Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/wMNXkDtrmxE4zYUwIr1JpLZT1Ts.roa
File: wMNXkDtrmxE4zYUwIr1JpLZT1Ts.roa (raw, json)
Hash identifier: 2CjEizMt8utEmtwslJ9GhXcydBl+rJsTtloXL0rWAmk=
Subject key identifier: C0:C3:57:90:3B:6B:9B:11:38:CD:85:30:22:BD:49:A4:B6:53:D5:3B
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 01856C412A60BB9E1E7D960F378112EC97D3
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/wMNXkDtrmxE4zYUwIr1JpLZT1Ts.roa
Signing time: Sun 01 Jan 2023 07:34:48 +0000
ROA not before: Sun 01 Jan 2023 07:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 37.1.160.0/21 maxlen: 21
37.252.104.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:2a:60:bb:9e:1e:7d:96:0f:37:81:12:ec:97:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Jan 1 07:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0c357903b6b9b1138cd853022bd49a4b653d53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:df:dc:05:a3:0d:9f:a8:d6:bc:86:c2:8a:0c:
c4:58:23:f5:9c:d8:17:39:d3:a9:3f:21:f0:5f:0b:
7c:5d:bc:ee:53:00:fe:a1:e9:5f:15:c3:d8:99:ca:
7f:15:e3:33:9a:dc:c7:b4:fe:d5:06:59:86:1d:3b:
6f:42:0f:ad:59:96:19:68:d6:94:d7:d9:af:ee:68:
11:b6:9f:1a:b5:c1:e4:ca:6b:bb:2b:1c:5b:84:df:
1f:dc:24:5f:a6:70:0b:76:b1:90:6f:4c:f5:05:f3:
f2:97:a2:15:9e:cc:4f:80:6b:87:c5:af:65:cc:12:
4a:16:77:d4:16:46:8a:db:df:a6:84:12:47:1e:3f:
6e:f7:db:5d:8b:db:0b:14:8e:e1:e8:dc:0e:dc:4a:
b8:88:2d:ef:63:50:0a:43:a7:ff:f5:c0:d4:04:5b:
6a:cb:f2:6d:9f:f8:4f:f6:12:2a:8a:5f:10:b7:49:
25:6e:c7:99:62:25:2e:83:2a:6a:0f:de:1c:23:34:
f2:47:a2:0a:bb:45:08:bc:7f:d8:1a:92:46:e9:55:
c3:4a:f2:8b:c6:f4:15:32:00:8a:1e:e1:72:70:41:
13:7d:3c:57:4e:ae:56:bb:f9:35:d0:14:9d:57:c6:
ba:7e:af:d5:f5:64:08:0e:dd:5e:8b:ee:e5:c4:cc:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C3:57:90:3B:6B:9B:11:38:CD:85:30:22:BD:49:A4:B6:53:D5:3B
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/wMNXkDtrmxE4zYUwIr1JpLZT1Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.160.0/21
37.252.104.0/21
Signature Algorithm: sha256WithRSAEncryption
65:98:08:03:c8:00:c8:cf:cc:4f:8b:37:3b:e0:d7:34:43:1e:
4c:8c:ae:3e:d8:f7:8f:f8:a4:35:25:0a:a9:d6:7c:51:f3:78:
fb:77:7a:40:bf:27:34:6f:03:ab:cf:60:08:96:4d:73:b8:7e:
58:3e:45:9e:f4:b8:b1:45:17:0d:f2:c3:85:ff:ae:0b:d7:d9:
33:eb:3f:4b:c1:4b:78:e9:92:a5:10:74:0a:ac:8f:c1:91:05:
c9:4e:ea:f4:10:75:e3:71:22:b4:e7:7c:35:51:37:c7:a7:81:
6f:7a:64:d4:de:54:e0:9e:3c:3c:87:f9:9b:93:6e:e2:57:9c:
73:7d:d1:cc:15:1c:38:bb:0a:91:a1:15:38:50:28:d9:15:b2:
ab:e8:c4:ed:d5:6c:cb:54:1a:72:50:38:a7:7d:21:a4:bf:44:
36:05:ac:c5:17:f9:6a:5c:29:24:f7:ec:e4:b5:6e:ba:5e:b5:
fe:e1:be:aa:89:7d:63:a0:b5:46:c0:b3:ff:81:ce:05:55:9a:
8f:41:b9:e7:9c:bd:58:99:85:52:da:41:56:98:19:fc:45:8e:
86:d0:7a:e2:d9:4a:34:12:bf:c2:e5:f3:0d:be:f2:07:cc:eb:
6c:ff:3d:ff:72:53:3a:e4:5d:5c:d9:67:44:c3:6d:b8:3f:27:
39:e3:37:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org