Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/MXmEOsNHsJwD2NjlprrOMhR82vs.roa
File: MXmEOsNHsJwD2NjlprrOMhR82vs.roa (raw, json)
Hash identifier: s1EArGvPfbd5O+/dcDFJ2pa2DEqrn7mW27sxF+ypV/I=
Subject key identifier: 31:79:84:3A:C3:47:B0:9C:03:D8:D8:E5:A6:BA:CE:32:14:7C:DA:FB
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 01856F0255E598919BF758704462D9836ABE
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/MXmEOsNHsJwD2NjlprrOMhR82vs.roa
Signing time: Sun 01 Jan 2023 20:25:02 +0000
ROA not before: Sun 01 Jan 2023 20:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57811
IP address blocks: 37.247.235.0/24 maxlen: 24
37.247.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:55:e5:98:91:9b:f7:58:70:44:62:d9:83:6a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: Jan 1 20:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3179843ac347b09c03d8d8e5a6bace32147cdafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6a:d2:67:5f:9f:d3:ff:18:68:28:84:d8:c5:
b5:41:a7:7d:78:42:52:18:05:37:f0:d3:cd:5a:2c:
01:86:73:42:ed:8b:d8:d1:b5:44:cc:d5:62:f4:5a:
16:23:a7:e1:a6:f8:46:4a:f8:42:87:b7:d7:6d:a0:
e5:ae:7e:b0:ae:cc:37:85:50:1c:bc:8c:df:6d:8c:
1d:59:37:c2:5e:e3:0e:76:93:99:4b:b8:2a:86:d5:
cb:c8:b6:0b:fb:15:a8:0d:59:0a:df:a9:4a:17:d4:
ee:96:55:f1:a4:4c:c7:a8:58:98:a9:46:ed:6b:97:
48:70:93:f2:2b:46:10:d3:34:91:d3:96:5b:e6:92:
65:0d:72:7c:21:aa:b2:d5:ec:76:b9:37:d9:32:18:
d2:62:61:6a:b2:dc:08:8a:eb:33:65:e9:bf:7b:98:
47:5c:7b:27:77:cd:12:ae:7b:f1:8b:f5:38:10:b4:
0a:59:b3:4d:3e:be:ec:16:24:1a:82:7c:7e:28:3e:
41:d2:31:20:04:de:cf:13:bc:40:2e:bd:d4:60:40:
9e:94:50:7b:cb:d3:7d:0e:fc:28:5e:c8:b2:2b:75:
68:a3:e8:6c:a5:78:45:50:90:2b:68:3b:0e:72:54:
05:d5:dc:94:be:f4:04:db:43:2a:84:27:5e:ba:83:
cd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:79:84:3A:C3:47:B0:9C:03:D8:D8:E5:A6:BA:CE:32:14:7C:DA:FB
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/MXmEOsNHsJwD2NjlprrOMhR82vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.235.0-37.247.236.255
Signature Algorithm: sha256WithRSAEncryption
50:2c:4f:e2:b8:7b:0d:d5:72:2c:f4:c2:fc:c8:98:af:11:bc:
9b:99:dd:8a:ad:d8:c5:12:f0:38:6f:f1:e7:50:ec:7e:9e:66:
06:08:a8:95:f6:ef:8e:eb:9c:a8:82:24:0e:31:94:cd:5f:86:
a9:3d:45:62:2d:74:ad:6e:f0:44:bb:7f:7a:e8:ea:c5:2e:01:
5e:6f:95:4e:1e:ba:c1:34:56:f8:17:e3:80:9d:33:0f:bb:89:
27:bb:28:d0:ab:23:bc:89:07:71:65:04:cb:92:a4:64:86:85:
16:0a:cf:16:84:62:ea:4d:72:13:fe:8f:90:bb:4c:05:30:fd:
85:81:dd:04:96:c4:83:18:3b:e4:a3:ea:d3:b3:12:d0:57:cf:
2b:85:e5:c2:40:65:3e:3a:3b:97:c1:2f:cd:8f:bf:f7:6b:d6:
28:11:bb:1e:2f:1c:28:b1:07:9e:65:9f:a2:4e:dc:84:22:1a:
74:b5:50:4a:0f:48:4b:72:f7:f1:33:6a:3c:31:7f:51:39:c8:
71:30:6c:8e:58:02:13:20:45:a4:ab:d7:29:cf:96:7f:79:a0:
86:01:5b:72:d9:47:73:ee:25:02:b2:13:94:38:ef:b9:e8:1b:
c7:a7:2f:e6:c8:82:b8:24:6e:56:08:7f:f8:ed:d2:bf:04:f9:
aa:ec:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:09 2024 by rpki-client on console-fra.rpki-client.org