Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/53n62LxHgbnNTSIn7sVBuEH76X0.roa
File: 53n62LxHgbnNTSIn7sVBuEH76X0.roa (raw, json)
Hash identifier: 7pjgArSBq2UmsO+DNK1n4sdodyL4IWL3t422UA/HoAs=
Subject key identifier: E7:79:FA:D8:BC:47:81:B9:CD:4D:22:27:EE:C5:41:B8:41:FB:E9:7D
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018B5ACFE5C77F86F8FC82DA569CE2930F81
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/53n62LxHgbnNTSIn7sVBuEH76X0.roa
Signing time: Mon 23 Oct 2023 04:34:16 +0000
ROA not before: Mon 23 Oct 2023 04:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3177
IP address blocks: 37.32.44.0/24 maxlen: 24
37.32.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5a:cf:e5:c7:7f:86:f8:fc:82:da:56:9c:e2:93:0f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Oct 23 04:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e779fad8bc4781b9cd4d2227eec541b841fbe97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:9f:cb:4d:12:e0:3a:e1:89:52:1e:65:0f:
e2:6f:3f:80:00:4f:f5:c8:c9:81:e5:fb:68:ca:fc:
65:e6:f7:98:50:8c:9e:0e:c1:ad:10:76:b4:f8:d7:
c4:03:61:e6:9a:9c:94:af:4c:2d:24:ae:73:3b:fd:
ad:e0:c2:9d:16:da:5f:39:89:3c:e9:e4:97:78:f5:
a9:14:9d:18:66:27:10:69:77:96:52:d4:b6:0f:1f:
04:45:e6:a4:26:e7:70:de:62:87:37:52:ae:89:9b:
65:71:79:7b:74:ac:c4:e6:d0:c0:cd:f2:73:a4:80:
34:ee:ce:9b:60:45:bf:d7:5c:ec:50:c0:6e:81:cf:
74:dd:ec:47:29:d9:11:52:1b:66:61:82:59:f8:29:
79:d6:df:8a:69:fd:e1:41:d7:e6:ce:7f:c7:93:a3:
07:da:1c:38:02:a9:18:5f:13:00:09:7a:7d:9c:74:
27:3b:a8:a8:24:c5:0d:b5:13:40:39:00:85:a0:2d:
96:49:46:57:5b:77:45:36:6a:8a:2e:ec:7e:51:5f:
5a:6a:f5:65:ef:ad:57:55:f2:b6:ed:93:1b:33:db:
02:67:47:c2:bc:8e:07:5a:8c:83:9b:3a:69:08:ee:
1f:ef:47:26:de:59:35:5b:39:a7:d5:41:d3:61:59:
78:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:79:FA:D8:BC:47:81:B9:CD:4D:22:27:EE:C5:41:B8:41:FB:E9:7D
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/53n62LxHgbnNTSIn7sVBuEH76X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.44.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:3a:3e:83:28:b3:74:86:d5:26:b0:9a:6c:86:5f:0a:15:62:
17:6a:1f:bf:72:6c:c7:cf:42:05:8d:6b:16:52:ec:66:83:a9:
c9:a3:35:ae:74:35:c7:fb:cf:55:9d:f0:c5:1b:3b:21:7b:25:
d1:eb:41:d5:f9:26:be:b1:55:a7:5c:2c:8d:b8:ac:21:12:c7:
2a:e2:e2:d4:06:13:29:32:f9:b9:81:f7:39:3e:a5:8a:3f:48:
1f:79:99:db:02:b8:71:d6:5c:6b:34:6c:3a:96:df:fd:52:5b:
7d:ae:04:2e:fb:87:f5:99:f9:22:89:75:71:b0:fa:ca:d6:53:
f2:e1:b8:51:87:83:59:7f:60:3a:b4:64:b8:37:70:15:6f:7b:
7f:cf:27:78:b0:0c:e7:71:0e:da:d6:1b:85:d1:89:7a:22:59:
45:ee:7c:f0:5a:55:41:ed:11:49:d5:b3:b4:49:63:7d:c4:73:
e2:70:c3:0e:01:9a:94:24:d3:80:8a:1a:aa:05:0f:5c:7c:cb:
81:d8:7f:ab:35:86:ba:96:20:98:34:95:07:4d:dc:02:22:81:
29:fb:08:20:ca:54:3d:da:a3:bf:08:67:ba:63:0c:68:40:c3:
c7:47:f7:13:4b:5f:4e:e6:25:cf:f2:07:87:a4:61:41:55:ed:
8e:0c:99:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:56 2024 by rpki-client on console-ams.rpki-client.org