Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/owdXDgHvzbTGZf7-w4Y-S8EQpRA.roa
File: owdXDgHvzbTGZf7-w4Y-S8EQpRA.roa (raw, json)
Hash identifier: EKcXn0ky9u/CKOOBXQhQkSWA/pE8pwQBWZxwn1DpxEM=
Subject key identifier: A3:07:57:0E:01:EF:CD:B4:C6:65:FE:FE:C3:86:3E:4B:C1:10:A5:10
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 018F52C72FFAE7B8DA3069134DF937CFA27B
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/owdXDgHvzbTGZf7-w4Y-S8EQpRA.roa
Signing time: Tue 07 May 2024 11:18:56 +0000
ROA not before: Tue 07 May 2024 11:18:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216255
IP address blocks: 37.72.132.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sat 07 Sep 2024 14:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:c7:2f:fa:e7:b8:da:30:69:13:4d:f9:37:cf:a2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: May 7 11:18:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a307570e01efcdb4c665fefec3863e4bc110a510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:c7:ab:74:c6:5f:8c:df:37:00:21:9e:3e:
aa:57:1d:f2:1a:fc:1d:bb:bb:f2:f6:99:c5:3f:38:
eb:4d:b1:18:59:7a:80:87:ac:72:e2:b2:98:85:64:
84:98:95:78:45:30:aa:93:e8:e7:80:cb:9c:63:74:
9f:9b:51:c2:13:27:92:b5:c1:35:57:00:36:d3:23:
5c:f7:12:19:be:cc:f5:03:60:b4:76:60:bf:1d:03:
ff:08:62:3f:d6:94:b9:d6:77:d3:a3:82:52:e3:7c:
49:02:df:2a:f7:10:80:2a:bc:7b:97:75:d0:6d:3b:
a9:ad:44:cb:fb:13:3b:58:4d:82:28:46:fe:ec:66:
5c:f3:f7:98:42:ce:d9:1f:a1:92:f2:7f:6c:3a:c0:
07:d9:4d:c4:4a:5e:4c:aa:6c:fe:2c:39:0a:bb:73:
1a:63:50:59:74:10:97:eb:cb:7f:41:05:5a:51:53:
31:77:0a:a7:6e:0c:a4:d1:00:97:3b:d8:a5:a1:38:
f9:26:26:61:ec:b2:99:16:4f:7c:4b:91:53:fe:85:
2f:1e:91:03:35:c4:09:d5:f4:09:b4:33:e7:ea:f4:
58:ca:f4:f9:27:a5:b9:3c:89:e6:fa:67:15:69:34:
82:f1:80:8c:c1:bb:03:c1:60:38:0b:74:e1:99:10:
9f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:07:57:0E:01:EF:CD:B4:C6:65:FE:FE:C3:86:3E:4B:C1:10:A5:10
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/owdXDgHvzbTGZf7-w4Y-S8EQpRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.132.0/24
Signature Algorithm: sha256WithRSAEncryption
03:95:fd:a4:6c:42:da:b7:af:d2:e8:c9:19:b8:df:f0:63:76:
04:4c:be:40:f8:a2:63:5b:ee:2a:6e:87:06:3f:6c:ca:45:6b:
8b:bc:a6:85:17:b2:a2:2f:72:fa:12:18:e2:8d:3b:9b:0e:11:
c0:2e:0b:1b:7b:27:70:98:a8:24:8c:d0:f3:80:3d:9c:e0:33:
5c:38:93:eb:76:e7:5e:70:79:c1:a0:14:fd:71:cc:55:1b:fd:
cb:57:03:72:38:35:13:76:08:5b:92:f1:d3:0d:a8:2a:4f:bc:
de:9d:67:53:2e:ed:92:2a:10:17:47:16:e0:8f:b1:ef:d1:a1:
5b:31:7b:31:ac:f2:ad:86:42:3f:78:a8:9c:51:53:89:bb:a3:
ef:35:12:56:f4:6f:66:6d:a2:7f:f7:cd:03:cc:2f:3d:bd:73:
5e:5a:bc:f3:24:6b:37:30:06:c4:ff:c1:fb:0d:8b:d4:d0:dd:
58:77:ae:3c:8a:74:d6:dd:17:b0:6c:39:88:23:e4:e8:43:25:
80:8c:7b:89:4c:ca:eb:3c:40:c7:38:ec:2a:08:2f:16:04:b4:
8b:82:7d:f9:b3:03:02:39:41:95:47:ac:73:fa:21:78:2e:36:
6e:1d:6e:c3:ff:a8:54:53:6b:33:60:2f:0b:f8:28:ad:ef:16:
08:a3:6b:cf
-----BEGIN CERTIFICATE-----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Generated at Sat Sep 7 17:17:19 2024 by rpki-client on console-fra.rpki-client.org