Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/JX6qf684uyv8jZM-_8_viEl0Ea0.roa
File: JX6qf684uyv8jZM-_8_viEl0Ea0.roa (raw, json)
Hash identifier: BSEmm97w2DjongzjoIKRmNljKrqCMbhcHdut/NVLzJA=
Subject key identifier: 25:7E:AA:7F:AF:38:BB:2B:FC:8D:93:3E:FF:CF:EF:88:49:74:11:AD
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 01856D93D937431F3B064E5908DDF001F671
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/JX6qf684uyv8jZM-_8_viEl0Ea0.roa
Signing time: Sun 01 Jan 2023 13:44:44 +0000
ROA not before: Sun 01 Jan 2023 13:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57840
IP address blocks: 37.209.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:d9:37:43:1f:3b:06:4e:59:08:dd:f0:01:f6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 13:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=257eaa7faf38bb2bfc8d933effcfef88497411ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:d3:63:17:bd:83:d2:d7:b2:8a:bf:4a:17:
c5:bd:0c:f9:7f:c3:86:ac:d3:bd:b4:a7:7f:e6:bb:
05:15:c7:52:a8:11:09:f4:89:f7:2f:da:05:6f:37:
e4:d8:9e:2e:4a:8b:4b:52:6c:7c:bc:5e:bc:85:3b:
40:b9:05:c8:93:bf:50:12:db:41:cf:a5:41:c1:32:
40:f0:39:93:c7:42:8c:12:e6:88:04:34:61:d1:59:
9b:87:ca:e9:81:54:60:c6:3a:10:67:c0:7c:5f:50:
02:f2:e7:1b:9a:53:2c:c1:7e:d7:46:8c:09:86:3e:
b5:e8:f2:fb:76:1b:4d:74:b1:f4:41:42:e4:02:d7:
15:c1:72:2b:0b:50:83:13:bb:49:c0:82:cb:82:4b:
40:54:e5:b2:77:15:27:36:69:4a:c0:73:4a:e0:a1:
e2:f6:23:1c:b7:c9:36:fc:7f:2a:8b:16:dd:e1:d1:
8f:97:23:5d:24:ca:1d:7b:92:b6:7a:66:62:2c:38:
18:12:9c:21:d4:28:03:6c:4e:38:e3:43:6c:c0:21:
a3:50:0f:ad:c1:2e:f3:ba:eb:38:b8:a4:ae:44:7c:
b4:4c:1e:aa:6a:a2:b9:b6:8a:ad:a6:f9:36:72:c5:
e8:16:12:1a:7e:f8:67:23:bd:51:aa:30:a5:77:9c:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7E:AA:7F:AF:38:BB:2B:FC:8D:93:3E:FF:CF:EF:88:49:74:11:AD
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/JX6qf684uyv8jZM-_8_viEl0Ea0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.175.0/24
Signature Algorithm: sha256WithRSAEncryption
75:01:fe:c3:99:d9:b4:46:62:95:1f:48:73:d0:9a:f7:88:d2:
6a:7d:d5:85:b6:93:d0:be:df:d1:6d:df:a6:62:62:da:b5:09:
c6:ca:cc:e7:e5:aa:e0:52:b7:ec:17:a8:cb:b5:d3:cc:62:46:
d0:05:5e:0d:c0:3f:a3:d0:87:4d:2b:11:37:50:d7:2e:32:0d:
79:de:ee:88:ec:78:97:5f:70:62:2a:cc:5a:45:c9:7d:9c:b5:
9c:cd:14:ba:69:d8:34:22:3f:e5:4e:aa:5a:d7:86:be:c2:e9:
e7:7b:d6:f5:25:dc:93:b1:8c:1a:07:dc:31:6f:55:d1:8c:ba:
f0:db:0e:61:b3:2e:fd:05:5a:23:30:09:26:b7:ae:86:5f:0b:
07:a9:85:74:7d:f4:66:68:fc:5c:df:9d:c8:2a:21:c1:e3:39:
36:b4:d5:8c:fc:67:10:95:6f:e4:d9:64:dc:1a:57:12:4e:0a:
6f:75:3f:d6:f8:a7:db:79:d9:95:eb:21:ed:f2:d1:53:11:b4:
73:2e:6f:f8:f2:03:18:9e:62:fa:6c:3d:9f:c9:20:8a:50:74:
e2:2c:e1:fa:6d:2c:c7:78:0f:ec:98:6a:fc:0d:a2:e3:49:40:
47:1a:fa:31:0b:75:e8:9f:b7:06:37:6b:d0:cb:34:50:9d:3f:
7d:fe:e9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:31 2024 by rpki-client on console-fra.rpki-client.org