Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/W-yJxI7Za8fgr0BZxTp4ASFXhLM.roa
File: W-yJxI7Za8fgr0BZxTp4ASFXhLM.roa (raw, json)
Hash identifier: I9xrlH1xuUW2yP83DwyPsls0b71QwrpYOnnA9MhXS9Y=
Subject key identifier: 5B:EC:89:C4:8E:D9:6B:C7:E0:AF:40:59:C5:3A:78:01:21:57:84:B3
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 01864F1B8B76E7DA50BF50078D7E7DE58653
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/W-yJxI7Za8fgr0BZxTp4ASFXhLM.roa
Signing time: Tue 14 Feb 2023 08:47:30 +0000
ROA not before: Tue 14 Feb 2023 08:47:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 37.1.160.0/21 maxlen: 24
37.252.104.0/21 maxlen: 24
185.19.36.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:1b:8b:76:e7:da:50:bf:50:07:8d:7e:7d:e5:86:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Feb 14 08:47:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bec89c48ed96bc7e0af4059c53a7801215784b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:88:43:5b:cc:87:77:5c:bd:33:2b:ed:6f:
5d:fd:1b:12:cc:eb:25:6b:e7:91:05:4a:1d:84:2a:
da:8a:ec:6b:9e:2e:2d:91:2b:47:21:a7:9c:00:88:
3b:d0:7a:bb:a4:9b:db:dc:5d:38:95:39:18:e4:2e:
b7:0c:b5:01:28:7b:95:79:1c:f7:17:52:15:0d:4f:
71:cd:70:c4:ea:14:51:b8:77:5b:ac:0c:5c:ab:75:
52:01:62:17:af:b6:7b:70:7e:d6:32:6d:76:08:a5:
3a:c8:bc:13:5a:24:76:68:86:40:6c:b2:22:81:62:
cd:89:a0:15:bb:9e:50:10:c9:dc:de:3f:68:5d:4e:
ed:99:32:e2:74:7c:50:41:52:8f:0d:e2:08:5e:c3:
67:b0:5b:6b:ab:14:00:03:66:a3:46:f2:84:5c:ee:
f2:8a:ff:c4:b8:82:3e:80:33:c3:c2:77:59:08:03:
21:9c:69:95:a0:77:cf:16:d6:e3:8e:ef:f9:50:f2:
45:47:b4:35:cc:89:d8:12:9d:f8:97:0e:3e:87:9c:
c7:21:28:33:a9:a3:0a:9f:74:5a:c6:44:61:a4:84:
64:ed:85:7b:bf:26:1d:cf:80:09:97:1a:97:a1:28:
13:f7:32:97:db:9f:61:84:59:6f:15:bf:2d:86:b6:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EC:89:C4:8E:D9:6B:C7:E0:AF:40:59:C5:3A:78:01:21:57:84:B3
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/W-yJxI7Za8fgr0BZxTp4ASFXhLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.160.0/21
37.252.104.0/21
185.19.36.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:36:eb:66:dc:91:43:f0:ce:63:71:d9:b6:02:01:cf:90:d8:
ed:3c:e8:d0:fa:4a:da:9f:b2:87:0d:36:b1:0b:d4:7f:d3:4f:
d6:32:c0:be:35:c6:69:47:24:c9:ac:fb:81:76:e7:57:8f:05:
b8:c6:f0:ae:04:2c:a4:ef:13:7d:1f:85:60:55:81:e0:fe:31:
fc:42:f5:34:1e:88:d4:3e:f1:b9:1e:60:43:3c:e9:92:0a:6b:
09:96:f7:53:34:b9:e5:e5:90:21:ba:0c:c8:8f:ae:19:71:23:
8a:3d:ae:04:89:2b:7b:36:1a:28:47:de:0e:81:34:21:84:aa:
77:85:f7:00:35:9a:6a:c6:96:fd:bd:72:27:d2:55:2a:0d:14:
b9:84:fe:8b:e0:05:1f:d3:da:c1:86:7b:5f:f2:ce:c2:83:c1:
b9:0c:dc:f6:e6:16:97:1c:ea:5c:76:25:05:bc:db:c2:cb:62:
55:5e:6e:c4:ec:4d:82:3b:e9:82:69:07:da:8d:58:f9:8b:dd:
06:ad:08:75:9b:3f:15:d2:de:09:d9:c2:0a:01:f3:cb:86:37:
00:01:26:bf:7f:c2:1c:b4:a6:be:62:1b:90:e0:a2:90:dd:0a:
85:35:a9:ef:1a:5c:60:58:a4:f6:5b:7a:b1:a0:71:4d:ef:b6:
60:ab:12:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:44 2024 by rpki-client on console-fra.rpki-client.org