Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/efcICf1X5Dgj-kZ2aShdIFM93pY.roa
File: efcICf1X5Dgj-kZ2aShdIFM93pY.roa (raw, json)
Hash identifier: 6J3/EDO1GN6t+9Ur3vF4CxV3SfBFMJtSjtP7QEhJbf4=
Subject key identifier: 79:F7:08:09:FD:57:E4:38:23:FA:46:76:69:28:5D:20:53:3D:DE:96
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 0186DF44326788E9044571AABD6F5F1E29EF
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/efcICf1X5Dgj-kZ2aShdIFM93pY.roa
Signing time: Tue 14 Mar 2023 08:37:13 +0000
ROA not before: Tue 14 Mar 2023 08:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 185.19.39.0/24 maxlen: 24
37.252.111.0/24 maxlen: 24
37.1.160.0/22 maxlen: 22
37.1.164.0/24 maxlen: 24
37.1.165.0/24 maxlen: 24
37.1.166.0/23 maxlen: 24
185.19.38.0/24 maxlen: 24
185.19.37.0/24 maxlen: 24
185.19.36.0/24 maxlen: 24
185.19.36.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:44:32:67:88:e9:04:45:71:aa:bd:6f:5f:1e:29:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Mar 14 08:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79f70809fd57e43823fa467669285d20533dde96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:22:f8:f2:5e:47:1a:dd:6f:4f:17:0f:b7:
19:d5:4b:72:67:58:54:2d:d7:98:19:bf:58:fd:7f:
3a:f0:19:cb:b8:aa:82:7f:9f:53:2f:8f:61:fc:ac:
6c:45:e3:fc:a1:3b:84:82:6d:c6:b7:45:18:12:d1:
a0:12:71:56:0e:0a:3d:3b:70:4e:ff:d5:8b:86:18:
d8:93:9d:0a:18:31:c7:7c:b3:ae:b4:30:d5:c8:5e:
16:bf:44:a4:65:01:a0:cd:1e:c5:bc:75:02:9a:a6:
6e:fe:b1:dc:d3:7d:53:89:80:3f:fa:7b:44:26:49:
15:21:1f:60:fe:ea:35:31:63:cf:b9:5a:a3:0a:70:
90:76:04:62:9f:a5:31:37:3d:72:59:27:6f:3c:cc:
89:21:14:66:16:9d:2c:45:15:2a:9f:b0:58:65:56:
ea:45:8d:62:74:60:6f:83:87:29:69:bd:88:66:e1:
ef:d3:8c:d0:33:6f:9f:b3:8e:81:ed:a4:f0:6c:06:
1b:99:ec:6a:06:03:80:1c:8f:94:58:5f:0d:76:4c:
3e:a0:af:b8:a3:8e:f1:81:bf:8e:88:7c:6a:b8:15:
ca:05:01:81:b1:8a:b6:f9:07:b5:cf:6f:0c:37:61:
2a:40:de:9e:e0:b2:1f:40:fb:d4:ff:7d:53:86:7a:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F7:08:09:FD:57:E4:38:23:FA:46:76:69:28:5D:20:53:3D:DE:96
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/efcICf1X5Dgj-kZ2aShdIFM93pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.160.0/21
37.252.111.0/24
185.19.36.0/22
Signature Algorithm: sha256WithRSAEncryption
38:60:8b:2e:5a:95:6b:4b:f9:0b:92:97:db:40:a3:d8:db:9b:
99:57:55:03:6f:d4:1d:eb:ed:d2:29:a8:9f:ce:a9:29:a9:90:
fa:10:49:f7:b5:b3:3a:51:e3:fb:7c:99:2a:e1:27:db:de:b8:
08:f9:cc:b4:44:4a:1b:bb:8e:a3:2a:90:2f:2d:7b:9c:d8:1a:
42:aa:ed:83:c3:33:6c:3f:43:6e:81:41:43:99:73:66:f5:24:
27:27:ca:f3:c2:eb:f8:e2:2f:13:34:43:d3:6a:90:41:92:19:
82:d7:a4:95:bd:dc:2f:32:a2:0b:a6:cc:16:ca:e7:b2:05:7d:
5f:f3:13:87:c5:46:e8:72:ce:0c:f2:80:69:e8:93:bc:7d:b4:
81:92:c4:f5:51:eb:3c:06:df:93:f7:80:39:2a:2e:d8:a3:66:
9d:3c:86:bb:ff:c7:5a:ab:71:eb:c4:04:c9:84:5b:f3:c5:c5:
b5:6e:37:f0:9a:3b:55:36:1c:be:46:17:94:1a:f5:a6:2f:77:
b5:9b:12:7d:0b:71:f3:56:b9:67:81:ff:8f:58:51:97:41:eb:
ec:0e:95:6a:14:0a:5e:2a:1a:9f:ee:6e:2a:a3:65:e8:86:bb:
8b:c1:41:e5:b6:b6:86:41:6a:df:ff:b7:00:5d:9e:e3:94:46:
5e:34:4b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 08:11:02 2023 by rpki-client on console-ams.rpki-client.org