVNyUfDouiQMQtqXAt6rkZ3cQ.roa (raw, json)
Hash identifier: C5FTipf0AosaMQ3yu5pxN7ENjdnzT89VDI9j+qaFyFQ=
Subject key identifier: 1F:C9:55:37:25:1F:0E:8B:A2:40:C4:2D:A9:70:2D:EA:B9:19:DD:C4
Certificate issuer: /CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Certificate serial: 01856B40DB20E90E8C9A42B5FECC135E0F99
Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/H8lVNyUfDouiQMQtqXAt6rkZ3cQ.roa
Signing time: Sun 01 Jan 2023 02:54:50 +0000
ROA not before: Sun 01 Jan 2023 02:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58084
IP address blocks: 37.221.185.0/24 maxlen: 24
37.221.186.0/24 maxlen: 24
37.221.184.0/24 maxlen: 24
37.221.188.0/24 maxlen: 24
37.221.191.0/24 maxlen: 24
37.221.189.0/24 maxlen: 24
37.221.190.0/24 maxlen: 24
37.221.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:db:20:e9:0e:8c:9a:42:b5:fe:cc:13:5e:0f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Validity
Not Before: Jan 1 02:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fc95537251f0e8ba240c42da9702deab919ddc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0c:ef:da:83:7c:ae:16:a8:dd:77:69:38:26:
38:97:5a:6d:f8:78:90:22:f1:df:ea:26:ce:95:9e:
cd:d2:83:5f:a5:74:e4:95:26:c1:f6:42:6e:48:6f:
01:99:ef:51:ba:72:80:bc:1d:24:77:7d:20:b2:6e:
85:37:89:d3:e0:ec:47:10:b1:d4:3f:b2:da:77:e2:
6d:c3:1b:5e:fd:21:dd:25:c5:9d:99:51:45:da:96:
48:ef:37:c3:e5:b9:87:67:fe:28:48:4a:79:4a:89:
86:0d:23:79:67:5e:4e:fe:26:6a:39:ac:31:79:69:
19:8c:a2:b8:da:f3:2a:5b:c0:61:51:c6:bf:5f:49:
db:c1:dc:5e:d2:54:72:b4:62:86:5b:0d:b9:c7:99:
75:3c:2c:0a:39:7c:b0:ef:1e:5f:1d:c9:45:37:07:
cc:9b:67:55:01:4d:53:24:8f:3d:e2:38:dd:5e:71:
ab:cd:84:ee:b1:0e:06:cc:03:4b:59:84:c0:9e:5a:
ca:57:c8:93:78:d7:09:54:65:4b:bc:b7:10:7d:1c:
43:43:75:7f:99:75:25:e9:c3:c0:ec:2e:b3:46:1b:
b5:0c:d7:05:e1:bb:d8:1a:83:cb:63:f3:98:c6:85:
df:70:31:12:54:b3:ee:ab:f0:9a:c2:8e:6b:c4:74:
e0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C9:55:37:25:1F:0E:8B:A2:40:C4:2D:A9:70:2D:EA:B9:19:DD:C4
X509v3 Authority Key Identifier:
keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/H8lVNyUfDouiQMQtqXAt6rkZ3cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.184.0/21
Signature Algorithm: sha256WithRSAEncryption
06:ab:80:f8:ed:dc:c6:6c:0e:24:59:8b:bd:6a:83:4b:54:73:
f1:ff:c3:bc:d3:17:92:50:29:d6:7f:07:10:e8:c0:f3:da:db:
0d:ae:a0:ab:df:cf:fa:02:c9:ec:8a:3e:07:bb:77:7f:c8:6f:
22:8b:24:ac:f4:b7:dc:ef:ea:bb:b0:e7:30:44:7e:33:0b:28:
61:52:de:99:57:d5:69:90:b8:36:f0:56:39:2d:55:6c:a7:2b:
5e:63:8e:73:73:6a:78:b1:d6:5f:00:13:eb:e5:ed:c6:31:d1:
3f:76:fe:77:fe:41:7a:6e:d6:00:7e:ca:d7:26:3f:04:72:33:
ff:58:10:50:82:0e:ad:a5:78:f7:f3:59:3e:f0:9b:3f:3c:81:
40:39:86:9e:c1:8a:92:0c:d2:39:dd:72:1b:a7:08:e7:f3:d9:
a5:f8:91:03:9a:57:45:92:82:07:8d:d4:b5:5b:fb:fc:20:b6:
e1:80:57:b5:0a:3e:c8:4e:14:8b:0b:68:e5:84:eb:8f:3f:d8:
d9:fb:0c:43:6e:0f:09:3b:25:aa:e6:50:64:11:5f:40:58:22:
01:19:d6:21:92:6f:d2:59:31:5b:8a:d5:bf:52:d7:79:c8:b2:
a6:75:b0:c9:21:63:44:dd:f2:7c:7e:c6:e0:a5:07:81:85:1e:
c1:2f:87:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-fra.rpki-client.org