Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IVj77thNq1hzhqD0Irc9ze9_Y7g.roa
File: IVj77thNq1hzhqD0Irc9ze9_Y7g.roa (raw, json)
Hash identifier: c6mDzx4rI3Dl5q+aUXShkGbacsyg4oEoq2ET55ugsBg=
Subject key identifier: 21:58:FB:EE:D8:4D:AB:58:73:86:A0:F4:22:B7:3D:CD:EF:7F:63:B8
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 018709066599AE7A9569124422553282ED33
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IVj77thNq1hzhqD0Irc9ze9_Y7g.roa
Signing time: Wed 22 Mar 2023 11:13:46 +0000
ROA not before: Wed 22 Mar 2023 11:13:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 137.174.32.0/21 maxlen: 21
137.174.84.0/22 maxlen: 22
155.204.64.0/20 maxlen: 20
137.174.0.0/21 maxlen: 21
137.174.0.0/17 maxlen: 22
155.204.80.0/21 maxlen: 21
155.204.96.0/21 maxlen: 21
137.174.16.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:06:65:99:ae:7a:95:69:12:44:22:55:32:82:ed:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Mar 22 11:13:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2158fbeed84dab587386a0f422b73dcdef7f63b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5a:81:c4:f2:3c:6c:18:37:b4:fd:e5:42:4c:
d2:92:71:1b:d3:5e:01:5a:24:75:ee:57:d4:97:d7:
b6:44:20:20:f4:0a:83:59:cd:a3:31:0a:af:8c:38:
25:44:87:04:b7:66:c8:24:a5:59:a2:38:59:f6:65:
1e:d3:ca:bf:21:14:21:89:2e:99:5a:0b:a1:c2:27:
da:c9:3a:06:1d:e0:ee:b2:bc:23:82:2c:62:58:c5:
dc:a0:b5:5f:df:84:f1:05:99:e9:77:81:ab:2e:20:
ce:9b:ba:e3:b7:b6:aa:00:61:6d:ed:93:2b:13:1b:
4e:c7:0f:c3:c8:c1:35:8b:23:ad:0e:fe:96:86:c6:
a5:61:7e:96:85:d0:46:83:b8:42:8a:be:3c:53:5d:
9e:ed:9b:06:c9:9b:61:61:f7:bb:dc:37:34:e2:45:
0a:69:34:09:26:03:9b:92:e2:ac:1b:36:56:04:61:
5c:48:ab:9f:5b:aa:7e:aa:4a:2b:5f:5d:3c:45:7c:
4b:2b:11:59:5a:e4:fe:d2:22:ff:c3:c9:8a:c5:83:
64:d5:63:49:c8:18:b1:51:85:38:d6:0c:d8:f0:09:
f2:6a:82:34:9f:49:0f:81:fb:60:42:7f:c5:1e:2b:
f9:68:08:88:f5:8e:b6:7d:4f:68:25:54:f2:24:50:
e5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:58:FB:EE:D8:4D:AB:58:73:86:A0:F4:22:B7:3D:CD:EF:7F:63:B8
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IVj77thNq1hzhqD0Irc9ze9_Y7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.0.0/17
155.204.64.0-155.204.87.255
155.204.96.0/21
Signature Algorithm: sha256WithRSAEncryption
95:39:5b:7f:5e:63:57:5e:9f:b4:6f:3c:b9:9a:e3:0f:fb:fe:
6e:9d:ac:13:d1:40:ee:a0:4e:32:90:2a:05:a4:f9:60:12:b4:
e2:10:e4:1c:9c:18:db:44:e1:d3:63:b9:54:ff:dc:c9:66:04:
e7:d3:8d:b3:dd:ce:0e:2a:85:e7:c7:4a:df:f4:82:47:64:e7:
70:15:23:65:1e:23:f9:ce:c1:b9:f4:d8:c5:52:fb:67:f5:8d:
37:77:2a:86:5d:8e:e6:29:bb:b1:d7:0b:90:5a:e4:e9:99:31:
7e:25:6f:31:51:9c:e9:83:fc:f6:ee:ad:06:26:fa:5b:d8:09:
c8:78:88:c2:45:57:7e:51:aa:90:f8:0d:fb:b6:fa:fb:73:2a:
29:76:35:9b:1e:c5:bf:7c:a7:7a:d8:83:f0:09:06:ac:52:3c:
f7:43:4e:cf:77:d5:14:ea:21:99:ad:e8:ac:5a:71:5e:de:67:
60:d7:cf:ae:3d:65:d1:1d:df:66:80:82:7e:93:56:9d:b6:cc:
f3:1d:6e:2c:c6:e8:fd:b8:86:eb:b0:0a:c5:b2:89:84:09:10:
6d:14:83:cc:92:bb:b6:39:bb:dd:fe:e5:3b:e5:0d:a9:81:e6:
b7:61:25:cc:cb:0d:90:96:e5:87:bf:45:1e:db:1e:01:77:ad:
46:4e:66:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-fra.rpki-client.org