Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/r0_qByWRlP2r049nbTNsD8e3yQ4.roa
File: r0_qByWRlP2r049nbTNsD8e3yQ4.roa (raw, json)
Hash identifier: e9xRVosI/QxOcRzn3jWq+ZNOGCphx6ntjYZrVOBHsHA=
Subject key identifier: AF:4F:EA:07:25:91:94:FD:AB:D3:8F:67:6D:33:6C:0F:C7:B7:C9:0E
Certificate issuer: /CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
Certificate serial: 018570E7518FAD8A2C37BC48C7009F4DD018
Authority key identifier: 6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/r0_qByWRlP2r049nbTNsD8e3yQ4.roa
Signing time: Mon 02 Jan 2023 05:14:45 +0000
ROA not before: Mon 02 Jan 2023 05:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 37.77.3.0/24 maxlen: 24
37.77.4.0/24 maxlen: 24
37.77.0.0/24 maxlen: 24
37.77.1.0/24 maxlen: 24
37.77.2.0/24 maxlen: 24
37.77.5.0/24 maxlen: 24
37.77.6.0/24 maxlen: 24
37.77.7.0/24 maxlen: 24
37.77.8.0/24 maxlen: 24
37.77.9.0/24 maxlen: 24
37.77.17.0/24 maxlen: 24
37.77.12.0/24 maxlen: 24
37.77.24.0/24 maxlen: 24
37.77.21.0/24 maxlen: 24
37.77.22.0/24 maxlen: 24
37.77.23.0/24 maxlen: 24
37.77.18.0/24 maxlen: 24
37.77.19.0/24 maxlen: 24
37.77.20.0/24 maxlen: 24
37.77.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:51:8f:ad:8a:2c:37:bc:48:c7:00:9f:4d:d0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
Validity
Not Before: Jan 2 05:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af4fea07259194fdabd38f676d336c0fc7b7c90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:06:ba:be:c7:9d:e7:4c:ad:bc:9e:b9:6d:
e6:df:35:e4:89:b4:7d:b5:65:08:85:f6:1e:3d:6f:
c5:a6:f3:03:0a:ee:34:06:23:c8:1c:ab:f9:fe:42:
9d:e3:4a:08:05:6a:26:93:37:da:5e:42:6e:bd:67:
26:38:13:8c:b2:07:b7:35:21:96:0a:0c:c7:2c:ee:
84:15:24:3e:6f:eb:90:3c:fc:1a:e1:ad:64:1b:2c:
25:92:44:f9:cc:2a:0b:8e:0a:8e:8f:83:f1:c8:32:
fa:9c:3b:fb:d2:d5:7d:da:2d:19:30:23:48:43:1a:
fe:5a:b7:f9:6b:9d:a2:f9:00:32:67:84:26:14:e7:
bc:7a:56:7f:b2:ba:50:f2:4a:4b:09:99:4c:e1:34:
a8:74:90:43:e2:af:aa:01:81:f0:8b:b0:52:d3:7d:
56:d0:58:e5:ba:81:d0:b7:65:86:e4:63:cd:38:ef:
cb:18:6a:ad:c9:b3:c6:73:0c:20:6e:6c:c2:d7:81:
3c:d5:db:49:e5:ac:81:19:84:31:06:bc:e0:d9:8f:
70:0c:f1:c6:22:b6:ae:54:ee:09:55:37:46:14:ee:
c0:ec:e1:66:7c:c1:45:0c:75:2f:94:4e:70:e6:62:
6d:a7:df:9f:3b:cf:37:42:64:a5:c9:af:84:ed:34:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:EA:07:25:91:94:FD:AB:D3:8F:67:6D:33:6C:0F:C7:B7:C9:0E
X509v3 Authority Key Identifier:
keyid:6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/r0_qByWRlP2r049nbTNsD8e3yQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/a4WJSoS6oOyg5u9EqZL8K6APUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.0.0-37.77.9.255
37.77.12.0/24
37.77.17.0-37.77.25.255
Signature Algorithm: sha256WithRSAEncryption
9e:42:ee:99:89:d3:ce:5d:71:0d:e6:d5:3b:1c:b2:3b:23:73:
3f:7e:3a:b0:e8:46:bb:04:bc:26:59:81:d6:78:ac:ab:cf:df:
15:d5:c5:a7:9e:02:d6:ee:7f:75:9c:79:be:e9:60:5c:1f:ac:
04:51:44:91:7b:3c:04:83:28:b3:23:f7:10:a1:a8:11:64:1e:
ef:5f:46:2f:80:c1:d2:0d:48:d6:5f:6f:b3:34:f6:fd:f3:91:
00:51:dc:b0:a3:7f:16:80:54:5e:15:5e:89:ed:26:74:c2:84:
5a:93:01:96:64:3a:9d:55:34:f6:62:7e:8a:15:51:70:66:c8:
cd:99:f6:f3:a8:a5:1d:df:90:7a:fa:c0:2c:7d:54:c2:d5:d2:
ca:a4:d5:60:71:f3:26:d8:8c:04:f4:29:f0:70:ac:cb:f2:21:
b5:5c:17:48:59:68:38:5d:82:61:4b:90:f1:0c:06:84:1b:85:
3a:77:0c:e0:d1:a5:f5:29:59:37:36:f6:ea:45:00:4c:61:02:
4c:ef:3d:5a:32:26:9e:ac:1d:05:76:30:00:f8:61:b3:2a:80:
b6:10:c1:5b:e3:86:39:a8:af:3c:c8:ed:1f:24:51:bf:b1:78:
47:b0:a2:bf:75:68:c8:39:47:a6:f1:38:22:cf:63:2c:6e:8e:
51:25:26:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:40 2024 by rpki-client on console-ams.rpki-client.org