Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/ISZwuLARnTn8eakukYt8zRuahHQ.roa
File: ISZwuLARnTn8eakukYt8zRuahHQ.roa (raw, json)
Hash identifier: 2n7xmOdnzWsPoDu3x2172z1L06HomT9tAk8AmiPm/jE=
Subject key identifier: 21:26:70:B8:B0:11:9D:39:FC:79:A9:2E:91:8B:7C:CD:1B:9A:84:74
Certificate issuer: /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial: 01856F798F5FB1475600C91521F1DC91AE3F
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/ISZwuLARnTn8eakukYt8zRuahHQ.roa
Signing time: Sun 01 Jan 2023 22:35:15 +0000
ROA not before: Sun 01 Jan 2023 22:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210595
IP address blocks: 37.8.160.0/20 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:8f:5f:b1:47:56:00:c9:15:21:f1:dc:91:ae:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Validity
Not Before: Jan 1 22:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=212670b8b0119d39fc79a92e918b7ccd1b9a8474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:d7:8c:04:71:1a:04:df:d8:85:0c:e2:fb:
c5:84:d1:5a:9b:0a:6e:27:7b:aa:06:a5:49:0a:45:
9a:d7:7d:27:f3:70:00:ac:93:27:44:a3:05:1e:ee:
47:3b:17:57:de:9b:94:46:68:2d:91:a1:32:8f:5f:
4a:53:18:11:52:a8:9d:e5:40:c0:dc:04:f3:a5:2f:
95:0a:77:4b:bc:fa:3f:00:54:85:00:cf:e9:c3:62:
c4:e9:4a:dc:0c:02:2e:17:77:d6:9d:d1:2a:0a:d3:
ee:ae:fe:75:8b:84:24:ed:c4:c6:45:4e:54:51:40:
49:36:76:ab:cc:d6:1d:79:8c:f4:50:b2:d6:22:86:
be:1a:2f:7a:0a:62:6a:6f:43:b8:0d:0e:0d:4b:7e:
97:d3:76:74:da:2e:e1:69:b5:a2:04:4a:3e:d4:47:
49:75:47:02:59:37:d3:e3:1e:44:e8:e4:4e:1c:78:
19:2e:6b:c3:48:20:6c:3f:1a:39:64:c6:ab:18:25:
2a:d0:cc:f6:75:89:d5:57:3e:d8:b8:54:12:d1:9d:
cb:32:21:2d:a2:d2:1d:30:5d:bd:72:26:bc:dc:cb:
c3:99:bb:54:77:bd:a6:d3:1f:e3:2f:6b:bb:a2:7f:
bc:31:5f:34:37:71:b5:9b:69:41:1a:5c:df:2d:46:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:70:B8:B0:11:9D:39:FC:79:A9:2E:91:8B:7C:CD:1B:9A:84:74
X509v3 Authority Key Identifier:
keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/ISZwuLARnTn8eakukYt8zRuahHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.8.160.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:e0:1b:4d:dd:41:8e:07:63:27:e3:98:4d:37:e5:a6:41:e8:
ff:a0:bb:3e:fa:66:47:de:4c:51:0c:11:d9:cf:81:65:62:07:
13:58:6d:1c:b2:57:bd:6d:d4:5b:eb:ad:93:f0:4b:69:77:ea:
88:54:4d:8b:66:18:a3:96:41:03:70:a9:0d:f1:2f:59:83:ac:
4f:77:13:98:68:35:31:00:4a:9b:7f:95:f6:74:22:7a:8d:8e:
79:72:34:4c:d0:a3:34:47:29:6a:04:47:0f:0e:c3:48:0b:c4:
6f:6e:d7:b7:47:a8:e0:84:79:5a:47:69:10:58:98:3d:fa:05:
9c:4b:72:8e:49:d3:ab:11:75:a1:0d:74:3e:1c:b9:f3:78:0a:
56:01:ee:d8:32:63:eb:cb:25:dc:d3:a4:d5:82:dd:cc:80:ec:
03:a2:f5:2e:ca:73:3f:86:cd:48:f6:e6:1f:86:a1:4d:e6:b7:
79:79:d5:54:47:97:b2:e4:bc:78:0a:15:80:7c:7a:f4:6e:9c:
c2:8e:07:41:74:cb:ef:d0:29:12:b8:e9:1f:54:f9:e2:f6:65:
77:d3:7a:fd:03:7b:3b:b8:f3:4d:b7:a8:a9:6b:8f:cc:76:84:
35:02:91:df:d4:e8:c3:a1:cf:38:c5:fe:46:ad:78:62:0b:b4:
63:c1:bd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:10 2024 by rpki-client on console-fra.rpki-client.org