Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/Dse5UH05VV_uNoIZFxyQHUUYdIw.roa
File: Dse5UH05VV_uNoIZFxyQHUUYdIw.roa (raw, json)
Hash identifier: 2paPiOMPI9Jgj3KVM1goOUbi5uMD5VSPbORggLCs5SM=
Subject key identifier: 0E:C7:B9:50:7D:39:55:5F:EE:36:82:19:17:1C:90:1D:45:18:74:8C
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01856FF0341E372F619A8417A70F64E9853E
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/Dse5UH05VV_uNoIZFxyQHUUYdIw.roa
Signing time: Mon 02 Jan 2023 00:44:50 +0000
ROA not before: Mon 02 Jan 2023 00:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.44.228.0/22 maxlen: 24
192.145.52.0/22 maxlen: 24
193.219.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Mar 2023 09:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:34:1e:37:2f:61:9a:84:17:a7:0f:64:e9:85:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 2 00:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ec7b9507d39555fee368219171c901d4518748c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:4e:a3:c3:5d:9c:98:8a:fe:b8:92:27:b8:
a5:a1:3d:56:3a:fb:59:57:06:8a:0c:7e:55:d1:87:
d5:69:81:3b:d8:09:cf:90:83:6f:a6:16:5b:09:b8:
99:ff:d2:2b:f1:e5:bf:91:4b:0a:41:7c:44:45:b9:
57:75:b7:8e:8c:52:e5:5a:0c:09:22:ac:5c:cd:4c:
47:11:f7:55:2b:d7:ff:3b:b4:89:aa:70:76:2e:31:
01:5d:97:46:9a:2f:fa:82:b8:fc:7e:6d:64:8e:cf:
77:91:e4:18:a5:e8:b8:75:d8:ab:d2:c4:e5:a4:13:
d6:42:cb:e7:22:ff:21:dd:38:12:13:0a:72:3f:c5:
48:bf:eb:02:8e:c4:36:80:dd:73:69:bd:6f:9a:64:
de:96:18:5d:1a:46:b7:28:fa:b1:f0:a1:75:9f:dc:
36:aa:6c:ea:0d:e6:f7:3a:66:d9:b9:0c:ea:8a:11:
10:07:01:49:c3:af:ca:3c:56:8c:03:64:e3:da:af:
19:1f:47:34:f9:26:c0:b2:e4:9a:e7:cd:98:80:e8:
92:23:36:9d:d9:a7:ae:7b:5f:8c:bb:b6:ed:e1:14:
c5:59:a4:e7:93:4b:42:7e:00:34:3f:bd:59:e2:73:
b1:ef:f1:2b:d5:fa:2f:34:32:8c:51:9d:34:34:3f:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C7:B9:50:7D:39:55:5F:EE:36:82:19:17:1C:90:1D:45:18:74:8C
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/Dse5UH05VV_uNoIZFxyQHUUYdIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
192.145.52.0/22
193.219.99.0/24
Signature Algorithm: sha256WithRSAEncryption
80:04:2c:48:14:fc:78:ce:cf:c8:b8:75:43:f3:85:a8:25:2d:
db:44:35:15:a7:e1:30:7c:41:00:46:6f:53:6b:1f:32:2b:bd:
eb:5e:7a:8f:b9:44:93:d7:61:95:1c:3b:4d:fa:f5:b8:00:ea:
79:46:9c:92:85:98:2c:fe:b7:7f:fd:52:cf:87:4a:28:2e:f2:
ff:24:d2:f1:b9:9c:72:f9:13:e1:6b:3d:17:19:e9:a3:99:0a:
97:02:14:d4:cb:98:7a:76:fb:0f:db:f7:c8:a4:85:4d:14:97:
b2:e3:a7:c3:86:77:2d:de:05:10:46:67:81:4c:29:80:8e:ec:
35:da:a7:dd:de:18:76:d2:18:84:e0:a8:4a:ee:95:92:d0:8a:
cd:a8:a9:7c:77:cd:9b:a1:d6:c7:f7:c9:cd:d0:fc:17:7b:b0:
b5:73:31:3a:cf:69:ad:69:8b:57:ba:5f:f7:74:c1:af:b7:aa:
b7:2d:00:7e:6d:c5:4f:f7:24:93:77:a7:bf:c6:ad:19:83:5f:
8b:83:06:5d:42:f6:a7:ad:5d:91:70:0e:e7:0d:36:5d:5f:e9:
aa:71:60:b0:42:78:2e:fd:76:b4:51:da:ca:a8:25:8a:a9:7a:
8a:1c:e5:b7:ab:53:b0:9b:af:88:8b:00:62:b8:6d:16:90:33:
ec:a8:2a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:08 2024 by rpki-client on console-ams.rpki-client.org