Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/4M9rr0sueto_np-o_nozVDtl3BQ.roa
File: 4M9rr0sueto_np-o_nozVDtl3BQ.roa (raw, json)
Hash identifier: KquwiIb9LYRnCEMT2yYXKRR9jnQ3LPrOUEhEffcSs2k=
Subject key identifier: E0:CF:6B:AF:4B:2E:7A:DA:3F:9E:9F:A8:FE:7A:33:54:3B:65:DC:14
Certificate issuer: /CN=3862e6de0e31e8d28a937c012b602885ac935d15
Certificate serial: 01856FE720DB65B5F8C61565E1AA4CCADCF0
Authority key identifier: 38:62:E6:DE:0E:31:E8:D2:8A:93:7C:01:2B:60:28:85:AC:93:5D:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGLm3g4x6NKKk3wBK2AohayTXRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/4M9rr0sueto_np-o_nozVDtl3BQ.roa
Signing time: Mon 02 Jan 2023 00:34:56 +0000
ROA not before: Mon 02 Jan 2023 00:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201080
IP address blocks: 37.60.156.0/23 maxlen: 23
37.60.155.0/24 maxlen: 24
37.60.158.0/24 maxlen: 24
37.60.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:20:db:65:b5:f8:c6:15:65:e1:aa:4c:ca:dc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3862e6de0e31e8d28a937c012b602885ac935d15
Validity
Not Before: Jan 2 00:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0cf6baf4b2e7ada3f9e9fa8fe7a33543b65dc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:2b:53:76:e9:34:bc:55:e4:52:03:af:ea:
f4:53:57:fc:5f:22:b5:0a:4b:cc:e0:fd:47:b6:b9:
3a:ba:60:34:07:a5:fb:cf:5a:fa:4a:f4:07:b3:7b:
99:9e:e5:79:9f:19:e6:c2:7c:91:f6:19:c2:4c:9c:
95:7a:d0:f5:12:4c:47:6e:9a:a9:d4:c7:a5:84:ce:
97:9a:0e:ff:5a:e8:ac:00:0a:ce:3f:ea:6c:10:b2:
ca:7e:78:a3:dd:7e:10:f9:ff:b5:d3:d3:ce:1a:a1:
db:f7:fc:ea:d9:35:e7:36:4e:ee:26:90:da:73:3e:
5d:91:96:0e:9e:0c:92:6e:fe:63:b9:dd:05:ce:98:
bf:84:83:31:8e:0b:9f:28:44:8c:3e:26:8a:bf:69:
b5:da:64:f5:3a:a6:e3:9d:ed:e2:14:cc:b5:e3:a1:
2f:13:c4:a8:95:3e:e2:f6:46:6d:81:6d:14:08:05:
8f:d4:6e:41:f8:2f:cd:42:dc:28:5a:cd:3d:17:6e:
2d:04:f1:97:8a:88:68:c7:4c:dc:97:18:2f:32:76:
f9:86:c9:2f:58:d1:cd:da:9e:eb:6f:a2:f7:c2:d0:
8e:af:9c:99:6d:cc:4d:5c:06:22:53:8c:e8:b2:eb:
e6:27:2e:7e:49:29:cd:a7:f7:5d:c8:b0:14:06:0f:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CF:6B:AF:4B:2E:7A:DA:3F:9E:9F:A8:FE:7A:33:54:3B:65:DC:14
X509v3 Authority Key Identifier:
keyid:38:62:E6:DE:0E:31:E8:D2:8A:93:7C:01:2B:60:28:85:AC:93:5D:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGLm3g4x6NKKk3wBK2AohayTXRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/4M9rr0sueto_np-o_nozVDtl3BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/OGLm3g4x6NKKk3wBK2AohayTXRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.155.0-37.60.158.255
Signature Algorithm: sha256WithRSAEncryption
a4:46:0a:12:f2:cb:33:75:d1:77:a3:a6:18:50:ab:8a:57:79:
d1:c5:f2:fd:90:f7:43:68:72:fc:15:b1:4b:ac:b8:cc:81:0b:
d7:50:fa:a5:86:37:f2:91:3a:eb:db:50:59:fd:ac:a5:69:88:
85:65:0d:38:2f:42:89:f7:13:86:f3:08:9f:42:37:ba:ce:be:
de:66:34:d2:ab:8a:56:ec:de:c1:da:cc:5f:93:00:39:1a:a0:
25:79:b5:70:f0:e2:35:58:19:28:ab:5f:7a:fd:3f:c2:82:3b:
75:0e:b0:eb:9a:31:51:a1:18:66:cf:f1:55:ee:ff:ac:c2:25:
0a:87:11:ca:5d:c1:d1:2b:1f:47:d4:57:e4:3f:14:15:1d:e0:
70:68:a4:45:e0:6a:7d:0b:5c:7b:95:84:3b:08:a1:47:55:e8:
9b:87:ed:99:c6:e0:27:d7:b0:ec:f9:7a:46:cc:8e:0c:ac:24:
fe:94:7c:5f:d7:54:93:15:0c:ff:1e:18:c3:16:50:b8:a3:08:
35:e1:f7:c2:4c:ed:88:ed:40:c8:38:ca:20:b7:09:e7:a6:4e:
1c:ac:d5:07:0e:af:40:b0:45:1f:7b:b1:b3:a5:a9:94:f7:76:
9a:31:1c:8a:ae:08:c6:83:c0:1b:7c:de:0f:a1:10:c9:7d:bf:
df:e9:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:28 2024 by rpki-client on console-fra.rpki-client.org