Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/5yYa1yblqJwffMgDggRQFe99Xv8.roa
File: 5yYa1yblqJwffMgDggRQFe99Xv8.roa (raw, json)
Hash identifier: e7FVvmiskpmmhgzdZm4du4HqTmiNg3dSFDzhhRZQQRM=
Subject key identifier: E7:26:1A:D7:26:E5:A8:9C:1F:7C:C8:03:82:04:50:15:EF:7D:5E:FF
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0185817C8D7DF5EC69F4CD82B2AE67EF6FD1
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/5yYa1yblqJwffMgDggRQFe99Xv8.roa
Signing time: Thu 05 Jan 2023 10:31:41 +0000
ROA not before: Thu 05 Jan 2023 10:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210818
IP address blocks: 37.32.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:7c:8d:7d:f5:ec:69:f4:cd:82:b2:ae:67:ef:6f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 5 10:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7261ad726e5a89c1f7cc80382045015ef7d5eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ff:f7:60:c8:fa:c7:dc:60:89:cd:0c:34:04:
ec:f9:e1:cf:35:16:f9:f3:17:3c:4b:d1:92:b6:aa:
ba:3e:76:dc:ab:23:72:b6:f0:d5:18:d4:23:89:d8:
b6:11:7b:1b:59:00:75:59:1b:73:2c:1e:01:d8:e0:
92:c3:80:66:ea:b6:1f:ca:c6:b0:e1:f8:9b:4c:fe:
80:91:b2:dd:2e:cb:cf:dd:ce:13:6f:3d:de:b1:a6:
b8:ad:b0:93:d4:a3:9f:b8:84:62:fd:23:63:eb:a8:
b8:e5:16:c0:e9:4d:91:49:61:74:91:85:3e:00:2d:
10:09:36:00:8a:aa:11:b3:37:f9:be:90:43:9b:a0:
5c:65:a9:08:42:02:08:e2:09:3f:5e:31:92:b3:df:
78:51:f8:39:e4:00:e3:cc:96:d4:43:d9:fc:42:60:
49:8f:9b:d5:61:b1:ac:d5:c2:ba:7b:63:be:05:f4:
53:60:b2:8f:ef:d5:bb:83:54:44:04:e7:07:95:40:
dd:81:35:00:75:6d:dc:3b:c0:72:e6:e7:c7:57:32:
5d:7e:8a:a6:7a:bd:0d:93:5c:40:d1:c2:c7:7e:30:
38:12:6e:c0:ea:a5:bb:21:93:88:c7:53:7d:da:0c:
66:89:86:13:2d:97:52:c7:83:0c:ef:a1:81:3d:c2:
92:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:26:1A:D7:26:E5:A8:9C:1F:7C:C8:03:82:04:50:15:EF:7D:5E:FF
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/5yYa1yblqJwffMgDggRQFe99Xv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.43.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a3:ca:c2:b5:55:7f:c0:ef:23:ac:d4:ba:5b:46:7b:29:1e:
27:b3:30:ae:61:13:9b:df:05:9b:96:f5:48:56:83:8e:a7:c6:
1a:9c:12:9c:79:0a:f0:a6:32:b3:52:1f:51:67:55:e4:2d:b3:
d2:c4:16:ce:42:53:b5:5c:3f:ab:7c:40:57:4b:50:88:cb:6d:
19:c8:72:3f:19:29:20:c0:6b:cc:4b:85:82:51:97:33:c7:45:
8e:af:20:00:43:bd:8a:cc:1d:fd:c9:fd:67:f0:d9:d2:94:fa:
fc:50:81:6b:e7:14:db:0b:02:53:c9:88:2e:e1:ce:d9:de:74:
fb:be:53:1f:91:a2:41:9e:f6:f7:85:6f:6e:b2:ba:38:47:07:
fc:6f:db:59:3b:c1:fa:d3:9a:f4:b8:bd:a5:09:8d:60:79:d1:
5f:63:b1:0b:db:33:9d:48:05:b0:a9:6b:a5:b1:4f:9c:be:e4:
5f:58:44:b2:a9:d2:41:23:ed:96:40:98:db:0f:36:8b:d4:2b:
d8:e0:10:fe:09:97:b5:d6:cc:de:f2:66:d1:fc:45:77:17:c2:
6a:1e:f4:9d:ba:86:99:56:62:9e:49:1d:2d:1b:5d:b5:c1:e4:
81:ad:a4:12:6b:8e:9e:0e:6d:8b:0d:0f:e9:5a:12:50:ba:f3:
77:4e:b8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org