Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/e6v-TsyRqs8Sq8w5zKbn_Lqoaho.roa
File: e6v-TsyRqs8Sq8w5zKbn_Lqoaho.roa (raw, json)
Hash identifier: YkR4GyBiKOT4cfMyAKnkHuzTpF+rLYCXqk/IRsf9uO4=
Subject key identifier: 7B:AB:FE:4E:CC:91:AA:CF:12:AB:CC:39:CC:A6:E7:FC:BA:A8:6A:1A
Certificate issuer: /CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Certificate serial: 01856FC282C112931281585F862A757906D1
Authority key identifier: 85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/e6v-TsyRqs8Sq8w5zKbn_Lqoaho.roa
Signing time: Sun 01 Jan 2023 23:54:56 +0000
ROA not before: Sun 01 Jan 2023 23:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210133
IP address blocks: 37.77.174.0/24 maxlen: 24
37.77.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:82:c1:12:93:12:81:58:5f:86:2a:75:79:06:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Validity
Not Before: Jan 1 23:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7babfe4ecc91aacf12abcc39cca6e7fcbaa86a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:03:02:4f:5e:18:de:dd:f0:4c:1a:e2:6a:
13:e0:f2:d6:4a:d6:78:85:6e:0b:4f:f2:e0:3f:9d:
4a:ce:20:cf:5e:41:fc:8d:17:38:41:c8:92:6f:01:
7d:6f:4e:0c:11:d4:e0:e0:ad:a3:5d:bc:b3:4c:e2:
73:4a:b9:4a:23:0e:cf:a7:ca:b5:19:1e:86:13:27:
f3:9e:c0:cb:a2:4f:c4:6e:cb:5c:2e:09:0d:1e:b0:
6c:4d:af:a6:51:9b:b0:86:c5:23:22:16:02:71:b6:
43:f6:a3:cc:84:56:e0:d3:a7:66:64:13:cc:cc:c6:
8d:84:6e:56:b2:9d:45:98:f1:1c:38:42:0f:2a:3a:
70:fc:55:91:c8:0c:a9:db:5b:6e:c3:09:50:b4:67:
f1:49:29:6a:bf:48:01:a2:e7:c1:9e:a3:40:d7:3e:
d0:61:75:7f:70:83:74:ac:ab:bd:56:1c:9d:e5:64:
6c:30:eb:6a:3a:f7:32:e4:92:a5:c0:4a:b2:aa:fc:
d1:32:c9:3f:3f:1c:e0:84:b8:ab:f8:be:9d:ac:6a:
9c:a7:f9:fd:54:e0:c1:83:d6:e4:78:bc:94:4d:18:
6e:86:a6:b6:d7:53:05:71:16:97:37:85:5b:36:90:
06:0b:b0:64:09:9f:89:2c:a4:c0:77:ee:d0:05:72:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AB:FE:4E:CC:91:AA:CF:12:AB:CC:39:CC:A6:E7:FC:BA:A8:6A:1A
X509v3 Authority Key Identifier:
keyid:85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/e6v-TsyRqs8Sq8w5zKbn_Lqoaho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.173.0-37.77.174.255
Signature Algorithm: sha256WithRSAEncryption
4f:48:3f:5c:de:61:e9:61:9d:7f:cb:1d:25:7e:8d:d2:a7:96:
1d:c8:10:ce:6d:85:18:2c:67:89:01:0d:c2:ac:60:17:85:c5:
c3:92:75:c3:6e:5a:a5:f7:db:70:d4:f5:60:c6:ad:a8:aa:7a:
0e:aa:a3:a9:bc:86:d0:e3:4d:06:c0:bb:8d:93:e2:bf:81:db:
8b:b1:03:d0:9d:58:58:b0:df:f2:50:c6:bb:5e:6f:68:7f:7d:
cf:e5:d0:00:8b:d9:7c:d5:5a:c7:0d:8c:0b:35:2f:19:05:23:
98:e7:20:7f:66:5d:f7:26:0e:94:11:ad:72:5e:39:7f:6b:c4:
c7:6e:6f:4e:9d:cf:28:56:e8:8f:62:10:d2:d3:c6:41:44:4e:
89:20:b3:c3:32:93:b5:de:c2:ef:df:5d:b1:21:ca:91:83:ee:
b2:a7:07:1c:24:c5:c2:3e:11:a1:dc:53:9a:b2:d6:6b:93:e7:
6a:b3:40:38:31:52:4f:26:f4:5f:ed:f2:41:30:34:59:2b:3a:
a3:20:af:d2:fc:fb:0d:ec:65:92:c9:0b:81:f0:56:b0:a7:b9:
28:7c:83:e8:a0:53:7c:3b:05:7c:46:57:b2:56:b0:59:43:c4:
b8:b2:f9:2e:4d:73:b9:5c:d5:cf:03:ba:36:ba:2b:28:bc:4d:
9b:a2:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org